Privacy Policy

Controller

Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Content is delivered via Cloudflare's global edge network, with requests from the EU processed primarily through EU data centres. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare; Cloudflare is certified under the EU-US Data Privacy Framework.

When you access the website, your browser automatically transmits data to the web server, which is stored in server log files: IP address, browser type, operating system, referrer URL and the time of the request. This data is not merged with other data sources and is deleted after 30 days at the latest. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and trouble-free operation of the website).

Website analytics

We use PostHog for the anonymous analysis of website usage. The provider is PostHog, Inc. Processing takes place exclusively on servers in the European Union (PostHog Cloud EU, Frankfurt am Main); a data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

PostHog is operated in cookieless mode: no cookies are set and no information is stored on or read from your device (§ 25(2) TDDDG). IP addresses are anonymized before processing and are not stored. There is no cross-device or cross-site recognition, no profiling and no transfer to advertising networks; the analytics data generated cannot be attributed to any individual person.

As no personal data is processed, no consent is required for this service. The collection is based on our legitimate interest in designing our offering to meet needs and continuously improving it (Art. 6(1)(f) GDPR).

Contacting us

If you contact us by email or phone, we store your details in order to process your enquiry. The data is not passed on to third parties and is deleted once your enquiry has been dealt with, unless statutory retention obligations apply. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or, where there is no contractual context, Art. 6(1)(f) GDPR (legitimate interest in processing your enquiry).

Appointment booking

To arrange a free intro call we use the Cal.com service. The provider is Cal.com, Inc. We use the European variant (cal.eu); processing takes place on servers within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

When you request an appointment via the "Book intro call" button, the booking page opens in a new tab at cal.eu. The data you enter there (such as your name, email address, preferred time and optional details about your enquiry) is transmitted to Cal.com in order to organize and confirm the appointment. To provide the feature, Cal.com may store technically necessary information on your device.

The legal basis is Art. 6(1)(b) GDPR (carrying out pre-contractual measures at your request) and Art. 6(1)(f) GDPR (legitimate interest in simple appointment scheduling). The data is deleted after the appointment has taken place, unless statutory retention obligations apply. Use of the booking tool is voluntary; you can also reach us by email or phone at any time instead.

Your rights

You have the following rights in relation to us:

• Access to the data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)

Please send requests to hello@cloud.garden.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is the one at your place of residence or work. You can find a list of the authorities on the website of the German Federal Commissioner for Data Protection: bfdi.bund.de

Last updated

July 2026