Privacy Policy

1. Controller

Stefan Artmann Planet Pulse Studios Lütjenmoor 32, 22850 Norderstedt, Germany Email: stefanartmann@planetpulsestudios.com Phone: +49 151 583 578 26

The competent supervisory authority is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, mail@datenschutzzentrum.de.

2. What Data We Collect and Why

When you use planetpulsestudios.com or engage our services, we may collect:

• Contact and project data: Name, email address, phone number, company name and project-related information provided via contact forms or during service delivery. Legal basis: Art. 6(1)(b) GDPR (contract performance or pre-contractual steps) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
• Payment data: Invoicing information including name, company name and address. We do not store payment card details. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR (legal obligation for tax and accounting records).
• Technical data: IP address, browser type, referral source, pages visited and time on site, collected via privacy-compliant, cookieless analytics. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website improvement). No personal data is shared with advertising networks.
• Business context data (project clients only): Strategic business information, competitive data, market context and company-specific inputs provided by clients for the purpose of producing strategic analysis deliverables. This data is processed solely to deliver the contracted service. Legal basis: Art. 6(1)(b) GDPR.

3. Use of AI Tools in Service Delivery

Planet Pulse Studios uses AI research tools to assist in producing strategic deliverables. Business context information provided by clients may be processed through these tools as part of service delivery. All tools used operate under commercial or enterprise-tier agreements that include Data Processing Agreements (DPAs) pursuant to Art. 28 GDPR. We use only commercial or enterprise accounts — never consumer-tier subscriptions — for client data.

Current AI tools used in service delivery:

• Anthropic (Claude API): Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA. DPA incorporated into Anthropic's Commercial Terms of Service including EU Standard Contractual Clauses (SCCs). Data transfers to the US are covered by the EU-US Data Privacy Framework and SCCs.
• Perplexity (Enterprise/API): Perplexity AI, Inc., San Francisco, CA, USA. DPA available at perplexity.ai/hub/legal/dpa including EU SCCs. Enterprise data is not used for model training.

Clients may request that specific business information not be processed through AI tools. In such cases, please notify us at the start of the engagement in writing.

4. Third-Party Service Providers

We use the following data processors. All operate under DPAs with appropriate safeguards for international transfers where applicable:

• Hosting / Infrastructure: Vercel Inc., 340 Pine Street Suite 701, San Francisco, CA 94104, USA. Website hosting. SCCs in place.
• Email delivery: Resend Inc., San Francisco, CA, USA. Transactional email delivery. SCCs in place.
• Payment processing: Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA. Stripe's privacy policy applies to payment data. SCCs in place.
• Analytics: Plausible Analytics, Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Cookieless, privacy-compliant analytics. No personal data transmitted. EU-hosted.

5. Data Retention

Project and contract data is retained for the duration of the business relationship plus the legally required retention period (10 years for tax and accounting records under § 147 AO and § 257 HGB).

Contact inquiry data is deleted after 12 months unless a business relationship is established.

Analytics data is anonymized and aggregated. No personal data is stored.

AI tool processing: client business context data submitted to AI tools is processed in real time and not retained by Planet Pulse Studios beyond the project scope. Retention by AI tool providers is governed by their respective DPAs and commercial terms.

6. International Data Transfers

Some service providers listed above are based in the United States. Data transfers to the US are made under the EU-US Data Privacy Framework (adequacy decision of July 10, 2023, upheld by the EU General Court in September 2025) and Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. Details are available in the respective provider DPAs.

7. Your Rights

Under GDPR, you have the right to:

• •Access your personal data (Art. 15 GDPR).
• •Rectify inaccurate data (Art. 16 GDPR).
• •Request erasure (Art. 17 GDPR).
• •Restrict processing (Art. 18 GDPR).
• •Data portability (Art. 20 GDPR).
• •Object to processing based on legitimate interest (Art. 21 GDPR).
• •Withdraw consent at any time without affecting prior processing (Art. 7(3) GDPR).

To exercise these rights, contact: stefanartmann@planetpulsestudios.com You also have the right to lodge a complaint with the ULD Schleswig-Holstein: mail@datenschutzzentrum.de, +49 431 988 1200.

8. Cookies

This website uses only technically necessary cookies required for basic functionality. We do not use tracking cookies, advertising cookies, or third-party cookies. Our analytics tool (Plausible) is cookieless and collects no personal data.

9. Trade Secrets and Confidentiality

Business context information provided by clients in the course of service delivery is treated as confidential. Where such information may constitute a trade secret under § 2 Nr. 1 GeschGehG, it is handled with appropriate security measures. Client business information is not shared with third parties beyond what is necessary for contracted service delivery and is not used for any purpose other than fulfilling the specific engagement for which it was provided.

10. Changes to This Policy

We may update this policy. The date at the top reflects the latest version. Material changes will be communicated to active clients directly.