Stefan Battistetti

Privacy policy

Template, not legal advice. Fill in the highlighted fields, match the providers to the ones actually in use, and have it checked before going live. The German version is the binding one.

Controller

Stefan Battistetti, Karl-Marx-Allee 121, 10243 Berlin, Germany, [email protected]

What data I process

  • When you visit: technically necessary server logs (IP address, time, page, browser) at the hosting provider.
  • Usage analytics: pages viewed, origin (UTM parameters), clicks and progress through the test. No cookies; a random visit ID and the origin are kept in your browser's session storage until you close the tab.
  • When you submit the test: email address, optionally company and what you make, your answers, your result, language, origin (UTM) and whether you opted in to follow-up emails. Your email and company are also linked to the analytics of that visit.

Purposes and legal bases

  • Providing and securing the website: Art. 6(1)(f) GDPR.
  • Showing and sending you your result and the guide: Art. 6(1)(b) GDPR (you asked for it).
  • Short follow-up emails and personal contact: only if you tick the box, consent under Art. 6(1)(a) GDPR, confirmed by email (double opt-in). You can withdraw it at any time, for example via the unsubscribe link in every email.
  • Measuring how visitors use the website and the test, to improve it: Art. 6(1)(f) GDPR. [Have the legal basis checked, incl. § 25 TDDDG for session storage; ask for consent if needed]

Recipients and processors

  • Cloudflare, Inc. – hosting and delivery of the website.
  • PostHog Inc. – usage analytics, data stored in the EU (Frankfurt).
  • n8n GmbH, Berlin – processing and forwarding of form data.
  • Attio Ltd. – CRM.
  • HubSpot, Inc. – CRM and email sending.

Where data is transferred to third countries (e.g. the USA), this is based on the EU-U.S. Data Privacy Framework or standard contractual clauses. [Check for each provider and sign data processing agreements]

Retention

I keep form data until you withdraw consent or ask for deletion, at most [e.g. 24 months] after the last contact.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw your consent. You can also complain to a data protection authority; in Berlin that is the Berlin Commissioner for Data Protection and Freedom of Information.

Last updated: [Date]