Privacy policy

Last updated: July 2026. Draft — pending legal review (LAWYER REVIEW).

Controller

Nico Jahn — Cloud & AI Advisory, email: nico.k.jahn@gmail.com (address: see Impressum).

Hosting (Cloudflare)

This website is hosted as a static site with Cloudflare, Inc. (USA). When you visit, Cloudflare processes technically necessary connection data (IP address, timestamp, requested resource) to deliver and secure the site. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). A data processing agreement is in place; transfers to the USA rely on the EU-US Data Privacy Framework and EU standard contractual clauses. This site sets no tracking cookies and therefore needs no cookie banner.

Whitepaper form

When you request a whitepaper we process the data you provide (email, optionally name and company) plus timestamp, IP address, browser identifier and — where present — campaign parameters (UTM/gclid) of your visit.

• Whitepaper delivery: processing to fulfil your request, Art. 6(1)(b) GDPR. The download is provided directly in the browser.
• Marketing emails (optional, unticked consent): Art. 6(1)(a) GDPR. Before any marketing email is sent we confirm your consent via a double-opt-in email. You can withdraw consent at any time via the unsubscribe link in every email or informally by email (Art. 7(3) GDPR); processing before withdrawal remains lawful.
• Proof of consent: timestamp, IP address, the displayed consent text (version identifier) and withdrawals are logged (Art. 5(2), Art. 7(1) GDPR).

Storage in Cloudflare D1 (processing on our behalf, see above). Retention: data without marketing consent is deleted no later than 6 months after delivery; upon withdrawal, marketing contact is suppressed and the proof record retained as long as required for the defence of legal claims (Art. 17(3)(e) GDPR).

Contact by email

When you contact us we process your details to handle the enquiry (Art. 6(1)(b) or (f) GDPR).

Your rights

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). Contact the email address above. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).