This privacy notice explains how AR Commerce Guru LTD processes personal data when you visit andreas-rieger.eu, contact Andreas Rieger or interact with the independent advisory practice.
We aim to keep the website technically simple and to collect only information that is reasonably required for operating the site, understanding the usefulness of its content and communicating with prospective and existing clients.
1. Controller
The controller responsible for the processing described in this notice is AR Commerce Guru LTD, Nikolaou I. Nikolaidi Ave. 10, Pittakeio Court, Office 305, 8010 Paphos, CYPRUS.
Registration number HE 423388. Managing Director Andreas Rieger. Email hello@andreas-rieger.eu.
The website presents the independent advisory practice of Andreas Rieger, Independent Executive Advisor.
The contractual and legal entity responsible for the processing is AR Commerce Guru LTD.
2. Legal Bases for Processing
We process personal data only where a lawful basis applies.
Depending on the circumstances, processing may be based on:
- Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract or to perform a contract
- Article 6(1)(c) GDPR where processing is required to comply with a legal obligation
- Article 6(1)(f) GDPR where processing is necessary for our legitimate interests or those of a third party and those interests are not overridden by your rights and freedoms
- Article 6(1)(a) GDPR where we specifically request and receive your consent
Our legitimate interests include operating and securing the website, responding to legitimate business enquiries, understanding the reach and usefulness of our published work and improving our website and advisory practice.
3. Website Hosting and Technical Delivery
The website is published using infrastructure provided through Lovable and related hosting and edge infrastructure.
When you access the website, certain technical information must be processed in order to deliver the requested page and to maintain the security and stability of the service.
This may include:
- IP address
- date and time of the request
- requested URL
- referrer, where transmitted by your browser
- browser and device information
- user agent
- HTTP status information
- technical error and security information
The purpose of this processing is the secure, stable and efficient delivery of the website, troubleshooting and prevention of misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is operating a secure and reliable website.
The exact retention period of infrastructure and edge logs depends on the relevant technical provider settings. Technical information is retained only for as long as necessary for operation, security, troubleshooting and applicable legal obligations.
Where infrastructure providers process personal data on our behalf, they act subject to the applicable contractual and data-protection requirements.
4. Contact Form
The website provides contact forms in English and German.
If you use a contact form, we process the information you submit in order to respond to your enquiry.
The current forms collect:
- name
- email address
- organisation, where provided
- message
- language of the form
A hidden technical honeypot field and a temporary rate-limiting mechanism are used to protect the form against automated misuse.
The form submission is processed server-side. No separate database record of the enquiry is created by the current implementation.
Where your enquiry concerns a potential engagement, contract or existing client relationship, the legal basis is Article 6(1)(b) GDPR.
For other legitimate business enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is receiving and responding to communications addressed to the advisory practice.
5. Email Delivery through Resend
Messages submitted through the contact form are delivered using Resend, a transactional email service provided by Plus Five Five, Inc.
The data contained in the enquiry is transmitted server-side to Resend. This may include:
- name
- email address
- organisation, where provided
- message content
Your browser does not establish a direct connection to Resend merely by viewing the website.
Resend states that customer data, including message content and delivery logs, is stored in the United States.
According to Resend’s current Data Processing Addendum and GDPR information, transfers from the European Economic Area are supported by the European Commission’s Standard Contractual Clauses and Resend’s participation in the EU-US Data Privacy Framework.
Resend acts as a processor for customer content processed through its service, subject to its contractual terms.
The legal basis for the underlying communication is Article 6(1)(b) or Article 6(1)(f) GDPR depending on the nature of the enquiry.
6. Direct Email, Telephone and WhatsApp Contact
You may also contact us directly using the email address, telephone number or WhatsApp link provided on the website.
If you contact us by email or telephone, we process the information you choose to provide in order to respond to the communication.
Where the communication concerns a potential or existing engagement, the legal basis is Article 6(1)(b) GDPR. Other legitimate business correspondence is processed on the basis of Article 6(1)(f) GDPR.
The WhatsApp element on this website is a normal external link. No WhatsApp or Meta script, widget or tracking technology is loaded merely because you visit our website.
A connection to WhatsApp or Meta is established only if you actively select the relevant link and leave our website. Once you use WhatsApp, the processing performed by WhatsApp is governed by the terms and privacy information of that service.
7. Plausible Analytics
We use Plausible Analytics to understand how our website and published content are used without relying on conventional advertising or cross-site tracking.
The provider is Plausible Insights OÜ, Estonia. Further information is available in the Plausible data policy.
The current implementation does not use analytics cookies, Local Storage, Session Storage or persistent visitor identifiers.
We do not use Plausible to build persistent individual visitor profiles or to recognise visitors across unrelated websites.
As with any browser request to an external service, technical connection data such as the IP address and user agent is necessarily transmitted when the Plausible request is made.
According to Plausible, raw IP addresses and full user-agent information are not stored. Instead, the service uses short-lived technical information to generate aggregate website statistics without persistent identifiers.
Plausible states that visitor data is processed and stored in the European Union.
The information analysed may include:
- page views
- visited pages
- referring source
- general browser or device information
- approximate geographic statistics
- aggregate usage statistics
The current website code does not intentionally send names, email addresses or individual customer identifiers to Plausible.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is understanding the reach and usefulness of our published work, improving the website and making informed decisions about content while avoiding invasive tracking technologies.
8. Google Search Console
We use Google Search Console to monitor and improve the technical visibility and performance of the website in Google Search.
Search Console can provide information such as:
- search queries associated with the website
- impressions in Google Search
- clicks
- click-through rates
- average search positions
- indexing information
- technical search and crawl information
The current implementation uses a technical google-site-verification meta tag to verify ownership of the website.
This meta tag is inert markup. It does not execute Google JavaScript, does not itself establish a browser connection to Google and does not set cookies or other browser storage.
No Google Analytics, Google Tag Manager, Google Ads or other Google tracking script is currently used on this website.
Search Console data is generated through Google’s operation of its search service and made available to us for the verified website property.
Our use of this information is based on Article 6(1)(f) GDPR. Our legitimate interest is monitoring the discoverability, technical health and search performance of the website and improving the accessibility and relevance of its content.
Google’s own processing in connection with Google Search is governed by the Google privacy policy.
10. External Links
The website contains ordinary links to external websites and services.
These may include links to:
- Commerce Guru
- ThePromptMonk
- external publications
- sources referenced in essays or research
- other third-party websites
Ordinary external links do not cause those third parties to receive information merely because you view our page. A connection to the relevant provider is established only if you select the link.
Once you leave our website, the privacy terms of the relevant external provider apply.
We do not currently use embedded LinkedIn, Meta or other social-media tracking widgets.
11. No Payment Processing, Accounts or Newsletter
This website currently does not provide:
- online payment processing
- checkout functionality
- user accounts
- login functionality
- newsletter subscriptions
- marketing email registration
- embedded booking systems
Accordingly, no personal data is processed by this website for these purposes.
If such functionality is introduced in the future, this privacy notice will be updated before or at the time the relevant processing begins.
12. No AI-Based Processing of Website Visitors
The website discusses artificial intelligence as part of Andreas Rieger’s professional work and published research.
The website itself does not currently submit visitor data to OpenAI, Anthropic, Google Gemini or another AI API and does not provide an AI-based user feature.
Website visitors are not profiled or evaluated by an AI system merely because they use the site.
13. Service Providers and Recipients
Depending on how you interact with the website, personal data may be processed by service providers required for operation and communication.
These include in particular:
- Lovable and related hosting infrastructure
- Plausible Analytics
- Resend for delivery of contact-form messages
- the provider of our business email infrastructure
- professional advisers, accountants or other recipients where required for business administration or legal compliance
Service providers acting as processors are expected to process personal data only within the applicable contractual and legal framework.
We do not sell personal data.
14. International Data Transfers
Some providers or their subprocessors may process information outside the European Economic Area.
Where a recipient is located in a country covered by an adequacy decision of the European Commission, a transfer may rely on that decision.
Where required and no adequacy decision applies, appropriate safeguards may include the European Commission’s Standard Contractual Clauses and supplementary safeguards.
Resend is a US-based service provider and states that customer data is stored in the United States. According to Resend, relevant transfers are covered by its Data Processing Addendum, the EU Standard Contractual Clauses and its participation in the EU-US Data Privacy Framework.
Plausible states that website visitor data is processed and stored in the European Union.
The precise technical location and subprocessors of hosting infrastructure may change over time and are governed by the applicable provider arrangements.
15. Retention
We retain personal data only for as long as reasonably required for the purpose for which it was collected and for any applicable contractual, accounting, compliance or legal obligations.
Relevant criteria include:
- whether an enquiry is still active
- whether an enquiry leads to a client relationship
- whether correspondence forms part of an engagement or business record
- applicable statutory retention requirements
- limitation and legal-defence periods
- technical security and troubleshooting needs
Contact-form enquiries are not stored in a separate website database in the current implementation. They may remain in the email-delivery system and our business mailbox in accordance with the applicable retention periods.
Where personal data is no longer required, it is deleted or anonymised where reasonably possible.
16. Data Security
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
No online service can provide absolute security.
Security measures are therefore reviewed and adapted where reasonably appropriate considering the nature of the processing, available technology and relevant risks.
17. Your Rights
Subject to the conditions of the GDPR, you may have the right to:
- obtain information about how your personal data is processed
- request access to your personal data
- request correction of inaccurate or incomplete information
- request erasure
- request restriction of processing
- receive data you provided in a structured, commonly used and machine-readable format where the right to data portability applies
- object to processing based on legitimate interests
- withdraw consent at any time where processing is based on consent
- lodge a complaint with a competent supervisory authority
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
18. Right to Object
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation.
If you object, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for the establishment, exercise or defence of legal claims.
You may submit an objection to hello@andreas-rieger.eu.
20. Automated Decision-Making
The website does not currently use automated decision-making or profiling that produces legal effects concerning visitors or similarly significantly affects them.
21. Changes to this Privacy Notice
We may update this privacy notice where our website, technical infrastructure, services, legal requirements or data-processing activities change.
The current version and date are published on this page.
If a future technical change introduces processing that requires prior consent, the appropriate consent mechanism will be implemented before the relevant technology is activated.
22. Contact
For questions about this privacy notice, our processing of personal data or the exercise of your data-protection rights, contact AR Commerce Guru LTD by email at hello@andreas-rieger.eu.
AR Commerce Guru LTD
Independent Executive Advisory Practice of Andreas Rieger
Nikolaou I. Nikolaidi Ave. 10
Pittakeio Court, Office 305
8010 Paphos
CYPRUS
Registration number HE 423388
Managing Director Andreas Rieger