Soulinterlace
Privacy notice
Version: 2026-10-10
Controller
The controller is Paul Baumgart-Ouahid, Schauinslandstr. 136b, 79100 Freiburg, Germany. Contact me at mail@soulinterlace.com or +491631730879. This notice covers visits to the website, account use and personality analysis orders.
Hosting and server logs
The website runs on server infrastructure I administer. Requests involve necessary connection data such as IP address, requested file, time, browser, operating system and errors. This enables delivery, abuse prevention and troubleshooting. Article 6(1)(f) GDPR applies; the legitimate interest is secure, reliable operation.
Account and birth details
Registration uses your name, email and a hashed password, together with sessions and any email verification or two-factor security details. This provides and protects your account under Article 6(1)(b) and (f) GDPR. Required details are necessary to create the account.
A personality analysis uses name, birth date, time, place, coordinates, time zone and language. Calculated facts, interpretations, reports, audio, processing status and necessary error information are stored to provide the requested service under Article 6(1)(b) GDPR. Place search and underlying calculations run locally without AI. Do not enter health information, diagnoses or other particularly sensitive data.
AI interpretations and audio
Necessary inputs and calculated facts may be sent to OpenAI for wording, or through OpenRouter to the selected model provider. OpenRouter forwards the request. For speech generation, the personality analysis text is sent to Google through OpenRouter. This processing supplies the ordered text and audio under Article 6(1)(b) GDPR.
Interpretations are generated automatically. They are not scientific diagnoses and this platform does not use them to determine employment, credit, insurance or comparable rights.
External AI and speech services may process data outside the EEA. Such transfers must meet Articles 44 et seq. GDPR and be covered by an applicable adequacy decision or appropriate safeguards, such as EU standard contractual clauses. Contact mail@soulinterlace.com for recipient and safeguard information. Provider privacy notices are linked below.
Orders, payment and invoices
Orders and billing involve the order reference, service, language, total, discounts, billing identity and address, country, email and payment status. Article 6(1)(b) GDPR covers contract performance; Article 6(1)(c) covers statutory documentation. Lago handles billing and Stripe handles payment. They receive the contact, address, order and amount information necessary for those purposes. Checkout does not send them birth details or personality analysis text. Payment instrument details are entered directly with the payment provider.
Contact and withdrawal
I process contact details and messages to answer enquiries under Article 6(1)(b) GDPR for contractual or pre-contractual communication, otherwise Article 6(1)(f). The legitimate interest is handling and documenting enquiries. Online withdrawal records name, contract reference, confirmation email, declaration and receipt date and time, and sends these to me for handling. You receive a receipt confirmation. Article 6(1)(c) GDPR covers this statutory obligation. Login and reasons are not required.
Cookies, tracking and external services
Essential cookies support authentication, sessions, language choice and request protection. The configured inactivity timeout is 120 minutes. Required device storage relies on section 25(2)(2) TDDDG; associated personal data processing relies on Article 6(1)(b) and (f) GDPR. Optional advertising measurement loads only with consent; see the dedicated section below. No external fonts are loaded. External links lead to another provider’s website. Future additional services require updated information; unnecessary tracking requires prior consent.
Retention
Account and personality analysis data remain while needed for account use. Settings allow export and account deletion after identity checks. Deletion removes associated personality analyses from the active application. Enquiries, logs and backups are kept only as needed for handling, operation, security and troubleshooting, subject to legal retention and legitimate legal-defence interests. Active deletion does not remove every lawfully retained backup simultaneously.
Required invoices are treated separately. The application provides for eight years from issue; statutory period calculations and longer duties prevail. Withdrawal and claim records remain until handling is complete and, where necessary for legal defence, until applicable limitation periods expire.
Your rights, objections and consent
Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability. You may object to legitimate-interest processing for reasons specific to your situation, object to direct marketing at any time and withdraw consent prospectively. Contact mail@soulinterlace.com. Necessary identity checks are proportionate. You may complain to a supervisory authority without contacting me first. The authority for my location is the Baden-Württemberg data protection commissioner, Heilbronner Straße 35, 70191 Stuttgart, poststelle@lfdi.bwl.de. You may also contact the authority of your habitual residence or the alleged infringement.
Privacy choices and browser storage
Your choice stays for 180 days in the host-only hs_consent_soulinterlace cookie. Settings are available in the footer. Optional advertising measurement starts only after consent. Open reading sections stay in sessionStorage until the tab closes.
Advertising measurement with Meta (optional)
Where configured on this domain, Meta Pixel loads only after explicit consent (section 25(1) TDDDG and GDPR Article 6(1)(a)). The recipient is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Events measure page and offer views, free registration, checkout entry and confirmed payments, with actual EUR value and a random or pseudonymous event identifier. Meta receives IP address and browser information. If Conversions API is enabled, the server sends these details with the same event identifier. We do not send names, email addresses, birth data, form contents, order numbers or reading contents. The Pixel runs in an isolated document without access to these contents; automatic matching and automatic events are disabled. Only preapproved campaign source, campaign and creative identifiers are retained within this domain for up to 30 days, as are delivery diagnostics. Minimal flags on orders and accounts prevent repeated delivery. Campaign identifiers are not transferred between the German and international domains. Rejecting is equally available; withdraw at any time using Privacy settings in the footer. This stops further delivery and removes associated campaign context. Withdrawal cannot recall data already sent. Meta may process data in the USA and use it for advertising measurement and its own purposes under its privacy notice. See Meta for retention, rights and its transfer mechanisms. Declining does not affect account use or purchases.
Reviews
For reviews we store the associated account and personality analysis, display name, rating, text, consent and moderation status. With your consent, only the display name, stars, title, text and publication date are public. You can withdraw publication from your account. The personal review reward is linked to your account.
Adviser applications and public profiles
For adviser applications I process account details, profile information, photo, expertise, languages, session formats, prices, contact link, training details and references. This supports your application and requested profile publication (Article 6(1)(b) GDPR). Training details and references are stored encrypted; uploaded documents remain private and are available only to you and authorised administrators. Selected profile information and the photo are published only after approval. Changes require a new review; you may hide your profile at any time. Reviews and approvals are recorded for quality assurance (Article 6(1)(f) GDPR). Account deletion removes the profile and related files, subject to statutory retention duties.
Your selected session languages are saved in your account and used to show advisers with at least one shared language. These preferences are private and can be changed in your account at any time.
Gift vouchers and bonus codes
For gift purchases I process the buyer account, order, gift and bonus codes, and reservation and redemption status. A redeemed code is linked to the recipient’s personality analysis order. This fulfils the contract and prevents repeated redemption (Article 6(1)(b) and (f) GDPR). The buyer does not receive the recipient’s birth details or personality analysis content. Greeting cards also store the chosen occasion, optional message and optional signature. Anyone with the card link can view these details. Optional email delivery also processes the recipient’s name and email address, invitation text, email language, delivery time and delivery status. Replies go to the buyer’s account email. Optional redemption notices go to the buyer and include no birth details or analysis content.