Privacy

1. Controller

Darius Hofman
c/o Smarvo 279
Südstraße 31
47475 Kamp-Lintfort
Deutschland
E-Mail: kontakt@kaufmeinewebsite.de

2. Visiting this website

The website runs on our own server in a data centre in Germany. With every request the web server logs: IP address, date and time, requested address, status code, transferred data volume, referring page and browser identifier. Purpose: secure and stable operation (error analysis, defence against attacks). Legal basis: Art. 6 (1) (f) GDPR. The log files are deleted after 15 days at the latest. There is no analytics, no tracking, no advertising cookies and no content embedded from third parties; fonts are served from our own server.

The website is delivered via the content delivery network of a provider based in the USA, which protects it against attacks and forwards every request to our server. In doing so, the provider processes your IP address and the request data (address, time, browser identifier) on our behalf (Art. 28 GDPR). The provider is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (f) GDPR (secure and fast delivery).

3. Waiting list

If you join the waiting list, we process your email address, the language you chose, the time of sign-up and confirmation, the consent text you agreed to, a keyed hash (HMAC) of your IP address at the time of confirmation as proof of consent (not the IP address itself) and, if present, campaign parameters from the link you came from (utm_source, utm_medium, utm_campaign, utm_content, ref). Purpose: managing the waiting list, the 100 founder spots and the waiting list order, and sending you emails about your spot, the 20-minute 1:1 call, free learning videos and the course launch. Legal basis: your consent, Art. 6 (1) (a) GDPR.

We use double opt-in: your spot is only assigned once you click the link in our email. Unconfirmed sign-ups are deleted after 48 hours. You can withdraw your consent at any time with the unsubscribe link in every email; we then delete your entry completely, including any booked call. We delete the whole list no later than 12 months after the course launch.

4. Your personal page, questions and the end credits

On your personal page you can voluntarily tell us what you want to build and where you are right now, so the call is useful. You can also give a first name (and an initial) for the end credits of this website; it is only shown publicly after we approve it, and you can remove it at any time. Legal basis: your consent, Art. 6 (1) (a) GDPR. Deletion as in section 3.

5. The 1:1 call

If you book a call, we store the time, the duration and the language of the call. The call takes place via the video conferencing service of a provider based in the USA; when you join, the provider processes your connection data, and your image and voice if you switch them on. The provider is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (b) GDPR (carrying out the call you booked) and your consent. We do not record the call.

6. Email

We send emails via an email provider based in Germany that processes data on our behalf (Art. 28 GDPR). Calendar entries for your call are attached as a file and are not shared with any calendar service by us.

If you write to us, your email arrives in our mailbox with this email provider in Germany. Legal basis: Art. 6 (1) (b) and (f) GDPR (answering your message).

7. Storage in your browser

We do not set cookies for visitors. Your browser stores two small entries locally: whether the opening sequence has already run in this tab (sessionStorage, deleted when you close the tab) and, after you confirm, your spot number, so that it is highlighted on the grid on this device (localStorage). Neither is ever sent to us. Legal basis: § 25 (2) No. 2 TDDDG.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object, and you can withdraw consent at any time with effect for the future. Just write to kontakt@kaufmeinewebsite.de. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence.