Privacy notice

1. Data controller

This notice concerns the website www.innoct.de.

inno.c.t. GbR
Managing partners: Dr. Nea Krivokapa-Williams & Ferid Krivokapa

Please use the contact details above for privacy enquiries. No data protection officer has been appointed.

2. Website access and hosting

The hosting provider for www.innoct.de is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Provider information: STRATO; privacy information.

Accessing a website involves technically necessary connection data. This can include your IP address, time of access, requested address, referrer, browser/device information and request status. These data allow pages to be delivered and the service to operate securely.

Article 6(1)(f) GDPR is a potential basis for necessary delivery and security processing, with the legitimate interest of operating a functional, secure website.

We use STRATO WordPress Hosting Basic to serve this website and have a data-processing agreement with STRATO. STRATO identifies Germany as the location of its hosting data centres. According to STRATO’s information, visitor IP addresses are retained for attack detection and prevention for no more than seven days. Access logs made available in the customer area cover up to six weeks; this availability does not mean that full IP addresses are retained for six weeks.

3. Email and telephone enquiries

If you contact us, we process your contact details and the information you provide to handle and answer your enquiry. Article 6(1)(b) GDPR applies to contractual or pre-contractual enquiries; for other enquiries, Article 6(1)(f) GDPR applies with the legitimate interest of responding to you. Providing details is voluntary, but without a way to contact you we may be unable to reply.

Data are deleted when the enquiry has been resolved and no further retention reason exists. Statutory retention obligations and the necessary establishment or defence of claims may require longer retention.

Our email mailboxes, including info@innoct.de, are hosted by STRATO GmbH. Email addresses, message content, any attachments and technical sending and receipt data are processed in providing this service. Further provider information is given in the hosting section and in STRATO’s privacy information.

The open-course registration buttons open a prepared message in your email app. We receive your details only when you send the message. We use the participant, contact and billing details you provide to handle your course enquiry and, where applicable, perform the contract and issue an invoice. Clicking the button does not confirm a course place.

4. Appointment booking

Appointment links open an external booking page provided by Zeeg GmbH, Friedrichstraße 155, 10117 Berlin, Germany. Zeeg is not embedded. The external page is contacted only when you follow the link; it processes connection data and booking details you enter there. We use your contact and appointment details to organise and hold the requested meeting.

Article 6(1)(b) GDPR applies to pre-contractual or contractual appointments; Article 6(1)(f) GDPR applies to other enquiries, with our legitimate interest in responding to your request. Appointment records held by us follow the retention criteria in the contact section. Further information: Zeeg privacy notice.

5. Newsletters and mini-books

5.1 English Community: event newsletter through Brevo

Event-update links open our external Brevo form on sibforms.com. The form is not embedded: these links contact Brevo only when clicked, sending the connection data necessary to open the form. If you subscribe there, your email address is processed through Brevo to send news about our community events. The form subscribes you to a newsletter; it does not reserve a place at a particular event.

Subscription uses double opt-in: after submitting the form, you receive an email containing a confirmation link. You are added as a newsletter subscriber only after clicking that link. Newsletter processing is based on your consent under Article 6(1)(a) GDPR. Every newsletter provides an unsubscribe option; you may also withdraw consent at any time for the future by contacting info@innoct.de.

We use Brevo to evaluate newsletter opens and link clicks to understand how our emails are used. Open and click events may be associated with the individual recipient. The English Community page explains this before you open the Brevo form. Newsletter and measurement data are generally processed for the duration of your subscription. After unsubscribing or withdrawing consent, we remove you from the active mailing list; we may retain a limited record of consent and withdrawal where necessary to meet legal obligations or establish, exercise or defend legal claims. Further information: Brevo privacy notice.

5.2 Mini-books

Our mini-books are offered with the inno.c.t. newsletter about consulting, training and professional development. This newsletter is separate from the English Community newsletter. We process your email address, selected mini-book, language and record of newsletter consent to fulfil your request. The selected mini-book is provided only after you confirm your newsletter subscription through double opt-in. Brevo handles subscription confirmation; newsletter processing is based on your consent under Article 6(1)(a) GDPR. The information above about open and click measurement, unsubscribing and retention also applies to this newsletter.

The PDFs are stored in a protected folder on our STRATO hosting, not at a public download address. Brevo sends the confirmation email; after confirmation, our website provides a personal download link. We record the selected book, language, request and confirmation dates, and use of the download button. A download-button record does not tell us whether you read the book. With your consent, book interests are stored in Brevo to tailor our professional newsletter and relevant training information.

Unconfirmed requests expire after seven days. Download links remain valid for thirty days after confirmation. Local request records are retained for up to ninety days and then removed through routine cleanup. For abuse prevention we retain keyed hashes of email and IP addresses for up to twenty-four hours; these are not used for marketing. The separate newsletter and consent records held in Brevo follow the retention criteria above. Essential session cookies protect form submissions and access to the private team area; they are not advertising cookies.

6. Event registrations

When you register for an event, we process the selected event, your name, email address, number of places, page language and an optional message. We use these details to handle your registration, organise the event and communicate with you about it. The legal basis is Article 6(1)(b) GDPR.

The details are stored in our password-protected event CRM on our STRATO-hosted webspace and are accessible only to the responsible inno.c.t. team. An event registration is not transferred to Brevo and does not subscribe you to a newsletter. Event-registration data are deleted no later than twelve months after the relevant event date unless statutory retention duties or the establishment, exercise or defence of legal claims require longer retention.

7. Website files and external links

Fonts, program libraries, images and book covers are served from our own website files. Displaying them does not directly contact Google Fonts, unpkg, Amazon image servers or Open Library from your browser.

Book-title links open Goodreads, map links open Google Maps, appointment links open Zeeg, and newsletter links open Brevo. These services are not embedded here. Only when you follow a link does the respective service receive the connection data necessary to open its page and any details you enter there. The respective provider’s privacy information also applies.

8. Browser storage, tests and analytics

In the reviewed version, quiz and placement-test answers are processed in the running browser; no result-submission service is connected. The brain model loads its geometry and 3D library from the website’s own files.

No separate analytics or advertising tracker was found in the reviewed source. Storing or accessing non-essential information on a device generally requires consent under section 25 TDDDG, subject to limited statutory exceptions.

9. Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time for the future; this does not affect the lawfulness of earlier processing.

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing at any time without giving reasons. Use the contact details above to exercise these rights.

You may complain to a data protection supervisory authority, particularly where you habitually live, work or believe an infringement occurred. In North Rhine-Westphalia: State Commissioner for Data Protection and Freedom of Information NRW, Postfach 20 04 44, 40102 Düsseldorf, Germany.

10. Automated decisions and updates

The current tests provide learning guidance, not automated decisions producing legal or similarly significant effects. We will update this notice whenever the website’s services or processing purposes change.