Skip to content
epilot-berater.de

Privacy policy

Last updated: October 2026

1. Controller

DigitalFreedom Global LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States

Data protection contact: data-protection@digitalfreedom.co.za
Data protection request form: https://data-protection.digitalfreedom.co.za

2. In short

epilot-berater.de is a static website. It sets no cookies of its own, uses no marketing services, and embeds no tracking pixels or third-party fonts. Data reaches third parties only when the page is served by the host (sections 3 and 7), after your consent to Google Analytics (section 4) and, if you trigger it yourself, when you book a call through Cal.com (section 5).

3. Hosting (GitHub Pages)

This site is served by GitHub Pages (GitHub Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA). Technical connection data (IP address, user agent, timestamp, requested URL) is processed when the site is requested. GitHub is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure provision of the website). Retention: per GitHub's policies, typically a few weeks.

4. Cookies and analytics (Google Analytics 4)

This site uses Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure use of the site in aggregated form (page views, traffic sources, device classes). Once Google Analytics has loaded, it sets cookies (_ga, _ga_*) and sends data to Google. According to Google, Google Analytics 4 does not log or store IP addresses.

Google Analytics is only loaded after your consent. Until you click "Accept" in the cookie banner, your browser does not request the Google Analytics script, no cookies are set and no data is sent to Google, not even cookieless pings. If you click "Decline", Google Analytics is not loaded at all. The advertising storage categories (ad_storage, ad_user_data, ad_personalization) stay disabled even after consent. Legal basis: Art. 6 (1) (a) GDPR (consent) and § 25 (1) TDDDG. You can withdraw your consent at any time via "Cookie settings" in the footer; Google Analytics then stops measuring, its cookies are deleted and it is no longer loaded. Withdrawal does not affect the lawfulness of processing before it. Transfers to Google LLC in the United States take place under the EU-US Data Privacy Framework.

Apart from that, this site sets no cookies of its own. For the cookies Cal.com sets on cal.com once the booking calendar loads, see section 5. Consenting to Google Analytics does not load the calendar.

Your browser's localStorage holds the following, locally and without sending anything to a server: your choice of light or dark mode (theme), your explicit language choice (locale-explicit), your cookie choice (cookie-consent) and, after you have loaded the booking calendar, that click (cal-consent, section 5).

5. Booking a call (Cal.com)

To schedule an intro call we embed the booking tool Cal.com (Cal.com, Inc., USA). The calendar is only loaded after you click "Show open slots" in the booking section. When the calendar loads, its script is fetched from Cal.com's servers, which process your IP address and technical connection data. Once the calendar loads, Cal.com sets its own technically necessary cookies on cal.com, for example __cf_bm (bot protection by Cloudflare, Cal.com's content delivery network, valid for about 30 minutes). Before you click, neither Cal.com nor Cloudflare sets a cookie. Your click is stored in your browser's localStorage (cal-consent), so the calendar loads directly on later visits. When you book an appointment you provide your name, email address, the chosen time and time zone and, optionally, your topic, your company and notes, used solely to arrange and confirm the appointment.

Legal basis: for loading the calendar, your consent by clicking (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG); for the booking itself, Art. 6 (1) (b) GDPR (measures taken at your request prior to a contract). You can withdraw your consent at any time by clicking "Stop loading the calendar automatically" below the loaded calendar, or by deleting this website's stored data in your browser; the lawfulness of processing before the withdrawal remains unaffected. Cal.com processes the booking data on our behalf under the data processing agreement concluded with the account; transfers to the USA take place under the EU-US Data Privacy Framework. Details are set out in Cal.com's privacy policy at cal.com/privacy.

Below the calendar there is also a direct link to the booking page on Cal.com ("Book a call on Cal.com"). It is a plain link: nothing is loaded from Cal.com before you click it. The click opens cal.com in a new tab, where Cal.com's privacy policy applies; for the booking itself the same applies as above. Instead of the calendar you can also email hello@digitalfreedom.co.za.

6. Contact by email

If you email us, we process your message and your contact details to answer the enquiry. Legal basis: Art. 6 (1) (b) GDPR where the enquiry concerns a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering it). Our email is hosted by Migadu, a provider in Switzerland, on servers in France, that is, in the EU. Switzerland is covered by an adequacy decision of the European Commission under Art. 45 GDPR.

7. Server logs

GitHub Pages logs technical connection data on every request (IP address, timestamp, URL, user agent, referrer). We have no direct access to these logs; GitHub keeps them for security and operations purposes. Legal basis: Art. 6 (1) (f) GDPR.

8. Fonts

We use the "Geist" font hosted on this site. No data is sent to third-party font providers (for example Google Fonts).

9. International transfers

The controller is established outside the EEA. Where we process personal data of users in the EEA ourselves, that processing takes place outside the EEA; we apply the GDPR standard to it as a global baseline. Where a service provider processes data, the location depends on that provider, as set out in sections 3 to 7.

Transfers to the United States (GitHub, after your consent Google Analytics and, when you use the booking calendar, Cal.com) take place under the EU-US Data Privacy Framework (Commission adequacy decision of 10 July 2023); for Cal.com, the data processing agreement applies in addition. Email is hosted by Migadu (Switzerland, servers in France); Switzerland is covered by an adequacy decision under Art. 45 GDPR.

10. Retention (summary)

  • Server logs (GitHub): per GitHub's policies, typically a few weeks
  • Booking data (Cal.com): for as long as needed to arrange and follow up the appointment; details per Cal.com's privacy policy
  • Email inquiries (Migadu): until the inquiry is handled, then six months for follow-up
  • Google Analytics: 14 months (retention for user and event data)
  • Theme, language choice, cookie choice and calendar click (localStorage): until you delete them; they live only in your browser

11. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time; the lawfulness of processing before the withdrawal remains unaffected.

Requests to data-protection@digitalfreedom.co.za or through the request form at https://data-protection.digitalfreedom.co.za.

12. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). As the controller has no establishment in the Union, the one-stop-shop mechanism under Art. 56 GDPR does not apply and there is no lead supervisory authority. Please address your complaint to the supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.

13. Data protection officer

A data protection officer has not been appointed; the controller does not meet the threshold criteria for mandatory appointment under Art. 37 GDPR / § 38 BDSG.