Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Appetizer Labs UG (haftungsbeschränkt)
Urnenfeld 16
46414 Rhede
Germany
Represented by the Managing Director: Matthias Bruns
Phone: +49 175 7299889
Email: info@appetizers.io

2. General Information

Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Revocation of Consent

Many data processing operations are only possible with your express consent. You may revoke consent at any time. An informal email notification is sufficient.

3. Hosting

This website is hosted externally. Personal data collected on this website is stored on the host's servers. External hosting is based on Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

4. Cookies

This website does not use cookies.

5. Web Analytics

Umami Analytics (self-hosted)

For reach measurement we use Umami, an analytics tool we run ourselves on our own infrastructure. No data is transferred to third parties (e.g. Google). Umami uses no cookies, no fingerprinting and no cross-site tracking, so no cookie banner is required. We only process aggregated data such as the page visited, referrer, browser/device type, approximate country (derived from the IP address) and timestamps. On pages with an interactive tool — such as the bottleneck diagnostic or the maturity scorecard — contentless events are added: that the tool was displayed, started and completed. Your answers, inputs and form contents are not transmitted; they stay in your browser. The IP address is used only to derive an anonymous, daily-rotating hash and is then discarded — it is not stored. The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6(1)(f) GDPR); you may object to this processing at any time. Aggregated data is retained only as long as necessary for reach measurement and then deleted.

6. Contact

If you contact us by email or on LinkedIn, your details will be stored for processing your inquiry. Based on Art. 6(1)(a) GDPR.

Project enquiry form

Through the form on the contact page we process: work email address, organisation, the selected bottleneck, the preferred start period and the optional free text. The legal basis is Art. 6(1)(b) GDPR (steps preparatory to a contract). We use the details solely to answer the enquiry — no newsletter, no sharing with third parties for advertising, no profiling. We keep them as long as answering the enquiry and statutory retention periods require, then delete them. The form uses no captcha and no cookies; to guard against automated submissions we check a field invisible to you and the time between opening and submitting the form. As long as no form service is configured, the submit button opens your email client — the details leave your machine only once you send that email yourself.

When we contact you

If we approach you — on LinkedIn, by post, or, after you have consented, by email — we process your name, your professional role, your organisation, your business contact details and the publicly available occasion that prompted us to write. The purpose is initiating a business relationship; the legal basis is our legitimate interest in direct marketing (Art. 6(1)(f) GDPR, recital 47). The data comes from publicly accessible sources — your own profile or post, a job advertisement, a talk, a public repository or a press release — or from an introduction you agreed to beforehand (Art. 14(2)(f) GDPR). We buy no address lists and use no software that reads profiles automatically. You can object to processing for advertising purposes at any time (Art. 21(2) GDPR), informally at info@appetizers.io; after that you will not hear from us on any channel. In that case your address stays only on a suppression list, so that we do not write to you again by mistake. If no business relationship comes about, we delete the data as soon as that is settled. There is no profiling and no automated decision-making, and we do not pass the data to third parties for advertising.

7. Appointment booking (Calendly)

If you book a fit-check call through this website, the booking runs through Calendly (Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA). It does not take place on this website: as long as you do not open the booking link, no data is transmitted to Calendly, and this website still sets no cookies. Opening the link takes you off appetizers.io. Calendly then processes what you enter there — name, email address, selected slot, time zone and your answers to the booking questions — together with technical connection data. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). Processing is carried out on our behalf under a data processing agreement pursuant to Art. 28 GDPR, and may involve transfers to the USA. Details of the processing and of the safeguards for those transfers are set out in Calendly’s privacy notice: calendly.com/privacy. You can reschedule or cancel a booked call at any time using the links in the confirmation email. We delete booking data once it is no longer needed to handle your enquiry. If you would rather not use Calendly, email info@appetizers.io as before.

8. Newsletter (Platform Notes)

If you subscribe to Platform Notes, we process your email address, the time of your consent, the text you consented to and the language version you chose. We collect nothing else — no name, no company, no job title. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7(2) no. 2 UWG). We use double opt-in throughout: after signing up you receive a confirmation mail, and only following the link in it adds you to the list; an unconfirmed address is deleted after fourteen days. As long as no sending service is configured, the submit button opens your own mail client — your address leaves your machine only once you send the message yourself, and the confirmation mail is then sent by hand. Sending is currently done by us directly, with no processor involved. If we engage a service provider later, we will name it here before the first edition is sent through it. The mails carry no counting pixel and no rewritten links; we measure neither opens nor clicks, and we do not pass your address on. You can withdraw your consent at any time — through the unsubscribe link in every edition or with an informal email to info@appetizers.io. We then take your address off the list within three working days. After a withdrawal we keep the record of your consent for three more years so that we can show the sending was permitted; it is not used for anything else.

9. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21).

10. SSL/TLS Encryption

This site uses SSL/TLS encryption for security.

11. Changes

We reserve the right to adapt this privacy policy to comply with current legal requirements.