Privacy Policy

The controller responsible for processing personal data on this website is the person listed in the Imprint.

When you visit this website, the hosting provider processes technically necessary access data (server log files), typically including IP address, date/time, requested page/file, referrer URL, and browser/device information. Purpose: website delivery, security, and troubleshooting.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

Retention: only as long as necessary for these purposes (per the host’s retention settings).

If you contact me by email, I process the data you provide (e.g., name, email address, message) to respond to your request.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) and/or Art. 6(1)(f) GDPR (handling inquiries).

This website offers forms for whitepaper delivery and for requesting relevant portfolio examples. When you submit a whitepaper form without selecting “Send updates”, I process your email address only to deliver the requested material and handle communication directly related to that request. It is not used for general marketing or future updates.

When you request relevant portfolio examples, I process the data you enter to respond to that specific inquiry.

Depending on the form, this may include your name, email address, company / organisation, role, message/context, and selected example preferences.

Legal basis: Art. 6(1)(b) GDPR where your request relates to pre-contractual communication or requested material, and/or Art. 6(1)(f) GDPR for handling the specific request or inquiry.

The data is processed through the website hosting environment and sent by email to the responsible contact listed in the Imprint. It is kept only for as long as necessary to deliver the requested material, handle the request and directly related communication, unless longer retention is legally required.

If you select “Send updates”, your email address and consent record are processed separately from the whitepaper download request for the purpose of occasional updates about going→fwd work and future whitepapers.

The legal basis is your consent under Article 6(1)(a) GDPR. Consent is voluntary and is not required to receive requested material.

The website currently uses the PHP mail function provided through its hosting environment to deliver requested material and send internal notifications. No external email-marketing or newsletter provider, automated mailing-list subscription, or double-opt-in process is configured.

For a whitepaper request, the controller receives the email address and the requested material. If you opt in, a separate consent record is sent to the controller containing your email address, opt-in status, source page, consent timestamp in UTC, and the consent wording shown when you opted in.

You can withdraw your consent at any time by contacting the controller. Withdrawal does not affect processing carried out before it. No automated unsubscribe workflow is currently configured.

The consent record is retained in the controller’s email environment until you withdraw your consent or the updates are discontinued. The website code contains no automated deletion process; withdrawal and deletion are handled manually.

The Privacy Policy must be updated before an external email provider or automated update workflow is activated.

This website offers appointment booking via Calendly. When you open the booking modal, your browser connects to Calendly and loads Calendly content. Personal data such as your IP address, device/browser information, and booking-related data you enter (e.g., name, email, meeting details) may be processed by Calendly.

Calendly may transfer personal data to countries outside the EEA. Calendly states it relies on recognised transfer mechanisms such as the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses.

This website uses Simple Analytics for privacy-friendly, cookie-free analytics and aggregate site measurement. The setup is used to understand overall page usage and key site interactions in order to improve the website and its core journeys.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the website). No personal profiles are created through this analytics setup.

Calendly may still set cookies or use similar technologies when the booking modal is opened. Where legally required, such technologies are only used with consent.

You may have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent at any time with effect for the future.

You have the right to lodge a complaint with a data protection supervisory authority.

Last updated: 29 August 2026