Privacy policy

Controller

The Beyond Valley GmbH i.G. (in formation)
represented by Ioannis Stavridis
c/o Business Development Center Heidelberg, Carl-Friedrich-Gauß-Ring 5, 69124 Heidelberg, Germany
Email: ioannis@thebeyondvalley.com

No cookies, no tracking

This website is static. It sets no cookies, uses no analytics or tracking services and embeds no content from third-party servers. Fonts are loaded from this website itself; no connection is made to Google Fonts.

Hosting and content delivery (Cloudflare)

Our website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages) and delivered through its content delivery network. In doing so, Cloudflare processes the connection data that is technically necessary (IP address, time of access, resource requested, amount of data transferred, user agent and security-relevant characteristics of the request) in order to deliver the website, optimise loading times and fend off attacks (such as DDoS).

The legal basis is our legitimate interest in operating the website securely, stably and efficiently (Art. 6(1)(f) GDPR). Log data is deleted automatically in line with Cloudflare's retention periods. We have concluded a data processing agreement with Cloudflare under Art. 28 GDPR (Cloudflare Data Processing Addendum).

Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on it and, in addition, on standard contractual clauses (Art. 46(2)(c) GDPR). Part of the processing may take place in Cloudflare's European data centres.

Contact by email

If you contact us by email, we process your details to handle your enquiry (Art. 6(1)(b) GDPR) and delete them once they are no longer needed for that purpose and no statutory retention obligations apply.

Booking appointments (Microsoft Bookings)

To arrange calls we use Microsoft Bookings, a service of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (for users in the EU). If you book an appointment through the link on our website, you are forwarded to a booking page provided by Microsoft. Data processed there: name, email address, the chosen time and any details you choose to add in the message field.

We process this data to arrange and hold the call; the booked appointment is stored in our Microsoft 365 calendar and you receive automatic confirmation and, where applicable, reminder emails. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). We have concluded a data processing agreement with Microsoft (Microsoft Products and Services Data Protection Addendum).

Microsoft generally processes the data of EU users within the EU (EU Data Boundary); where data is transferred to the USA, this is based on the adequacy decision for the EU-US Data Privacy Framework, under which Microsoft is certified, and in addition on standard contractual clauses. Microsoft's own privacy statement also applies on its booking page. We delete booking data once it is no longer needed to handle the appointment and no statutory retention obligations stand in the way.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority; in Baden-Württemberg this is the LfDI Baden-Württemberg.