Privacy policy

Last updated: July 2026. Draft — pending legal review (LAWYER REVIEW).

Controller

Nico Jahn — Cloud & AI Advisory, email: nico.k.jahn@gmail.com (address: see Impressum).

Hosting (Cloudflare)

This website is hosted as a static site with Cloudflare, Inc. (USA). When you visit, Cloudflare processes technically necessary connection data (IP address, timestamp, requested resource) to deliver and secure the site. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). A data processing agreement is in place; transfers to the USA rely on the EU-US Data Privacy Framework and EU standard contractual clauses.

For reach measurement we use Cloudflare Web Analytics (aggregated, cookieless statistics without cross-device tracking); the whitepaper form is protected by Cloudflare Turnstile (bot detection without tracking cookies; technical browser signals are transmitted to Cloudflare, Art. 6(1)(f) GDPR). This site sets no tracking cookies and therefore needs no cookie banner.

Whitepaper form

When you request a whitepaper we process the data you provide (email, optionally name and company) plus timestamp, IP address, browser identifier and — where present — campaign parameters (UTM/gclid) of your visit.

• Whitepaper delivery: processing to fulfil your request, Art. 6(1)(b) GDPR. The download is provided directly in the browser.
• Marketing emails (optional, unticked consent): Art. 6(1)(a) GDPR. After submitting you receive a confirmation email (double opt-in, sent via Amazon SES, Frankfurt region); marketing emails are only sent after your click. Withdrawal at any time via the unsubscribe link in every email or informally by email (Art. 7(3) GDPR); processing before withdrawal remains lawful.
• Proof of consent: timestamp, IP address, the displayed consent text (version identifier) and withdrawals are logged (Art. 5(2), Art. 7(1) GDPR).

Processing and storage happen at Amazon Web Services in the Frankfurt region (eu-central-1): intake via AWS Lambda, storage in Amazon DynamoDB, email dispatch via Amazon SES (processing on our behalf under the AWS data processing addendum). Retention: data without marketing consent is deleted automatically no later than 6 months after delivery; upon withdrawal, marketing contact is suppressed and the proof record retained as long as required for the defence of legal claims (Art. 17(3)(e) GDPR).

Contact by email

When you contact us we process your details to handle the enquiry (Art. 6(1)(b) or (f) GDPR).

Your rights

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). Contact the email address above. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).