1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Deutsches Institut für Gutes Leben GmbH
Office at Lobe Block
Böttgerstr. 16
13357 Berlin
Germany
Phone: +49 30 81 45 09 41
Email: contact@difgl.de
Represented by the Managing Directors Christoph Henseler and Katja Anclam.
2. General Information on Data Processing
We process personal data in connection with the operation of this website only to the extent necessary to provide and secure the website, respond to enquiries, provide functions expressly selected by you, or where another legal basis permits the processing.
Personal data means any information relating to an identified or identifiable natural person.
3. Provision of the Website and Server Log Files
When you access our website, your browser transmits technically necessary information to the server hosting our website.
In particular, the following data may be processed:
- IP address of the accessing device,
- date and time of access,
- page or file accessed,
- referrer URL,
- browser type and browser version,
- operating system used,
- amount of data transferred, and
- access status or HTTP status code.
The processing of this data is necessary to provide our website technically and to ensure its stability and security.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely, reliably and without technical errors and in protecting our systems against misuse and attacks.
The data is stored only for as long as necessary for these purposes, unless statutory retention requirements or specific security reasons require longer storage.
4. Hosting
Our website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you visit our website, STRATO processes the data necessary to provide the website, in particular connection and server log data.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and efficient provision of our website.
Where STRATO processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.
5. Cookies and Technically Necessary Functions
Our website may use technically necessary cookies or comparable technologies that are required for the operation of the website and for functions expressly requested by you.
Where information is stored on your device or information already stored on your device is accessed and this is strictly necessary to provide a digital service expressly requested by you, this is carried out on the basis of Section 25(2) TDDDG.
Where personal data is processed in this context, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of our website.
Where a function requires prior consent, it will only be activated after you have given your consent. This applies in particular to the AI chatbot offered on this website.
6. Contacting Us
If you contact us by email, telephone or by other means, we process the personal data you provide in order to handle your enquiry.
This may include, in particular, your name, contact details, the content of your message and any other information you voluntarily provide.
If your enquiry relates to the initiation or performance of a contract, processing is based on Art. 6(1)(b) GDPR.
For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in appropriately handling and responding to communications addressed to us.
The data will be deleted once the respective enquiry has been conclusively dealt with, unless statutory retention requirements or other legal grounds prevent deletion.
7. Use of an AI-Based Chatbot
We offer an AI-powered chatbot on our website for testing purposes. The chatbot is intended to provide automated responses and information.
The chatbot is provided by:
First Atlas, Inc.
35 Fresh Pond Ln
Cambridge, MA 02138
USA
The chatbot is only activated after you have expressly consented to its use.
Data Processed
If you activate and use the chatbot, the following data in particular may be processed:
- chat messages and other content entered by you,
- your IP address,
- browser type and other technical information, and
- timestamps and other metadata required for the technical provision of the chat.
The data is processed in order to technically provide the chatbot, process your input and generate appropriate responses.
Please do not enter special categories of personal data within the meaning of Art. 9 GDPR, in particular health data, or confidential information such as banking, payment or login details into the chat.
No automated decision-making or profiling producing legal or similarly significant effects takes place in connection with the chatbot.
Legal Basis and Consent
The chatbot is only activated after you have given your prior consent.
Where information is stored on your device or information stored on your device is accessed for the provision of the chatbot, this is carried out on the basis of your consent pursuant to Section 25(1) TDDDG.
The processing of personal data associated with the use of the chatbot is based on your consent pursuant to Art. 6(1)(a) GDPR.
Use of the chatbot is voluntary. You may withdraw your consent at any time with effect for the future.
Data Processing and Other Service Providers
First Atlas, Inc. processes personal data on our behalf. A data processing agreement pursuant to Art. 28 GDPR has been concluded with First Atlas.
First Atlas may engage additional subprocessors to provide the chatbot. These may include providers of AI services such as OpenAI and cloud infrastructure providers such as Amazon Web Services (AWS).
Personal data may therefore also be processed in the United States.
According to First Atlas, transfers of personal data outside the European Union or European Economic Area are carried out using appropriate safeguards in accordance with the GDPR, in particular the EU Standard Contractual Clauses or, where applicable, the EU-U.S. Data Privacy Framework. The First Atlas documentation also states that it has concluded a DPA for processing under Art. 28 GDPR.
Despite these safeguards, where data is processed in the United States, it cannot in every case be ruled out that U.S. authorities may obtain access to personal data under applicable U.S. law.
Storage Period
According to First Atlas, data processed in connection with the chatbot is stored only for as long as necessary to provide the service and for the purposes described above. It is subsequently deleted or anonymised unless statutory retention requirements apply.
Further information about the processing of personal data by First Atlas can be found in the First Atlas Privacy Policy:
8. Links to Social Networks and External Websites
Our website contains links to external websites and to our profiles on social networks, in particular LinkedIn and Instagram.
These are external links. A connection to the respective platform is only established when you follow the relevant link.
Once you access an external website, the privacy policies of the respective provider apply. Our ability to influence the processing of personal data there is limited to the options made available to us by the respective platform operator.
9. Recipients of Personal Data
We only disclose personal data to third parties where this is necessary for one of the purposes described in this Privacy Policy, where we are legally obliged to do so, where you have given your consent, or where another legal basis permits the disclosure.
In particular, we use technical service providers for the operation and maintenance of our website.
Where service providers process personal data exclusively on our behalf, this is carried out – where legally required – on the basis of a data processing agreement pursuant to Art. 28 GDPR.
10. Storage Period
As a general rule, we process personal data only for as long as necessary for the respective purpose of processing.
Personal data may also be stored where we are required to do so by statutory retention obligations or where storage is necessary for the establishment, exercise or defence of legal claims.
Once the respective purpose no longer applies and any statutory retention periods have expired, the data will be deleted.
11. Your Rights
Where the applicable legal requirements are met, you have, in particular, the following rights:
- the right of access to personal data processed by us pursuant to Art. 15 GDPR,
- the right to rectification of inaccurate data or completion of incomplete data pursuant to Art. 16 GDPR,
- the right to erasure pursuant to Art. 17 GDPR,
- the right to restriction of processing pursuant to Art. 18 GDPR,
- the right to data portability pursuant to Art. 20 GDPR, and
- the right to object to processing based on Art. 6(1)(e) or (f) GDPR pursuant to Art. 21 GDPR.
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future pursuant to Art. 7(3) GDPR. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.
To exercise your rights, you can contact us at contact@difgl.de.
12. Right to Lodge a Complaint
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
13. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or unauthorised disclosure.
Data transmitted between your browser and our website is encrypted using HTTPS.
14. Updates and Changes to this Privacy Policy
We regularly review this Privacy Policy and update it if our website, the services we use or the applicable legal requirements change.
Last updated: September 2026
