Privacy · DPA · model choice

AI Chatbot, with transparent data flows

WebChatAgent operates the primary platform in Germany, provides an Article 28 DPA and discloses provider-dependent processing paths.

  • Primary platform, database and backup hosting in Germany
  • Article 28 DPA available digitally
  • No own foundation-model training with customer data
  • EU models available and global providers clearly identified
DPA et contrôles de confidentialité Hébergé en Allemagne En ligne en 10 minutes

Why transparent chatbot data flows matter

Chatbots can process names, email addresses, order numbers and other personal information. Purpose, legal basis, provider choice, retention and clear notices therefore matter. WebChatAgent documents its German primary hosting, DPA and the difference between EU-processed and global providers; the operator remains responsible for a lawful configuration.

Fonctionnalités

Privacy building blocks provided by WebChatAgent

Primary hosting in Germany

According to the DPA, the platform, database and backups run with netcup in Germany. Selected AI and integration providers can add further processing paths.

DPA included

Article 28 Data Processing Agreement, signed and available digitally, even before purchase on request.

No own model training

Under the DPA, WebChatAgent does not use customer data for its own training or improvement of foundation AI models.

Manage retention and requests

Retention periods and erasure requests must match the intended use and be checked against the current product and contractual processes.

Anonymous triggers and CMP integration

Local proactive triggers work without persistent recognition. Optional personalization connects to the customer website CMP through tracking-consent.

Transparent data flows

Full documentation of which data flows where, ideal for Data Protection Impact Assessments (DPIA).

Use Cases

Industries where GDPR is non-negotiable

01

Healthcare & medical practices

Patient data receives special protection. Limit the purpose and assess model choice, legal basis and possible transfers before deployment.

02

Law firms & tax advisors

Professional secrecy requires an additional assessment. A DPA and EU model choices are inputs, not a blanket professional-law approval.

03

Banks, insurers & financial services

Regulated financial firms must assess DORA, outsourcing requirements and provider chains themselves. No blanket suitability claim is made.

04

Public sector & NGOs

EU hosting is often mandatory. Registered non-profits get 30 % off all paid plans.

Transparency, not a badge

Data flows you can review

The processing location depends on the selected AI, telephony and integration providers as well as the platform hosting.

Core platform
Germany

According to the DPA, the application, database and backups are operated with netcup in Germany.

EU model options
EU processing selectable

Suitable use cases can select options including EU regions for Vertex AI and Mistral as a European model provider.

Global providers
Provider-dependent

OpenAI, Gemini AI Studio, xAI, telephony and external integrations can add further data flows and third-country transfers.

Cookie consent and widget are separate

The widget accepts a consent state but does not replace the customer website's consent-management platform.

  • Time, scroll, exit-intent, URL, visibility and rage-click triggers work anonymously in memory.
  • If tracking-consent is omitted, it defaults to unknown: no persistent trigger history and no returning-visitor trigger.
  • Only granted stores optional trigger counters and cooldowns and enables AI-generated proactive messages.

What these facts do not mean

Technical and contractual safeguards can be reviewed, but they are not a blanket legal assurance.

  • No official GDPR seal and no WebChatAgent SOC 2, HIPAA or ISO certification.
  • The operator remains responsible for purpose, legal basis, minimization, notices and configuration.
  • Special-category data, professional secrecy and regulated sectors require their own qualified assessment.

FAQ

GDPR FAQ

WebChatAgent provides German primary hosting, a DPA, documented safeguards and selectable EU models. Lawfulness depends on the operator's purpose, legal basis, configuration, provider choice and privacy information.

Review the privacy building blocks

Understand data flows, model choice and the DPA before production use.