1. Controller
Colin Schmidt · Inframinds
Herzog-Welf-Straße 84
85604 Zorneding
c.schmidt@inframinds.de
2. Hosting and server logs
The website is operated on servers within the European Union. To provide it securely, the IP address, time, requested address, referrer, browser and operating system may be processed temporarily in server logs. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and stable operation of the website.
3. Reach and funnel measurement
A self-hosted Umami instance and an internal pseudonymous journey identifier are used for data-minimising reach and funnel measurement. No analytics cookies are set. The page path, referring domain, campaign parameters and defined events such as opening the booking page or loading the calendar are recorded. The identifier contains no contact details and is valid only for the current browser session.
When an appointment is booked, the pseudonymous identifier is passed to Cal.com via a campaign parameter. This allows the completed booking to be attributed to the preceding website visit. Names, email addresses and other booking information are not transmitted to Umami. Funnel events are deleted or aggregated after no more than 180 days. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is improving the service and measuring completed bookings.
Google Ads tracking is currently disabled. If analytics or advertising services requiring consent are enabled later, they will only be loaded after voluntary consent.
4. Appointment booking through Cal.com
A self-hosted Cal.com instance at calcom.inframinds.de is used for workflow assessments and event coordination. Technically required connection data is processed when it is opened. When you book an appointment, your name, email address, company, appointment details and voluntary information in particular are processed. The purpose is appointment management and steps prior to entering into a contract; the legal basis is Article 6(1)(b) GDPR.
Booking, change and cancellation events may be transferred to the internal lead management system through signed webhooks. Personal booking data is not transmitted to Umami.
4a. Meeting recording for the express start
An initial meeting is recorded only with the explicit consent of every participant. The purpose is to evaluate the discussed workflow and create an implementation plan and, where applicable, an initial MVP work-in-progress. Before recording begins, the data processed and technical services used are explained transparently. The recording and transcript are deleted once they are no longer required for this purpose, unless a different agreement or statutory retention obligation applies.
5. Contact and event enquiries
When you contact us by email, telephone or through the form for talks and workshops, we process your details to handle the enquiry. The form may contain your name, email address, organisation, telephone number, timeframe, number of participants, delivery format, initial format idea and message. You receive an automatic confirmation; your enquiry is then handled personally. The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and Article 6(1)(f) GDPR otherwise.
5a. Event pages, QR codes and materials
Non-indexed information pages may be provided for individual events through a QR code. If you request materials there, we process your name, email address, event and the time of the request to provide the download. Without additional consent, these contact details are deleted or anonymised after no more than 30 days.
Independently of the download, you may voluntarily consent to being contacted once by email about potential collaboration. Consent is not preselected and is not required to receive the materials. The consent wording, version, time and event are documented as evidence. You may withdraw consent at any time with effect for the future by emailing c.schmidt@inframinds.de. The legal basis is Article 6(1)(a) GDPR.
Participant lists from event organisers are not imported automatically. Data is transferred only following individual coordination where the organiser has documented the required consent of the affected persons.
6. Internal lead management and deletion
Booked meetings, event enquiries and voluntary event contacts are documented in an access-controlled, self-hosted lead management system. Stored data may include contact details, service type, company, event, source, processing status, next action, consent status and short internal notes. Cancelled bookings are regularly deleted or anonymised after six months and leads that are not pursued after twelve months. Separate statutory retention periods apply to contract, consent and accounting records.
7. Recipients and third countries
Data is transferred only to processors or services that are technically required. Where a service processes data outside the European Economic Area, this takes place only on a suitable legal basis and is documented transparently for the respective use.
8. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. Consent may be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
9. Security
The website is transmitted in encrypted form. Technical and organisational measures are selected according to risk and reviewed regularly.
Last updated: October 2026.