Privacy Policy.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Antonina Panchenko
Bismarckstr. 9
33330 Gütersloh
Germany
Email: antonina@knowpack.io

I have not appointed a data protection officer because I am not legally required to.

2. Summary

This website works without cookies, tracking or analytics tools. That is why there is no cookie banner.

I process personal data in only four cases: when you visit the website (technically necessary access data), when you use the contact form, when you email me, and when you request a quote or commission me.

I do not sell your data. I do not make automated decisions and do not carry out profiling.

3. Hosting and access data

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA (“Netlify”). Netlify delivers the pages through a worldwide network of servers (content delivery network). A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify.

When you visit the website, the server processes technical data that your browser sends automatically: IP address, date and time of access, page requested, referrer, browser type and operating system, and the amount of data transferred. Without this data the website cannot be delivered.

Purpose: delivering the website and keeping it secure and stable. The legal basis is my legitimate interest in a secure and functioning website (Art. 6 (1) (f) GDPR).

Retention: I do not store or analyse this access data myself. Netlify keeps access logs only for a limited period and deletes them afterwards. For transfers to the USA see section 9.

4. Cookies, fonts and embedded content

This website does not set cookies and does not store any information on your device that is not strictly necessary. Consent under Section 25 TDDDG is therefore not required.

The fonts (Plus Jakarta Sans, Instrument Sans and Caveat, plus Manrope and Golos Text in the Ukrainian version) are delivered by this website itself. No connection to Google or any other font provider is made when you visit. The same applies to images and scripts: no third-party content is loaded. The one exception is submitting the contact form (see section 5).

5. Contact form

The “Contact” pages have forms for enquiries from companies and from experts. When you submit a form, I process the information you enter: name, email address and your message, plus optional details such as organisation, audience, topic, timeline, existing content or your professional profile.

Purpose: I answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise my legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

Technically, the form runs through the service Web3Forms (operator: Web3Creative, India). When you submit, your browser sends your entries, your IP address and technical connection data to the Web3Forms servers. Web3Forms forwards the message to me by email. Web3Forms uses sub-processors for this, for example Amazon Web Services and Cloudflare, as well as spam-protection providers. A data processing agreement under Art. 28 GDPR is in place with Web3Forms. Web3Forms keeps submissions technically for up to three years. For transfers to third countries see section 9.

The form contains a hidden spam-protection field (honeypot). After submitting you are redirected to a thank-you page on this website.

Retention: I delete your enquiry once it is settled and no statutory retention obligation applies. You do not have to use the form. You can also email me directly.

6. Contact by email

If you email me, I process your email address, your name (if you give it) and the content of your message in order to answer your enquiry.

The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures. Otherwise it is my legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

Retention: I delete your message once the enquiry is settled and no statutory retention obligation applies.

I process emails with Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google acts as my processor under Art. 28 GDPR. For transfers to the USA see section 9.

7. Quotes and collaboration

If you request a quote or commission me, I process the data needed for the quote, performance of the contract and billing. This is mainly name, address, email address, billing data and the content and materials you give me for creating a course.

The legal basis is performance of the contract and pre-contractual measures (Art. 6 (1) (b) GDPR). Where I must retain data because of tax and commercial law, the legal basis is Art. 6 (1) (c) GDPR.

Retention: I keep invoices and accounting records for as long as the law requires, usually up to eight years (Section 147 of the German Fiscal Code). I delete all other data once the purpose has ceased and no retention obligation applies.

If your materials contain personal data of third parties, for example participant lists or recordings with participants, we conclude a data processing agreement under Art. 28 GDPR before you hand them over. Please talk to me beforehand.

8. Links to other providers

This website contains a link to my LinkedIn profile. There are no embedded plugins, videos or share buttons from this provider. Nothing is therefore transmitted to LinkedIn when you visit the website.

Only when you click a link do you leave my website. The privacy notices of the respective provider then apply: LinkedIn Ireland Unlimited Company (Ireland).

9. Transfers to third countries

Some service providers also process data outside the EU: Netlify and Google in the USA, Web3Forms in India and, through sub-processors, in further countries. Such transfers rely either on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), where the provider is certified, or on the European Commission’s standard contractual clauses with additional safeguards (Art. 46 (2) (c) GDPR). There is no adequacy decision for India; the standard contractual clauses apply there.

You can request a copy of the safeguards from me at the email address above.

10. Your rights

You have the following rights against me regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, send me an email. I usually reply within one month.

Right to object: Where I process data on the basis of my legitimate interest (Art. 6 (1) (f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. I will then stop processing the data unless I can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

11. Right to lodge a complaint with a supervisory authority

You can lodge a complaint with a data protection supervisory authority if you believe I process your data unlawfully. The authority responsible for me is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: ldi.nrw.de

You can also contact the supervisory authority at your place of residence.

12. Provision of data and automated decisions

You do not have to give me any data to read this website. For a quote or an assignment I need your name, email address and billing data, otherwise I cannot perform the contract.

I do not make decisions based solely on automated processing that have legal effects on you. There is no profiling within the meaning of Art. 22 GDPR.

13. Data security

I use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. The website is available over an encrypted connection (HTTPS).

14. Changes to this privacy policy

I update this privacy policy when my services, the tools I use or the legal situation change. The version published here at the time of your visit applies.