Privacy Policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

This website is hosted by Amazon Web Services (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg). The files are stored in a data center in Frankfurt am Main, Germany, and delivered via the Amazon CloudFront content delivery network.

When you visit the website, technically necessary data is processed so that the pages can be delivered to your browser: IP address, date and time, requested address, referrer, browser and operating system. The legal basis is my legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). I do not create access logs or visitor statistics myself.

AWS processes this data on my behalf under a data processing agreement (Art. 28 GDPR). CloudFront usually serves the pages from a server near you, so processing outside the EU, for example in the USA, cannot be ruled out. Amazon Web Services is certified under the EU-US Data Privacy Framework; the European Commission's Standard Contractual Clauses also apply.

If you use the contact form, I process your name, your email address, optionally your company, and your message. The data is transmitted in encrypted form to a function at Amazon Web Services in Frankfurt and from there sent as an email via Apple iCloud Mail (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) to my mailbox. The website itself does not store the data.

The same applies if you email or call me directly. I use your data only to answer your enquiry and to discuss a possible engagement. The legal basis is Art. 6(1)(b) GDPR if your enquiry aims at a contract, otherwise my legitimate interest in responding (Art. 6(1)(f) GDPR).

I delete your enquiry once it has been fully dealt with, unless statutory retention obligations apply (e.g. 6 or 10 years for business correspondence and tax-relevant documents). Technical error logs of the form function contain no message content and are deleted after 30 days at the latest.

On the contact page you can book an appointment via Calendly, a service of Calendly LLC, USA. The calendar is only loaded if you accept external services in the privacy notice or click “Load calendar” (consent, Art. 6(1)(a) GDPR). Only then is data such as your IP address transmitted to Calendly; if you book, Calendly also processes the details you enter (name, email address, chosen time, optional message).

This involves a transfer of data to the USA. You can withdraw your consent at any time via “Privacy settings” at the bottom of every page. Details: https://calendly.com/privacy

This website does not set cookies and does not use analytics or tracking services. Your browser's local storage (localStorage) only holds your choice regarding external services and your preferred appearance (light/dark). This data never leaves your device and is strictly necessary for the functions you request (Section 25(2) No. 2 TDDDG). You can delete it at any time in your browser settings.

I do not sell personal data or pass it on to advertisers. Recipients are only the service providers named above (Amazon Web Services, Apple and, with your consent, Calendly), which process data on my behalf or as described, and authorities where I am legally required to disclose it.

All connections to this website and the transmission of the contact form are encrypted with TLS. Access to the systems used is restricted to me.

You have the right of access to your personal data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3)).

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for me, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Kavalleriestraße 2–4, 40213 Düsseldorf, Germany).

To exercise your rights, email me at tom.schiffmann@it-accelerator.com.

If you have any questions about this privacy policy, you can reach me at tom.schiffmann@it-accelerator.com.