Privacy

Last updated: 9 September 2026 · Version 2026-09-09.1

Privacy Policy

1. Controller

KERNEL Co. GmbH
Kollwitzstraße 22
10405 Berlin, Germany

Email: mail@schrifton.de
Telephone: +49 30 96614619

SCHRIFTON is a brand of KERNEL Co. GmbH. KERNEL Co. GmbH is the controller responsible for processing personal data through this website.

2. Website hosting and server logs

The website, its application functions, database and protected manuscript storage are hosted in Germany by ALL-INKL.COM — Neue Medien Münnich.

When the website is accessed, infrastructure providers may process technical data required to deliver and secure it, including IP address, date and time, requested page, referrer, browser and device information, response status and security events. SCHRIFTON does not maintain a separate application-level visitor log. Infrastructure logs are retained according to the providers’ contractual settings and only for operational security, delivery and error analysis. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in operating a secure and reliable website.

The contact endpoint and email service use the same German hosting infrastructure.

3. Contact form

If you use the contact form, we process the information you submit: name, email address, project type, subject and message. Technical connection data is also processed to transmit and protect the form. To limit automated abuse, the server temporarily stores a cryptographic hash derived from the IP address for approximately 30 seconds; it is not used for tracking.

Processing is based on Art. 6(1)(b) GDPR where your enquiry concerns a possible or existing contractual relationship, and otherwise on Art. 6(1)(f) GDPR, our legitimate interest in responding to enquiries and protecting the form from misuse. Data is deleted when the enquiry has been resolved and no contractual or statutory retention obligation applies.

Partnership enquiries — updated 13 October 2026

Partnership enquiries record your organisation, contribution interest, request type and consent in Schrifton’s private partnership system on ALL-INKL. Correspondence, sourced research, relationship status and next actions are used to manage the enquiry. Closed relationships are flagged for retention review after 24 months. Minimal stop-contact records are retained to prevent renewed outreach. Partnership correspondence, contact records and internal notes are not sent to an external AI service. For authorised company discovery, campaign targeting criteria (target profile, geography, partner types and keywords) and previously discovered public company domains are sent to the OpenAI API for web search. Search results and suggested relevance are stored in the private system for human review; no company is contacted automatically. Requests use application-state storage disabled. The partnership endpoint keeps a hashed IP rate-limit record for up to 48 hours.

4. Email communication

When you contact us by email, we process your address, message and related correspondence in order to respond. The same legal bases and retention criteria described for the contact form apply. Email is handled through the ALL-INKL.COM mail infrastructure.

5. DenkRaum orders and payments

For an order we process the product, price, language, time, the version and locations of the applicable legal documents, separate acceptance records and a technical order identifier. PayPal processes the payment. SCHRIFTON receives payment status, order and transaction identifiers and customer or billing details supplied by PayPal for the transaction, but not full card or bank-account details. The legal bases are Article 6(1)(b), (c) and (f) GDPR for contract performance, statutory records, fraud prevention and legal claims.

Payment and contract records are retained for the applicable commercial and tax-law periods. PayPal acts as an independent controller for parts of its payment processing; the privacy information shown during PayPal checkout applies. PayPal supplies the payment receipt. The current website does not send a separate SCHRIFTON order-confirmation email automatically.

6. DenkRaum project data and manuscript

After confirmed payment we process name, email, optional institution, discipline, research title, language, project status, description, aims and the manuscript file name, type, size and content. This is necessary to perform and document the editorial service under Article 6(1)(b) GDPR and, where relevant, to establish or defend claims under Article 6(1)(f) GDPR.

Manuscript files are stored in a protected, non-public directory on the German hosting server; metadata and workflow status are stored in the server's MySQL database. Access is limited to internal or contractually bound editorial collaborators and technically necessary processors. Unpublished manuscripts are not sent to the Scout AI function, provided to publishers or other third parties for their own purposes, or used to train general AI models.

At upload, a deletion date 90 days after receipt is recorded for the manuscript. The file may be retained longer only for an expressly agreed follow-on service, a legal obligation or necessary legal claims. Accounting and evidence records are unaffected.

7. Local storage, analytics and third-party content

This website does not use analytics, advertising or marketing cookies. It stores one technically necessary value in your browser’s local storage to remember that you have dismissed the cookie notice. This value contains no user identifier and is not used for tracking. The legal basis is § 25(2) TDDDG and Art. 6(1)(f) GDPR.

The fonts are hosted locally. No third-party video, audio or social-media player is embedded, and the website loads no analytics service, advertising network or third-party tracking script. These services are therefore not contacted merely by visiting a SCHRIFTON page.

8. External links

The website contains ordinary links to external websites, including institutional references, Instagram, YouTube and Spotify. No data is sent to those destinations by SCHRIFTON until you choose to follow a link. The destination’s own privacy policy then applies. Listing an external website does not by itself describe or imply a partnership, sponsorship or endorsement.

9. Private Scout and OpenAI

Authorised editors may use the private Scout workspace to assess publicly available information about potential authors and research projects. Only the source record selected for screening is sent from the server to the OpenAI API. The API key remains on the SCHRIFTON server, responses are requested without application-state storage, and every editorial or outreach decision remains subject to human review. Public-site visits, DenkRaum orders and unpublished manuscripts are not sent to this Scout function.

OpenAI Ireland Ltd. may process this selected Scout material under the applicable OpenAI agreement and data-processing terms. Where processing involves a transfer outside the EEA, the safeguards in the applicable OpenAI Data Processing Addendum apply. Website hosting, the contact form, email, operational data and manuscript storage are provided by ALL-INKL.COM in Germany. We do not sell personal data.

Further information: OpenAI API data controls, OpenAI Data Processing Addendum and ALL-INKL.COM privacy information.

10. Your rights

Subject to the statutory conditions, you may request access, correction, deletion, restriction of processing and data portability, object to processing based on legitimate interests, and withdraw consent with future effect where consent is the legal basis. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information.

To exercise your rights, contact mail@schrifton.de.

11. Changes to this policy

We update this policy when the website, its services or applicable legal requirements change and identify each version by date and version number.