Privacy

Privacy Policy

Last updated: September 2026 – in accordance with Art. 13, 14 GDPR

1. Data Controller

Anton Steenken

Bachstraße 125

22083 Hamburg

Germany

Phone: +49 1567 8534951

Email: anton@engineer-your-idea.com

2. Collection and Storage of Personal Data

When you access this website, the following information is automatically collected:

  • IP address of the requesting computer (anonymized)
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access originates (referrer URL)
  • Browser and operating system used

This data is stored in server log files and is not associated with any specific individuals. No merging with other data sources is carried out.

3. Contact via Email

When you contact us by email, the transmitted data (name, email address, message content) is processed for the purpose of handling your inquiry (Art. 6(1)(b) GDPR).

The data is deleted as soon as it is no longer required for the purpose of its collection – no later than 6 months after the completion of your inquiry, unless there are statutory retention obligations.

Voucher & update emails (double opt-in): When you enter your email address, e.g. via our offer popup, we process it to send you the voucher code and occasional project updates based on your consent (Art. 6(1)(a) GDPR, § 7 UWG). We use a double opt-in procedure: the mailing list only becomes active after you click the confirmation link in our email. As proof of consent we store your email address, the consent text, a timestamp, your IP address and the status (confirmed/unsubscribed). Every email contains an unsubscribe link; after unsubscribing your address will not be contacted again. Data submitted before confirmation is deleted if the confirmation is not completed within 30 days.

4. Cookies

This website uses the following cookie categories:

Essential Cookies

Technically necessary cookies for the operation of the website (e.g. cookie consent storage). We also store your language preference (DE/EN) and whether you have already seen our offer popup in your browser's local storage. These are set without consent. Legal basis: Art. 6(1)(f) GDPR.

Marketing Cookies

Only set after your explicit consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time via the "Cookie Settings" link in the footer.

5. Appointment Booking via Our Own Booking System

On our website, you can book appointments directly through our own booking system. The booking runs entirely on our own infrastructure: the booking server is located in a data center in Germany and is operated by us. Your booking data is not transferred to third-country providers.

The following data is processed when you book an appointment:

  • Name
  • Email address
  • Phone number (voluntary)
  • Message / project description (voluntary)
  • Desired appointment time

Legal basis: Art. 6(1)(b) GDPR (contract initiation, we need this information to carry out the agreed call).

Google Calendar & Google Meet (optional): When you book an appointment, we automatically create a calendar entry with a Google Meet link in our Google Calendar. Your name, email address and the appointment are transmitted to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google is bound as a processor under Art. 28 GDPR (Standard Contractual Clauses for any access from the USA). Legal basis: Art. 6(1)(b) GDPR.

Email notifications: You will receive confirmation and reminder emails for your booked appointment (24 hours and 1 hour before). These service emails are sent on the basis of Art. 6(1)(b) GDPR and Section 7(3) UWG.

Storage period: We delete booking data as soon as it is no longer necessary for the purpose; cancelled bookings are deleted after a maximum of 365 days. You can reschedule or cancel a booked appointment at any time yourself using the link in your confirmation email.

6. Server Log Files

The provider of this website automatically collects and stores information in server log files that your browser automatically transmits to us. The legal basis is Art. 6(1)(f) GDPR.

The log files are automatically deleted after 14 days. IP address storage is exclusively in anonymized form.

7. Integrated Services and Third Parties

Fonts (Inter):This website uses the font "Inter" for uniform display of fonts, which is served locally from our server. No connection to external servers (e.g. Google Fonts) is made. No personal data is transmitted to third parties.

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): You may request information about your personal data being processed.
  • Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR): You may request the deletion of your data, provided there are no statutory retention obligations.
  • Right to restriction (Art. 18 GDPR): You may request the restriction of processing.
  • Right to data portability (Art. 20 GDPR): You may receive your data in a structured, commonly used and machine-readable format.
  • Right to object (Art. 21 GDPR): You may object to the processing of your personal data.
  • Right to lodge a complaint (Art. 77 GDPR): You may lodge a complaint with a supervisory authority. The competent authority is: Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg, datenschutz-hamburg.de

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the lock symbol in the browser bar.

10. Hosting

This website is hosted on servers of the following provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Server location: Germany (EU).

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

11. Analytics and Statistics (PostHog)

This website uses the analytics service PostHog (PostHog, Inc.; processing in the EU cloud, servers located in the European Union) for statistical analysis of site usage.

The service is used on the basis of our legitimate interest in the improved design and economical operation of this website (Art. 6 (1) (f) GDPR). Consent is not required, since no cookies and no local storage are used on your device. You may object to this processing at any time with future effect (Art. 21 (1) GDPR): enable "Do Not Track" in your browser or use the contact options in our legal notice, data collection will then no longer be performed.

No cookies and no local storage (localStorage/sessionStorage) are used ("cookieless tracking"). Usage is attributed via a privacy-preserving hash of your IP address, which is computed on PostHog's servers; the IP address itself is stripped immediately before any further processing. As a result, IP-based enrichment (e.g. GeoIP localization and bot detection) is also not performed. No personal profiles are created. Data collected includes pages viewed, time on page, maximum scroll depth per page view, click and form interactions, as well as the referrer and campaign parameters of the traffic source (e.g. UTM parameters and click identifiers such as gclid appended to the URL by advertising platforms like Google Ads): this serves to measure the effectiveness of marketing activities.

Session replay (consent only):If you have consented to the "Marketing" category in the cookie banner, sessions may be recorded for quality improvement ("session replay"): mouse movements, scrolling and click behaviour are captured. Keyboard input is fully masked and never reaches PostHog; recorded text remains illegible. Recording starts exclusively after your consent (Art. 6(1)(a) GDPR), uses no cookies and can be revoked at any time via the cookie settings in the footer, recording stops immediately upon revocation. Without consent, no recording takes place.

Further information about data protection at PostHog: posthog.com/privacy.

12. Google Ads Conversion Tracking (Consent Required)

This website uses Google Ads conversion tracking provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). If you reached our website via a Google ad, Google stores a click identifier (gclid or the "_gcl_*" cookie) in order to measure the success of the ad, e.g. a completed appointment booking.

This is done exclusively with your consent (Art. 6 (1)(a) GDPR): the tracking code is only loaded once you have activated the "Marketing" category in the cookie banner. Without your consent, no cookies are set and no data is transmitted to Google. You may withdraw your consent at any time with future effect, via the cookie settings (link in the footer) or your browser settings.

When an appointment booking is completed, the website then transmits technical data about this conversion to Google (booking transaction ID, timestamp, click identifier). Form content such as your name, email address, phone number or message is not transmitted to Google. Further information on data protection at Google: policies.google.com/privacy

13. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will apply to your next visit.