This policy explains what personal data we process when you visit communicationforge.com, join the waitlist, contact us, or (from launch) create a customer account, buy the program and, where applicable, withdraw from it. It follows the EU General Data Protection Regulation (GDPR) and German data-protection law.
Romina Alexandru, sole proprietor, trading as Communication Forge
Mohrstraße 2, 80939 München, Germany
Email: [email protected] · Phone: +49 171 3502259
Website: communicationforge.com
You can contact us about data protection at the email address above.
| Purpose | Data | Legal basis | Storage period |
|---|---|---|---|
| Delivering and securing the website | IP address, date and time, requested page, browser/device data, technical logs | Art. 6(1)(f) GDPR (legitimate interest in a secure, working website) | Short-term technical logs at the hosting provider; not combined with other data by us |
| Waitlist | Email address, time of sign-up, source of sign-up | Art. 6(1)(a) GDPR (consent) | Until you unsubscribe or withdraw consent, or until the waitlist is closed after launch, then deletion |
| Contact by email or phone | Your contact details and message | Art. 6(1)(b) or (f) GDPR | Until the matter is resolved, then deletion unless retention duties apply |
| Customer account (from launch) | Name, email address, login credentials, email-confirmation status, login and session data | Art. 6(1)(b) GDPR (contract) | Until the account is deleted; data we must keep for legal reasons until the relevant period ends |
| Withdrawal through the customer account (from launch) | Name, identification of the contract withdrawn, content of the declaration, date and time of receipt, address for the confirmation, confirmation email | Art. 6(1)(b) and (c) GDPR (contract; legal obligation to confirm the withdrawal, § 356a BGB) | Until the statutory retention and limitation periods have expired |
| Voluntary reason for withdrawal (from launch) | Your voluntary statement of why you withdrew | Art. 6(1)(a) GDPR (consent) | kept only as long as needed to evaluate it for improving the program, and deleted when you withdraw your consent; you can withdraw your consent at any time |
| Program purchase (from launch) | Name, email, billing data, order and payment status, access data | Art. 6(1)(b) GDPR (contract); Art. 6(1)(c) GDPR (tax and commercial law) | Statutory retention periods for accounting records and business letters (6 to 10 years, depending on the document) |
| Saving your cookie choice | Your consent choice and its date, stored in your browser | § 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR | Up to 6 months, then we ask again |
The website is delivered through Cloudflare (Cloudflare, Inc., USA, and its affiliates). When you open the site, your browser transmits technical data (such as your IP address and request details) to Cloudflare’s servers, which process it to deliver the page and to protect against attacks and misuse. Cloudflare acts as our processor under a data processing agreement. Where data is transferred to the USA, this is covered by the safeguards in Cloudflare’s Data Processing Addendum. More information: cloudflare.com/privacypolicy.
If you enter your email address and click “Join the waitlist”, we use it to inform you about the launch of The Voice Identity and about early-access offers. Providing it is voluntary. You can withdraw your consent at any time with effect for the future, by using the unsubscribe link or writing to us; the lawfulness of processing before withdrawal is not affected.
The sign-up form sends your email address to our waitlist, which is stored with Cloudflare (Cloudflare, Inc., USA), which processes it on our behalf. We also send you a one-time confirmation email through Cloudflare’s email service; it contains no advertising.
If you write or call us, we process the data you give us to answer your request. We delete it once the matter is resolved, unless we must keep it by law.
Customer account. To buy and use the program you create a customer account. We process your name, email address and login credentials for this and confirm your email address through a link. Through the account you can use the program, view your order details and withdraw from your contract.
Purchases. When the program is on sale, we will process the data needed to conclude and perform the contract, give you access, issue invoices, and meet tax and accounting duties. Payment is handled by the payment provider shown at checkout, which receives the payment data it needs; its privacy policy, linked at checkout, applies to that processing.
Withdrawal. If you withdraw from your contract using the withdrawal function in your customer account, we process your name, the identification of the contract withdrawn, the content of your declaration and the date and time of receipt. We send you a confirmation of receipt by email to your account address without undue delay; we are legally required to do so (§ 356a BGB). We also use this data to handle the withdrawal and the refund, and keep it as evidence.
Voluntary reason. After your withdrawal is complete you may voluntarily tell us why you withdrew. This is not required, has no effect on your withdrawal and is stored separately from it. We use it to improve our offering. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.
We pass personal data on only to the service providers mentioned above that process it on our behalf (hosting, waitlist and email service, also for account and confirmation emails, payment handling), to our tax adviser or authorities where the law requires it, and otherwise only with your consent or where the law permits.
Some providers (for example Cloudflare) are based in or may process data in the USA. We rely on the safeguards offered by the provider, such as Standard Contractual Clauses or an adequacy decision, as stated in the provider’s agreement with us.
We do not use analytics or marketing cookies at present. See our Cookie Policy for details, and use to change your choice.
You have the right to: access your data (Art. 15 GDPR); rectification (Art. 16); erasure (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7(3)). To exercise your rights, write to the email address above.
You have the right to complain to a data-protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Ansbach, Germany, www.lda.bayern.de. You may also contact the authority at your place of residence.
We do not use automated decision-making or profiling that produces legal effects concerning you.
We will update this policy when our Services or the law change. The current version is always available on this page.
Choose which categories you allow. Details are in our Cookie Policy.