Privacy policy

01Who is responsible

The controller under the General Data Protection Regulation (GDPR) is

For any question about your data, write to tim@weslowdown.com.

02Visiting this website

This website is delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, through its global content delivery network. When you open a page, Cloudflare’s servers automatically process technical data that your browser sends. This includes your IP address, the date and time of access, the page requested, the page you came from, and your browser and operating system.

We need this data to deliver the site, keep it stable and protect it against attacks. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is a website that is secure and works.

Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU‑U.S. Data Privacy Framework, so the transfer to the USA is based on the adequacy decision of the European Commission (Art. 45 GDPR). Cloudflare also operates data centres in the EU and keeps server logs only for a short time. More at cloudflare.com/privacypolicy.

Encryption

The site is delivered over an encrypted connection (TLS), recognisable by “https” in your browser’s address bar.

No cookies, no tracking

We set no cookies, use no analytics or tracking tools and embed no content from third parties such as Google Fonts, video platforms or social networks. The sound on this site plays only when you switch it on, and it comes from our own server.

03Writing to us by email

If you email us, we process your email address, your name and the content of your message in order to answer you. The legal basis is Art. 6 (1) (b) GDPR where your message relates to a contract or to steps before one, and otherwise Art. 6 (1) (f) GDPR, our legitimate interest in answering messages.

Our email and calendar run on Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes data on our behalf under a data processing agreement. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU‑U.S. Data Privacy Framework.

We delete messages once they are no longer needed, unless statutory retention periods under commercial or tax law require us to keep them.

04Booking a call via Cal.com

The “Find out if it’s a fit” buttons open our booking page at cal.com in a new tab. When that page loads, your browser connects to Cal.com’s servers. If you book a call, Cal.com processes your name, email address, the time you choose, your time zone and anything you enter in the form, such as your role and company or a note. You receive a confirmation, and the appointment is added to our Google calendar. The call itself takes place on Google Meet, which is part of Google Workspace (see section 03).

We use this data to arrange and hold the call. The legal basis is Art. 6 (1) (b) GDPR, because the call is a step you request before a possible contract.

The provider is Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. Cal.com processes data on our behalf under a data processing agreement and is certified under the EU‑U.S. Data Privacy Framework. You can read Cal.com’s own privacy policy at cal.com/privacy.

We delete booking data once it is no longer needed for the conversation and any follow-up, unless statutory retention periods apply.

05If you join the programme

Taking part in the programme involves further personal data, including health data such as your biomarker results. We process that data under a separate privacy notice and, for health data, only with your explicit consent (Art. 9 (2) (a) GDPR). You receive this notice before the programme starts.

06Your rights

You have the right to

• access the data we hold about youArt. 15 GDPR
• have incorrect data correctedArt. 16 GDPR
• have your data deletedArt. 17 GDPR
• have processing restrictedArt. 18 GDPR
• receive your data in a portable formatArt. 20 GDPR
• withdraw any consent you gave, with effect for the futureArt. 7 (3) GDPR

Right to object

Where we process data on the basis of Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

To use any of these rights, an email to tim@weslowdown.com is enough.

Right to complain

You can also complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.

07Required data and automated decisions

You are not obliged to give us any personal data. Without your name and email address, however, we cannot answer you or arrange a call. We do not use automated decision making or profiling.

08Changes

We update this policy when our services or the law change. The current version is always on this page.