Privacy Policy

Last updated: 2 June 2026

1. Controller

The controller responsible for data processing on this website is:
Dominik Schimpf, c/o IP-Management #2918, Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany.
E-mail: support@sophistication.io

2. Data we process

We process personal data that you voluntarily provide (for example, when you contact us), and technical data that is recorded automatically when you visit the site (such as IP address, browser type, operating system, and time of access).

3. Legal basis

Unless stated otherwise, processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure operation and optimization of the website), or Art. 6(1)(a)/(b) GDPR where you have given consent or where processing is necessary to respond to your request.

4. Hosting

This website is hosted on Cloudflare Pages, provided by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). The provider processes server log data on our behalf to deliver and secure the website. A data processing agreement is in place with the provider.

5. Server log files

The hosting provider automatically collects and stores information in server log files that your browser transmits — including browser type and version, operating system, referrer URL, and the time of the request. This data is not merged with other data sources and is processed under Art. 6(1)(f) GDPR for the secure and optimized operation of the website.

6. Contact

If you contact us by e-mail or the booking tool, the data you provide is stored solely to handle your request and any follow-up. It is not shared with third parties without your consent.

7. Scheduling (Cal.com)

We use Cal.com to let you book a call. When you open the scheduler, data necessary to arrange the appointment is processed by Cal.com on the basis of Art. 6(1)(b)/(f) GDPR.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request rectification or erasure;
• request restriction of processing;
• data portability;
• withdraw consent at any time with future effect;
• object to processing based on legitimate interests (Art. 21 GDPR);
• lodge a complaint with a supervisory authority.

9. Data security

We use appropriate technical and organizational measures to protect your data. Please note that data transmission over the Internet can have security vulnerabilities; complete protection against access by third parties is not possible.