Privacy Policy

Last updated: 15 November 2026

1. Controller

The controller responsible for data processing on this website is Niklas Röker, Berlin, Germany. Contact: hello@niklasroeker.com.

2. This website

This website consists of static pages. It does not set cookies, does not use analytics or tracking technologies, and does not load fonts, scripts or other content from third-party servers.

The website is hosted by Cloudflare, Inc. When a page is requested, Cloudflare processes the visitor's IP address and technical request data (such as browser type and time of the request) in order to deliver the page and protect the service. This data may be processed outside the European Union on the basis of the EU–US Data Privacy Framework and standard contractual clauses. The legal basis is the legitimate interest in operating a secure and reliable website (Art. 6(1)(f) GDPR).

3. Contact by email

If you contact me by email, your message and email address are processed solely for the purpose of handling your enquiry (Art. 6(1)(b) and (f) GDPR) and are deleted once they are no longer required.

4. Personal assistant application

I operate a private software assistant for my own personal use. The application connects exclusively to my own Google account and is not offered to the public or to any third party.

Google data accessed

The application has read-only access to my Google Calendar. It accesses:

• calendar event information, used solely to answer my own questions about my schedule; and
• availability information (busy and free times, without event titles, locations or participants), used solely to offer available time slots to callers I have authorised and to check whether a proposed meeting time is available.

The application cannot create, modify or delete calendar entries and does not access any other Google data.

Use, storage and sharing

• Calendar data is retrieved on request and used only for the purposes stated above. It is processed on a server located in Germany, operated under a data processing agreement.
• To generate responses, the relevant information is transmitted to service providers acting on my behalf for language processing, voice telephony and message delivery. Voice telephony providers receive availability information only.
• Records containing such responses are stored on the server and in encrypted backups held in Germany until they are deleted. Call records held by the voice provider are deleted after 30 days.
• Google user data is not sold, not used for advertising, not used to develop, improve or train generalised artificial intelligence or machine learning models, and not transferred to anyone other than the service providers referred to above for the purposes stated above.

The application's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

Access can be revoked at any time in the Google Account settings under third-party connections. Stored access credentials are then deleted from the server.

5. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing. To exercise these rights, please use the contact details above. You also have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.