Privacy

The controller responsible for processing personal data on this website within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR/DSGVO) is:

SIFAT Road Safety GmbH · Brunsbütteler Damm 448 · 13591 Berlin · Deutschland

Tel +49 (0)30 52 00 18 112 · sales@sifat.de · www.sifat.de

Managing Directors authorised to represent the company: Alois Schwarz, Alexander Orlandea

Register court: Berlin Local Court (Charlottenburg) · HRB 107998 · VAT identification number: DE254636409

Further information can be found in our legal notice.

Data protection concerns personal data (Article 4(1) GDPR (DSGVO)) — meaning any information relating to an identified or identifiable natural person. This includes, for example, names, postal addresses, email addresses and telephone numbers, and, where applicable, usage data such as your IP address.

Data is transmitted using encryption (TLS/HTTPS). We implement technical and organisational measures to protect your data against loss, destruction, manipulation and unauthorised access. Our employees are bound by confidentiality obligations and required to comply with data protection legislation, and receive regular training.

This website is provided through Lovable. The current Terms of Service name Lovable Labs Incorporated as the contracting party. The provider’s privacy notice names Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, Sweden as its privacy contact. The entity acting as processor for our contract still needs confirmation from our contract documents. Lovable operates the website and uses infrastructure subprocessors. See the Lovable subprocessor list and Lovable privacy notice.

Accessing the website requires processing connection and usage data, including IP address, date and time, requested resource and browser/device information, and depending on the request, referrer, error and security data. Continuous anonymisation of IP addresses is not guaranteed. The legal basis is Article 6(1)(f) GDPR (legitimate interest in the availability, stability and security of the website).

Retention: Lovable does not specify a generally binding number of days for operational and security logs. It retains them as necessary to operate and secure its services, and potentially longer when investigating security incidents. We currently have no contractually confirmed deletion period for this website. The published data processing agreement distinguishes these logs from customer personal content: the latter may be retained as needed during the agreement and returned or deleted following a written request, subject to legal and security exceptions. Deleted data may temporarily remain in backups.

If you contact us by email or telephone, we process the information you provide (including your name, company, email address, telephone number and enquiry) to handle your enquiry and, where applicable, for follow-up communication. The legal basis is Article 6(1)(b) GDPR (DSGVO) (entering into or performing a contract) or Article 6(1)(f) GDPR (DSGVO) (legitimate interest in responding to your enquiry).

We delete this data as soon as it is no longer required for the purpose of processing, but no later than upon expiry of the statutory retention periods (generally up to 10 years under the German Commercial Code (HGB) and Fiscal Code (AO) for contract-related correspondence).

Contacting us and providing personal data are voluntary. Please provide only the information necessary for your enquiry. Without contact details or the necessary information, we may be unable to respond or prepare a requested quotation. You can still browse the rest of the website.

At the root address, we select the language using the IP country code provided by hosting, falling back to the browser’s language preference when unavailable. Our website code does not contact an external IP lookup service or separately store IP addresses or country codes for this purpose. Explicit language-specific URLs remain unchanged. When you choose a language, the session cookie ‘sifat-language’ stores only de, en or es until the browser session ends or you delete it. Your choice takes priority. Automatic language selection is based on Article 6(1)(f) GDPR (language-appropriate delivery); storage of your expressly requested language preference is based on Section 25(2)(2) TDDDG.

We use cookies and comparable technologies only with your consent (Article 6(1)(a) GDPR (DSGVO), Section 25(1) of the German Telecommunications and Digital Services Data Protection Act (TDDDG)), with the exception of technically necessary cookies (Section 25(2) TDDDG). You may withdraw your consent at any time via the cookie settings; this does not affect the lawfulness of processing carried out before consent was withdrawn.

No analytics or marketing services are currently integrated into our website code. The website stores cookie preferences under “sifat-cookie-consent” and chat history under “sifat-chat” locally in your browser. Neither entry currently expires automatically. Reset preferences in the cookie settings, delete the history using “New conversation”, or clear your browser’s website data. See our Cookie Policy.

Use of our chat assistant is voluntary. Your messages and up to the last 30 messages of the conversation are sent through our website to the Lovable AI Gateway (provider information in the hosting section). It uses the “openai/gpt-6-astra” language model from AI provider OpenAI. The submitted text, any personal data you include and technical request data are processed. The website does not send separate name, email or account fields to the model. Do not enter health information, passwords, payment details or other sensitive information.

The legal basis for answering is Article 6(1)(f) GDPR (legitimate interest in answering voluntary enquiries), or Article 6(1)(b) for pre-contractual enquiries. You can browse the rest of the website without using the chat. Responses are generated automatically and may contain errors. We do not use the chat to make automated decisions with legal or similarly significant effects. Binding information is available from sales@sifat.de.

Model-provider retention: the Lovable model catalogue retrieved for this project classifies the Responses endpoint in use as “zero” (Zero Data Retention). The request also sends “store: false”, so no retrievable response/conversation history is created through this API. These statements concern the model endpoint; they do not mean that hosting or the Lovable AI Gateway stores no logs. See Lovable AI and the OpenAI privacy notice.

Gateway retention: Lovable provides a project dashboard with the model, status and cost of AI requests and, where available, redacted request and response content. According to the Lovable AI documentation, full request and response content is retained for 90 days when “AI app context” is enabled, with secrets removed automatically. Whether content capture is enabled for this project is not yet confirmed; this period must not be assumed for all metadata. The documentation states that summaries are recorded even without content capture; their specific deletion period is not confirmed. We do not create our own server-side chat database; this does not guarantee that service providers only process content temporarily.

Browser retention: conversation history is stored under “sifat-chat” in LocalStorage without automatic expiry until you select “New conversation” or clear your browser’s website data. Closing the chat window does not delete it. Local deletion does not automatically delete data already sent to service providers. Contact sales@sifat.de for access or deletion requests.

Recipients of data required for hosting and AI processing are Lovable and its relevant infrastructure and AI subprocessors, including OpenAI for the current chat. Processing may take place outside the European Economic Area, particularly in the USA. Exclusively European processing is not currently guaranteed for this website.

Lovable’s published privacy and data processing terms identify the EU Standard Contractual Clauses under Implementing Decision (EU) 2021/914 and, where required, additional assessments and safeguards for transfers outside the EEA. The data processing documents, recipient legal entities, processing locations and transfer safeguards actually applicable to our contract still require final confirmation; linking general provider terms does not replace this review. You may request information or a copy of the safeguards relevant to your data at sales@sifat.de.

The fonts used on this website are served locally from our own server. No connection is made to servers operated by Google or other font providers.

Our website may contain links to external third-party websites. The respective providers are solely responsible for their content and data processing. We do not disclose personal data to third parties without a legal basis.

Links to our division websites, LinkedIn, Instagram, Facebook, YouTube and Google Maps are ordinary external links, not embedded social media plugins, videos or maps. Opening a link takes you to the respective provider’s website, where its privacy notice applies. Borlabs Cookie is not integrated into this website.

We do not send unsolicited advertising (spam). We use emails to respond to your enquiries, confirm orders and provide requested information. If you no longer wish to receive a message, please let us know informally — you may object or withdraw your consent at any time.

We process personal data only for the purposes stated in this notice. Data is disclosed to third parties only where this is necessary to perform a contract, you have given your consent or there is a legal basis (e.g. an order from a public authority or court). Processors are carefully selected and bound by contractual obligations in accordance with Article 28 GDPR (DSGVO).

Personal data is stored only for as long as necessary for the stated purposes or as required by statutory retention obligations (in particular under the German Commercial Code (HGB) and Fiscal Code (AO)). The data is then routinely deleted.

Storage locations must be considered separately: browser storage until manual deletion, the current AI model endpoint with Zero Data Retention, and hosting/gateway logs under the provider rules described above. A blanket promise of “no storage” or one deletion period for all locations would be inaccurate.

You have the right at any time to access (Article 15 GDPR (DSGVO)), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on legitimate interests (Article 21). You may withdraw any consent you have given at any time with effect for the future (Article 7(3) GDPR (DSGVO)).

To exercise your rights, simply send an informal message to sales@sifat.de. You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR (DSGVO)) — the authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

Requests to exercise your rights are generally handled free of charge and answered within one month of receipt. For complex or numerous requests, this period may be extended by up to two further months under Article 12(3) GDPR; we will inform you of the extension and its reasons within the first month. Where we have reasonable doubts about your identity, we may request additional information necessary to confirm your identity and prevent unauthorised disclosure (Article 12(6) GDPR). The exceptions in Article 12(5) GDPR apply to manifestly unfounded or excessive requests.

We reserve the right to amend this privacy notice to ensure that it always complies with current legal requirements or reflects changes to our services. The new version will then apply when you next visit our website.