Privacy Policy
1. Controller
The controller responsible for processing personal data on this website is the person listed in the Imprint.
2. Hosting and server log files
When you visit this website, the hosting provider processes technically necessary access data (server log files), typically including IP address, date/time, requested page/file, referrer URL, and browser/device information. Purpose: website delivery, security, and troubleshooting.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Retention: only as long as necessary for these purposes (per the host’s retention settings).
3. Contact (email)
If you contact me by email, I process the data you provide (e.g., name, email address, message) to respond to your request.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) and/or Art. 6(1)(f) GDPR (handling inquiries).
4. Website forms
This website offers forms for whitepaper delivery and for requesting relevant portfolio examples. When you submit a whitepaper form without selecting “Send updates”, I process your email address only to deliver the requested material and handle communication directly related to that request. It is not used for general marketing or future updates.
When you request relevant portfolio examples, I process the data you enter to respond to that specific inquiry.
Depending on the form, this may include your name, email address, company / organisation, role, message/context, and selected example preferences.
Legal basis: Art. 6(1)(b) GDPR where your request relates to pre-contractual communication or requested material, and/or Art. 6(1)(f) GDPR for handling the specific request or inquiry.
The data is processed through the website hosting environment and sent by email to the responsible contact listed in the Imprint. It is kept only for as long as necessary to deliver the requested material, handle the request and directly related communication, unless longer retention is legally required.
5. Email updates
If you select “Send updates”, your email address and consent record are processed separately from the whitepaper download request for the purpose of occasional updates about going→fwd work and future whitepapers.
The legal basis is your consent under Article 6(1)(a) GDPR. Consent is voluntary and is not required to receive requested material.
The website currently uses the PHP mail function provided through its hosting environment to deliver requested material and send internal notifications. No external email-marketing or newsletter provider, automated mailing-list subscription, or double-opt-in process is configured.
For a whitepaper request, the controller receives the email address and the requested material. If you opt in, a separate consent record is sent to the controller containing your email address, opt-in status, source page, consent timestamp in UTC, and the consent wording shown when you opted in.
You can withdraw your consent at any time by contacting the controller. Withdrawal does not affect processing carried out before it. No automated unsubscribe workflow is currently configured.
The consent record is retained in the controller’s email environment until you withdraw your consent or the updates are discontinued. The website code contains no automated deletion process; withdrawal and deletion are handled manually.
The Privacy Policy must be updated before an external email provider or automated update workflow is activated.
6. Calendly booking
This website links to the external Calendly booking page. Calendly is not embedded in this website. When you follow a booking link, you leave this website and connect to Calendly. Personal data such as your IP address, device/browser information, and booking-related data you enter (e.g., name, email, meeting details) may be processed by Calendly.
Calendly may transfer personal data to countries outside the EEA. Calendly states it relies on recognised transfer mechanisms such as the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses.
7. Cookies / tracking
This website uses Simple Analytics for aggregate website measurement, including page views, referral sources and time on page. Simple Analytics does not use analytics cookies or build personal visitor profiles. Fonts are served locally.
The analytics script is loaded from Simple Analytics and sends measurement requests to its service. For details about the provider’s data handling, see what Simple Analytics collects.
If you follow an external link, including a Calendly booking link, the destination website’s privacy and cookie information applies.
8. Your rights
You may have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent at any time with effect for the future.
9. Supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority.
Last updated: 24 October 2026