Privacy Policy

Last updated: May 2026.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Younes Gräbner — RelioMedia
Owner: Younes Gräbner
Heidestraße 20b
85386 Eching
Germany
Legal form: Sole proprietorship
E-Mail: [email protected]
Phone: +49 1590 5440499

The owner operates under the small-business regulation pursuant to § 19 (1) UStG (German VAT Act); no VAT identification number exists.

2. External hosting

This website is delivered via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When pages are accessed, technical access data (in particular IP address, date and time of request, user agent, transferred data volume) is processed on the server side to ensure content delivery and security of the service.

Legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure, performant and reliable provision of this website. To the extent data is transferred to the USA, Cloudflare relies on appropriate safeguards under the GDPR, in particular the European Commission's Standard Contractual Clauses.

3. Server logs

When accessing the site, technical logs are collected (IP, timestamp, user agent). These are stored for at most 7 days (Cloudflare edge logs) and not merged with other data. Legal basis: Art. 6(1)(f) GDPR (security, stability).

4. Plausible Analytics

We use Plausible Analytics, hosted in the EU (Plausible Insights OÜ, Estonia). Plausible sets no cookies, collects no personal data and no IP addresses. Legal basis: Art. 6(1)(f) GDPR.

5. Booking via Cal.com

For online booking we use the Cal.com service, offered by Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. Cal.com is embedded on the Mini-Audit, Pilot and Contact pages and is only loaded on interaction or when scrolled into view (lazy-load) to avoid unnecessary third-party connections.

When using the booking, the data entered in the booking form — in particular name, email address, chosen slot and, where applicable, additional fields requested by Cal.com — as well as technical connection data is transmitted to and processed by Cal.com. Legal basis is Art. 6(1)(a) GDPR (consent to the booking) and Art. 6(1)(b) GDPR (initiation and performance of pre-contractual measures).

As Cal.com is based in the USA, transfer of personal data to a third country may occur. Cal.com relies on appropriate safeguards under the GDPR for this transfer, in particular the European Commission's Standard Contractual Clauses. Details on the processing by Cal.com can be found in the Cal.com privacy policy at https://cal.com/privacy.

6. Video calls / Google Meet

Calls scheduled through the booking tool are generally held as video conferences via Google Meet, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC. When participating in a video conference, connection and usage data (e.g. IP address, device and browser information, audio/video data during the call) is processed by Google.

Legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures and the call itself). Transfer to third countries (USA) cannot be ruled out; Google relies on appropriate safeguards for such transfers, in particular the European Commission's Standard Contractual Clauses. Details on processing by Google are described in the Google privacy policy at https://policies.google.com/privacy.

7. Contact

When contacting us by email, phone or LinkedIn, we process the information provided (in particular name, contact details, content of the message) to handle the request. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

The technical processing of the data submitted via the contact form is carried out via an instance of n8n Cloud, a workflow automation service of n8n GmbH (registered office in Berlin, Germany). On each form submission, the entered data (name, company, email address, selected interest, message) as well as technical connection data (e.g. IP address, timestamp) is transmitted to and briefly processed by n8n in order to deliver the request as an email to the Agency. Any further storage takes place exclusively in the form of workflow execution logs within the n8n instance and is deleted in accordance with the applicable retention periods. Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest in handling enquiries).

8. Your rights

You have the right to information (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21) to processing. Requests to [email protected]. Right to lodge a complaint with the competent supervisory authority.

9. Cookies

We set a technically necessary cookie to store your theme preference (light/dark mode). No tracking cookies. Plausible sets no cookies.

10. DPA on pilot/retainer engagements

On pilot and retainer engagements we sign a Data Processing Agreement (DPA) per Art. 28 GDPR. Technical and organisational measures (TOMs) are documented separately on request.