Status: November 2026
Dr. Stephan Pflaum, enactica — Competence & Career in Times of AI, Ferdinand-Kobell-Str. 58, 85540 Haar, Germany. E-mail: stephan@sociologica.ai. No data protection officer is legally required; direct enquiries to the address above.
enactica is the platform for seminars, workshops and trainings by Dr. Stephan Pflaum. Depending on your role (interested person, participant, trainer), different data is processed. No advertising or analytics cookies are set.
This website is hosted on a virtual server (VPS) at Hostinger Europe; the server location is in the EU. When pages are accessed, technically necessary connection data (IP address, timestamp, page requested) is processed in the server logs. Legal basis: Art. 6 (1) lit. f GDPR (security and availability of the service).
To take part in a training, you receive a personal invitation link with a token from your training organiser. The following is processed:
The invitation e-mails are sent via enactica's e-mail infrastructure (stephan@enactica.ai). Legal basis: Art. 6 (1) lit. b GDPR (performance of the participation relationship) and lit. f GDPR (access control).
The trainer area (for creating and managing trainings, sessions and participant invitations) is protected with e-mail address and password. The login e-mail and the content created in the trainer area (trainings, sessions, participant lists) are processed. Legal basis: Art. 6 (1) lit. b GDPR.
In the public discussion room, the AI assistant “enactica” supports training and intervention design, independent development of academic work, and educational exploration of anonymised social-work situations. For each answer, your input and the conversation history needed for the dialogue are transmitted to the external AI service Nous Research (USA) and processed there.
For discussions across multiple devices, contributions are temporarily held in enactica server memory so participants share the same conversation. The room is deleted after one hour without a new contribution or participant joining; a server restart may end it earlier. The room code and a random participant token remain in that browser tab’s session storage until it is closed. Everyone with the room code can see the contributions.
Do not enter names, contact details, health data, identifying case details or secrets. The AI receives the conversation history needed for its response; external providers may have their own processing and retention rules. Anonymous voice labels do not guarantee full technical anonymity. Abuse prevention and server operation also process technical connection data; see “Misuse protection”. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in a functional, protected dialogue service).
The AI Studio conducts an interview (questions and answers) and generates an individual training profile including a training from it. The answers entered and the generated profile are processed so that the training can be created and displayed.
A language model is used for generation (see AI Notice). Inputs are not used to train the model. Do not enter third-party personal data, health data, account details or secrets.
Legal basis: Art. 6 (1) lit. b GDPR (provision of the requested tool) and lit. f GDPR (legitimate interest in a functional service).
Technically necessary information is stored in your browser's local storage: your session's login token and (if applicable) your acknowledgement of the privacy and AI notices. During a group discussion, the browser tab's session storage temporarily holds the random room code and participant token, not the conversation history or a name. These values disappear when the tab is closed and can also be cleared in browser settings.
With the “writing sparring” you can bring in your own texts (seminar paper, excerpts, individual thoughts) via text field or file upload (PDF, DOCX, TXT) in order to think them through within the movement of thought. This explicitly means:
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in a functional, protected thinking offer).
For rate limiting and abuse prevention, the IP address is processed. New entries in enactica's application audit log contain event metadata and a salted IP hash, not chat text. Separate hosting and server access logs may contain IP addresses. Anonymous voice labels therefore do not guarantee full technical anonymity. Legal basis: Art. 6 (1) lit. f GDPR.
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) as well as the right to revoke any consent given at any time. Enquiries to stephan@sociologica.ai. You also have the right to lodge a complaint with a supervisory authority; for us: Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.
There is no automated decision-making with legal effect pursuant to Art. 22 GDPR. The AI Studio generates thinking and training offers; every decision is yours.
To improve this offer, we use the self-hosted Umami visitor statistics service at analytics.pflaum.ai; the tracker is restricted to enactica.ai. It does not set cookies. By default, Umami creates a session identifier by hashing the website ID, visitor IP address, browser identifier (User-Agent), and a monthly rotating salt. This identifier is pseudonymous, not guaranteed to be anonymous; the IP address is processed during the calculation and is not stored as a field in the analytics session record. Event data is stored on our own server and is not sent to Umami Cloud. According to the default behavior for self-hosted Umami installations, data is retained indefinitely until manually deleted.