Privacy Policy
Information We Collect
We use Umami, a privacy-friendly analytics service that we host ourselves. Umami does not collect any personal data and does not use cookies; aggregated, anonymous usage data is stored on our own infrastructure in the EU and helps us understand how our website is being used.
How We Use Information
The anonymous analytics data is used solely to understand general website traffic patterns and improve our services and website functionality.
Contact Form
When you use our contact form, the data you enter (name, email address, message) is transmitted to us by email so that we can respond to your inquiry (Art. 6 (1) (b) GDPR). We use it solely for that purpose, do not share it with third parties, and delete it once your inquiry is resolved and no statutory retention duties apply.
Hosting & Data Transfer
Our website, including the server-side function that processes contact-form submissions, is hosted by Netlify, Inc. in the United States. When you submit the contact form, the data you enter (name, email address, message) is first processed on Netlify's infrastructure in the United States before being delivered to our mailbox, which is hosted in the EU. As this involves a transfer to a third country, it is safeguarded by the EU Standard Contractual Clauses, which Netlify has entered into as data importer (Art. 44 ff. GDPR).
Appointment Scheduling
For scheduling calls we link to Calendly, operated by Calendly LLC in the United States. Any data you enter there is processed by Calendly under its own privacy policy; we only receive the appointment details you submit. As this involves a transfer to a third country, it is safeguarded under the EU-U.S. Data Privacy Framework, in which Calendly participates, with the EU Standard Contractual Clauses as an additional safeguard (Art. 44 ff. GDPR).
Data Protection
We are committed to protecting your privacy and comply with the General Data Protection Regulation (GDPR). Beyond the data you actively provide (via the contact form, email, or appointment scheduling), this website does not collect, store, or process any personal data.
Your Rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). To exercise any of these rights, contact us at hello@gopfert.eu.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), https://www.ldi.nrw.de. You may also contact the supervisory authority of your habitual residence.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time.
Contact Us
If you have any questions about this Privacy Policy, please contact us: hello@gopfert.eu