Privacy Policy 隐私政策

1 · Controller

The data controller responsible for this website is:
Leon Werner Schmidt (Einzelunternehmen)
Rolf-Nolting-Straße 12, 38448 Wolfsburg, Germany
Email: info@eightfold.work

2 · What we collect

When you visit eightfold.work, the following may be processed:

• Server logs (processed by our hosting provider, Vercel): IP address, timestamp, request URL, referrer, user agent. Retained only for as long as necessary for security and troubleshooting.
• Contact data you actively provide: name, email, company and message when you email us or book a call via Google Calendar.
• Language preference: stored locally in your browser (localStorage) so the site remembers your choice. This never leaves your device.
• Intro animation flag: a single localStorage entry so we don't replay the intro animation on return visits.

We do not use tracking cookies, third-party analytics, Google Analytics, Facebook Pixel, or advertising trackers on this site.

3 · Legal bases (Art. 6 GDPR)

• Art. 6(1)(b) — processing necessary to take pre-contractual steps at your request (responding to enquiries, scheduling calls).
• Art. 6(1)(f) — legitimate interest in maintaining a secure, functional website (server logs).
• Art. 6(1)(a) — consent, where applicable (e.g. if you voluntarily share information in a conversation).

4 · Processors we use

• Vercel Inc. — hosting (USA/EU). Data processing agreement in place. See Vercel's privacy policy.
• Google Fonts — fonts are loaded from Google's CDN (fonts.googleapis.com, fonts.gstatic.com). Your IP is transmitted to Google to serve the files. See Google's privacy policy.
• jsDelivr — delivery of the GSAP animation library. See jsDelivr's privacy policy.
• Google Calendar — when you choose to book a call via our scheduling link, you are directed to Google Calendar. See Google's privacy policy.
• Cloudflare / Tailwind CDN — the Tailwind CSS framework is delivered from the Tailwind CDN. Your IP is transmitted to serve the file.

If you add analytics or an email service later, update this list.

5 · International transfers

Some of the processors above are based in or transfer data to third countries (notably the United States). Where applicable, transfers are based on the EU Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR.

6 · Retention

Server logs are retained only as long as necessary for operational and security purposes (typically up to 30 days). Contact correspondence is retained for as long as needed to serve your request and in line with statutory retention obligations (up to 6–10 years for commercial correspondence under HGB/AO).

7 · Your rights

Under GDPR you have the right to:

• Access your personal data (Art. 15)
• Request correction (Art. 16) or deletion (Art. 17)
• Restrict or object to processing (Art. 18, 21)
• Data portability (Art. 20)
• Withdraw consent at any time (Art. 7), without affecting the lawfulness of prior processing
• Lodge a complaint with a supervisory authority — in Niedersachsen: Landesbeauftragte für den Datenschutz Niedersachsen

To exercise any of these rights, write to info@eightfold.work.

8 · Security

The site is served over HTTPS. We apply standard technical and organizational measures to protect your data. No online transmission can be guaranteed 100% secure, but we commit to notify you and the competent authority in the unlikely event of a data breach affecting your rights.

9 · Changes

We may update this policy when our tooling or processors change. The current version is always available at eightfold.work/privacy.html.