Deutsche Fassung · Legal notice · Privacy policy · Terms of use
This page is an English translation of the German text (Deutsch). In case of doubt, the German version prevails.
Legal notice
Under section 5 TMG (German Telemedia Act), as referenced in the existing German notice.
Email: info@chiemgaufilms.de
Provider
Responsible for the content and services provided at https://agent.chiemgaufilms.com:
Burcleon Europe Limited
Engelsberg branch (Zweigniederlassung Engelsberg)
(Subsidiary Company Residence Germany)
Maderlechnerstraße 14
84549 Engelsberg
DE – Germany
Contact under section 5 TMG:
Email address: info@chiemgaufilms.de
Additional information
Managing director authorized to represent the branch:
Peter W. Rödel
Commercial register:
Amtsgericht Traunstein, HRB 26433
VAT identification number under section 27a of the German VAT Act:
DE314196886
Registered head office address:
Burcleon Europe Ltd.
Suite 2231
26/27 Upper Pembroke Street
Dublin 2
IRL – Ireland
Registered with the Companies Registration Office in Dublin, Ireland:
Registration no. 607023 (Company Number of Irish Registered Company as Private Company Limited by Shares)
Online dispute resolution
The existing German notice refers to the European Commission's online dispute resolution platform: http://ec.europa.eu/consumers/odr, described there as a point of contact for out-of-court settlement of disputes involving consumers under online sales and service contracts. Burcleon Europe Ltd. and any subsidiaries are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration body.
Liability notice
As a service provider, we are responsible for our own content on these pages under general law pursuant to section 7(1) TMG. Under sections 8 to 10 TMG, we are not obliged to monitor third-party information transmitted or stored, or to investigate circumstances indicating unlawful activity.
Obligations to remove or block information under general law remain unaffected. Liability in this respect is possible only from the time we become aware of a specific infringement. If we become aware of infringements, we will remedy them promptly and remove the relevant content.
The content of this website has been compiled with great care. Burcleon Europe Limited does not guarantee the accuracy of statements, completeness, currency or quality of information on third-party websites or in third-party content.
Copyright © 2026 Burcleon Europe Ltd. All rights reserved.
Privacy policy
As of October 23, 2026.
1. Controller
Burcleon Europe Limited, Engelsberg branch, Maderlechnerstraße 14, 84549 Engelsberg, Germany
Email: info@chiemgaufilms.de (further details in the legal notice)
No data protection officer has been appointed.
2. Overview
This service is an application programming interface (API) for software and AI agents to retrieve data in exchange for small stablecoin payments (USDC). This website has no user accounts, registration, cookies, tracking, analytics tools, or externally loaded fonts or scripts. We process only what is necessary for the request and payment. The service is intended for businesses (see the terms of use); the following information nevertheless applies to everyone whose data is processed.
3. Hosting and connection data
Hosting: The service runs on a virtual server provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, at the Falkenstein data center in Germany. A data processing agreement under Article 28 GDPR is in place with the provider. The legal basis is Article 6(1)(f) GDPR (secure and efficient operation of our service).
IP addresses: Your IP address must briefly be processed so that the response can reach you. We do not store IP addresses persistently. To prevent overload and abuse (per-minute request limits and blocking after repeated failed logins to the operator area), the address (only the network prefix for IPv6) is held only in memory for a few minutes and then discarded; it is neither written to disk nor logged. Free sample: To limit free samples to one per user and service per day, the address (network prefix for IPv6) is held only in memory until the end of the day (UTC) and discarded on service restart. The input of a sample is treated like other request inputs (section 4). Wishlist: For the free wishlist (up to three submissions per user per day), the address (network prefix for IPv6) is also held only in memory until the end of the day (UTC) and discarded on restart. Page-view counters: For the public website pages we count visits anonymously: per day only a number per page group and visitor type (browser or bot, guessed from the user agent, which is not stored). No IP address, cookie, user agent or referrer is stored, and nothing is shared with third parties. The counters help the operator understand how much the site is used. Legal basis: Article 6(1)(f) GDPR (availability and security).
Web server access logs: Our reverse proxy (Caddy) logs the time, method, requested path, status code, response size and duration. No IP addresses, headers or request bodies are logged. Logs rotate by size (three files of 10 MB each) and are therefore overwritten after a short time. Legal basis: Article 6(1)(f) GDPR (troubleshooting and security).
Server administration: Only the operator can access the server via SSH. Operating system logs may contain failed third-party login attempts together with IP addresses (attack prevention, Article 6(1)(f) GDPR). These system logs are rotated automatically and deleted after four weeks at the latest.
Encryption: Connections to this website and the API use TLS (HTTPS) encryption (Article 32 GDPR).
4. API usage
For a request, we process the input (such as search terms, domain, country and language), the result, time, price and a random request ID. For Keyword Ideas, a single seed phrase is sent to DataForSEO for a word-based Keyword Suggestions query. The purposes are to fulfill the purchased request, provide the result again if a response is lost, and allow one free retry if the data provider fails. Legal basis: Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(f).
Retention: Inputs and results are automatically deleted after 30 days. Identical requests may be cached briefly in memory (up to seven days, without reference to a person). For recovery after technical failures, we keep up to 14 daily backup copies on the same server. Expired inputs and results are also deleted from these copies every six hours.
Browser purchases: The agency page stores the latest purchase status, time, request and, where available, response and result token in your browser's local storage to prevent another purchase after an uncertain payment. This record persists across reloads and is replaced when you explicitly start another purchase after a completed one. Unresolved purchases block new purchases in this browser and require result retrieval or support review. No wallet keys or payment signatures are stored. You can delete the record through your browser settings; deletion also removes the local protection against duplicate purchases. This local record is not subject to server-side 30-day deletion. Storage is necessary for the purchase function you request.
Optional buyer example: If you run the downloadable example code yourself, it creates a private purchase file on your computer containing the request, status and, where available, response and result token. This file is not uploaded to us as a file. Private wallet keys and payment signatures are not stored in it. It is part of your local application and subject to your own retention policy; the 30-day deletion period above concerns our server-side storage.
Wishlist (optional and free): You may submit a short text (10 to 300 characters) describing a data tool you would like to use. We store only the text and time, without linking it to your IP address, wallet or identity. Texts are not public, are read only by the operator and are automatically deleted after 30 days. No reply is provided. Legal basis: Article 6(1)(f) GDPR (product improvement). Please do not include personal data.
Please do not submit personal data as input. The service is intended for search terms, public page URLs, domains, country codes, non-confidential comparison snapshots, regional place queries, video titles, counts, dates, place labels and coordinates of business or shoot locations.
Website and regional services: Website Content and Website Changes send only the requested page URL and fixed crawl settings to DataForSEO. For a change comparison, the previous text snapshot is processed on our server and is not sent to DataForSEO. Input snapshots and returned page content are deleted after 30 days under the same retention policy. Do not submit confidential URLs or personal data. Page content may itself contain third-party information; it is returned as untrusted data. No JavaScript rendering or scheduled monitoring is performed. Regional Places queries a separately maintained local Wikidata snapshot; query inputs are not sent to Wikidata. Public source records include source URL, revision, license and retrieval date. These source records are maintained independently of the 30-day deletion of buyer inputs and results. We store no user IP addresses.
Technical Website Check (package): After payment, our server makes four fixed diagnostic attempts: HEAD for the specified HTTPS page, GET for /sitemap.xml and HEAD for exactly two buyer-supplied links on the same origin. DNS resolution precedes each attempt; blocked or unresolved targets are not contacted. Requests go directly to the website, not to DataForSEO. The target receives our server IP, requested URL paths/query strings and a fixed diagnostic user agent; no buyer IP, wallet, payment details, cookies or credentials are forwarded. Private/special-use DNS addresses are blocked, approved addresses are pinned for the connection and redirects are not followed. Only diagnostic results and supplied URLs are retained with the request for 30 days; target IP addresses, certificate bodies and sitemap contents are not stored. Sitemap retrieval is limited to 64 KiB and only identifies the outer sitemap format, without full XML validation. In sandbox mode all four results are simulated and no target requests are made. There is no free sample for this package.
Open Data Catalog Search: The selected source (GovData operated by FITKO, or open.bydata) receives the search terms and fixed search limits from our server in one public read request, without authentication. We do not send buyer IP addresses, wallet or payment information. The provider sees our server IP and may log the search under its own privacy policy. Only bounded catalog metadata and links are returned; source files and their contents are not downloaded. Contact email fields from the catalog are not returned. Search inputs and results follow our 30-day deletion policy; identical searches may be cached for 15 minutes. Dataset-level and resource-level license references are preserved separately, and neither a public link nor a missing license is treated as unrestricted permission. Open catalog sources remain freely available; payment buys our normalized search service. Sandbox responses are explicitly simulated and no catalog request is made.
Content planning services: Video Recipes, Shoot Day Planner, Content Month Plan, Content Plan Re-Schedule and Video Project Plan run only on our server from operator-written recipes and rules; no external provider receives your input. Send titles, counts, weekdays, dates, place labels, roles (not names), trade, the company's town and equipment names only, not names or other personal data and no private addresses. Coordinates sent to Video Project Plan are only used on our server to calculate sun times. Inputs and results follow our 30-day deletion policy. Calendar files are returned as plain text; nothing is written to any calendar. Shoot Location Check (package) calculates sun times on our server and, after payment, makes up to two fixed public read requests without authentication: one request for a forecast file to the German Weather Service (DWD Open Data), which contains only the identifier of the nearest forecast station and no coordinates, and, for locations in Bavaria, one protected-area query to the Bavarian State Office for the Environment (LfU), which receives the coordinates rounded to three decimals (about 100 m) but not the date. We do not send buyer IP addresses, wallet or payment information; the providers see our server IP and may log requests under their own privacy policies (DWD states that it stores IP addresses for at most seven days). Public business locations are fine; please do not submit the location of a private home. Only reduced data are returned and kept with the request for 30 days; these source results are not cached. Each result carries the source attributions (Quelle: Deutscher Wetterdienst, CC BY 4.0; Datenquelle: Bayerisches Landesamt für Umwelt, www.lfu.bayern.de, CC BY 4.0). The location check provides no drone no-fly zones, permits or legal advice.
Planner pages (content planner, video project planner): Only the planning data of the respective service is sent to our server. Project or client titles, the agency logo and the accent colour for the client report are processed only in your browser: they are not uploaded, not sent to us and not kept in browser storage. Only PNG, JPG or WebP images are accepted as a logo and are redrawn as plain pixels. Saved plan files stay with you.
5. x402 payments and blockchain
Payments use USDC on the Base blockchain through the x402 protocol. We process the payer's public wallet address, amount, time, network, USDC contract, recipient address, public payment identifier (nonce), authorization expiry and transaction identifier (transaction hash), and the short status the facilitator returns for the payment (for example whether the offer was accepted into a public service catalog). Wallet addresses are pseudonyms; we do not assign them to a person unless additional information is available. If the payment outcome is uncertain, we retain the payment record for review. An automatic, read-only blockchain reconciliation looks for confirmed payments; it triggers neither new payments nor data requests. For this reconciliation, public wallet addresses and payment identifiers are sent to the public Base RPC endpoints (mainnet.base.org, or sepolia.base.org in test mode). No API inputs, payment signatures or user IP addresses are transmitted. Short-lived protective locks for locally verified payer addresses are held only in memory. Purposes: payment processing, refunds, bookkeeping and evidence. Legal basis: Article 6(1)(b) GDPR and, for retention, Article 6(1)(c) GDPR (commercial and tax obligations).
Retention: We retain these payment data for the statutory retention periods (currently eight years for accounting records and six years for commercial and business correspondence).
Blockchain: Blockchain transactions are public and permanent. We cannot change or delete them and have no control over these data.
Payment facilitator: Payment authorizations are checked and executed through the Coinbase group's CDP Facilitator (Coinbase, Inc., USA, or affiliated companies). Payment authorization, wallet address and amount are transmitted; the provider also performs sanctions and risk checks. Legal basis: Article 6(1)(b) and (f) GDPR. According to the provider, transfers to the USA rely on the EU-US Data Privacy Framework or standard contractual clauses. In test mode, a public test facilitator is used instead and no real money changes hands.
6. Data provider
To answer a request, we transmit the input to DataForSEO OÜ, Vesivärava tn 50-201, 10152 Tallinn, Estonia. According to its privacy policy, the provider processes the data to execute the query and stores query data for up to 365 days. Where personal data are included, the provider acts as a processor under its data processing terms (including standard contractual clauses for subprocessors in third countries). Legal basis: Article 6(1)(b) GDPR. The provider does not receive your wallet address or payment data.
7. Email contact
If you contact us by email, we process your details (sender and content) to handle the inquiry (Article 6(1)(b) or (f) GDPR). We delete them once the inquiry is resolved and no retention obligations prevent deletion. Refund requests require the request ID (request_id) and payer's wallet address.
8. Recipients, third countries and required data
Recipients are the service providers named above (Hetzner, Coinbase group, DataForSEO) and, where legally required, authorities and our tax advisers. Third countries: USA (Coinbase, payment data only; see section 5) and the data provider's subprocessors according to its information. Payment data are required to fulfill the request; without them, the contract cannot be performed. We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.
9. Your rights
You have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on Article 6(1)(f) GDPR (Article 21). Contact info@chiemgaufilms.de. As we do not maintain accounts, we ask for proof that you control the wallet address (such as a signed message) and the request ID to identify the relevant record. We cannot delete blockchain data (section 5); statutory retention duties take precedence over erasure.
Right to complain: You may lodge a complaint with a data protection supervisory authority, particularly in the member state of your residence, workplace or the alleged infringement (Article 77 GDPR). The authority responsible for our Bavarian branch is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
Changes: We update this policy when the service changes. The version published here applies.
Terms of use (API)
As of October 23, 2026.
§ 1 Scope; businesses only
(1) These terms govern the interfaces (REST API, MCP server) and website of Burcleon Europe Limited, Engelsberg branch (the “Provider”).
(2) The service is intended exclusively for businesses within the meaning of section 14 of the German Civil Code (BGB), including freelancers and public authorities. Consumers are excluded. With every request, the user confirms that they act as a business, including when acting through software or an AI agent.
(3) Conflicting user terms do not apply. By making a request, the user incorporates these terms in the version published at this address at the time of the request into the contract.
§ 2 Service
(1) The Provider supplies data on search terms and domains (such as search volume, search results, competitors, search intent and estimated AI-search demand). Data come from third-party providers, currently DataForSEO OÜ, and a local Wikidata snapshot (CC0). Website extraction covers bounded main-topic content; change checks compare caller-supplied snapshots on demand. Page Audit covers one page, not a full crawl or TLS certificate inspection. Local Market Check covers only the returned search-result sample, not a complete market census. Regional Places is a small editorial selection, not a complete tourism directory, and contains no live opening hours or route safety information. The content planning services (video recipes, shoot day planner, content month plan, re-scheduling, shoot location check) are rule-based planning aids without AI model; the location check reflects forecast and protected-area data of the named public sources, is not a permit or legal clearance and does not cover drone no-fly zones. Payment buys processing and access to our service; open source data remain available under their original license. Descriptions, limits and prices are available at /api/v1/services, /openapi.json and on the home page.
(2) Data are snapshots and may vary or be incomplete or outdated. AI-search demand values are modeled estimates, not measured counts. The Provider owes delivery of the data supplied by the data provider, not their substantive accuracy.
(3) Where offered, free samples are available (one per user and service per day for eligible services, subject to an overall daily cap; not for packages). There is no entitlement to it; it may be changed or discontinued at any time.
(4) Responses identify their data source (“live” or “sandbox”). Sandbox data are test data with no substantive significance.
(5) Keyword Ideas uses DataForSEO Keyword Suggestions and returns search terms containing the words of a single seed phrase, potentially in a different order. It does not provide category-based Keyword Ideas. Scope and price are specified in the current catalog.
§ 3 Contract formation and prices
(1) A contract for an individual request is formed when the user sends a request with a valid payment authorization at the displayed price and the Provider executes it. A price quote (HTTP 402) and the price list are not binding offers for later requests.
(2) Prices are stated in USDC per request. USDC is a crypto token; USDC amounts are not euro amounts. The Provider may change prices for future requests at any time. The price displayed when payment is authorized applies.
(3) Prices shown are final prices. Where VAT applies, it is handled according to the statutory rules; for businesses established outside Germany the reverse-charge mechanism may apply. Invoices are available on request to info@chiemgaufilms.de, quoting the request ID.
§ 4 Payment
(1) Payment is made before fulfillment through x402 in USDC on Base to the address specified in the payment offer. The user is responsible for wallet and software security and settings (such as spending limits).
(2) Once confirmed, blockchain payments are technically final and irreversible. This does not affect the user's statutory claims against the Provider; refunds are governed by section 5.
(3) Under these terms, the payment facilitator bears transaction network fees. The Provider may change this; the applicable amount will be shown in the payment requirement.
(4) Inputs are checked before a payment requirement is issued. Invalid or unsupported requests (such as unsupported country/language combinations) are rejected without settling a payment.
§ 5 Failures and refunds
(1) If the data provider fails after payment or a request cannot be fulfilled for other reasons, the user receives a request ID and token with the error message and may retry once for free.
(2) If fulfillment still fails, the Provider will, on request, refund the paid amount in USDC to the payer's wallet address. Send the request ID to info@chiemgaufilms.de. The request must be received within 30 days of the call.
(3) No refund is due for completed requests with differing, incomplete or empty data-provider results, provided that the request was executed correctly from a technical perspective.
(4) Further claims are governed by section 9.
§ 6 Availability and limits
The service is provided without a guaranteed availability level. The Provider may temporarily or permanently restrict or discontinue the service or individual requests for maintenance, failures, cost control or third-party outages. Paid but unfulfilled requests are handled under section 5. The Provider may impose technical limits (such as requests per minute or daily quotas). Circumvention is prohibited.
§ 7 User obligations and prohibited use
(1) Prohibited activities include bypassing limits, safeguards or payment obligations; attacking the service or infrastructure; submitting personal data or unlawful content; and unlawful use.
(2) Use is prohibited for persons and businesses excluded by the data provider or applicable sanctions and foreign trade rules.
(3) Search engine result data must not be used to impair the business interests of the relevant search engine providers or to compete with them.
(4) The Provider may block users for violations; refunds for paid but unfulfilled requests remain unaffected.
§ 8 Rights to use the data
(1) The user receives a non-exclusive, non-transferable right to use results for their own business purposes, such as analyses, reports and responses from their applications.
(2) Systematic resale or redistribution of raw data as a separate data product or API, and building a competing database from the results, are prohibited.
(3) The user indemnifies the Provider against third-party claims resulting from use of the data in breach of the contract.
§ 9 Liability
(1) The Provider has unlimited liability for intent and gross negligence, injury to life, body or health, under the German Product Liability Act and in other cases of mandatory statutory liability.
(2) For slightly negligent breaches of essential contractual obligations, liability is limited to foreseeable damage typical of the contract. Essential contractual obligations are those whose fulfillment is necessary for proper performance of the contract and on whose observance the user may ordinarily rely.
Liability is limited to the amount paid by the user in the twelve months before the damaging event, capped at EUR 500.
(3) Otherwise, liability for slight negligence is excluded. In particular, the Provider is not liable for the accuracy of third-party data, blockchain or payment facilitator outages, or indirect damage and lost profits, except where paragraph 1 applies.
§ 10 Changes
The Provider may change services, prices and these terms for future requests. The version published at the time of each request applies.
§ 11 Final provisions
(1) German law applies, excluding the UN Convention on Contracts for the International Sale of Goods.
(2) The place of jurisdiction is the Provider's branch office location if the user is a merchant, a legal entity under public law, a special fund under public law, or has no general place of jurisdiction in Germany.
(3) If a provision is invalid, the remainder of the contract remains effective.
(4) Contact: info@chiemgaufilms.de