Privacy Policy
Last updated: February 2026
1. Controller
NEURAL42
Philip Isenmann
Ulmer Straße 64
89143 Blaubeuren, Germany
E‑mail: [email protected]
2. Overview of Data Processing
We process personal data only to the extent necessary for the provision of a functional website and our services. We collect personal data through the following channels:
- Visiting our website (automatically collected server data)
- Using our contact email
- Scheduling appointments via Cal.com
- Making payments via Stripe
- Cookies and analytics (only with your consent)
3. Legal Bases for Processing
We process personal data based on the following legal grounds:
- Consent (Art. 6(1)(a) GDPR): For cookies, analytics, and advertising tracking — only after you actively opt in via our cookie banner.
- Contract performance (Art. 6(1)(b) GDPR): For processing payments, scheduling appointments, and delivering our services.
- Pre-contractual measures (Art. 6(1)(b) GDPR): For responding to inquiries and preparing offers.
- Legitimate interests (Art. 6(1)(f) GDPR): For website operation, security, and fraud prevention. Our legitimate interest is the reliable and secure operation of our website.
- Legal obligations (Art. 6(1)(c) GDPR): For retaining payment and tax records as required by German law.
4. Hosting
Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA
Data processed: IP address, browser type, operating system, referrer URL, requested pages, date and time of access
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in secure and efficient website provision
Data transfer: USA — secured via Standard Contractual Clauses (Art. 46 GDPR) and the EU‑US Data Privacy Framework
DPA: A Data Processing Agreement is in place with Vercel
5. Cookies and Consent
This website uses cookies. Technically necessary cookies are set without consent as they are essential for website functionality. All other cookies — in particular analytics and advertising cookies — are only set after you provide explicit consent via our cookie banner, in accordance with §25 TDDDG.
Your consent choice is stored in your browser's localStorage. You can withdraw your consent at any time by clearing your browser cookies and localStorage, then refreshing the page. The cookie banner will reappear, allowing you to make a new choice.
6. Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Analysis of website usage to improve our services and content
Legal basis: Consent (Art. 6(1)(a) GDPR, §25 TDDDG)
Data processed: IP address (anonymised), browser and device information, pages visited, session duration, interactions
Cookies set (only after consent):
- _ga: Distinguishes users — expires after 2 years
- _ga_[ID]: Persists session state — expires after 2 years
We use Google Analytics 4 with Google Consent Mode v2. Without your consent, analytics cookies are not set and no identifiable data is transmitted to Google.
Opt-out: You can prevent Google Analytics tracking by withdrawing consent via the cookie banner, or by installing the Google Analytics opt-out browser add-on.
7. Google Ads Conversion Tracking
Provider: Google Ireland Limited
Purpose: Measuring the effectiveness of our advertising campaigns
Legal basis: Consent (Art. 6(1)(a) GDPR, §25 TDDDG)
Data transfer: USA — Google LLC is certified under the EU‑US Data Privacy Framework.
8. Payment Processing — Stripe
Provider: Stripe Payments Europe, Ltd., Dublin, Ireland
Purpose: Processing payments for our services
Legal basis: Contract performance (Art. 6(1)(b) GDPR)
Privacy policy: stripe.com/privacy
9. Appointment Scheduling — Cal.com
Provider: Cal.com, Inc., San Francisco, CA, USA
Purpose: Scheduling consulting sessions and training workshops
Legal basis: Pre-contractual measures / contract performance (Art. 6(1)(b) GDPR)
Privacy policy: cal.com/privacy
10. Consulting Partner
For certain consulting engagements, we collaborate with Flanova Services LLC. Where a joint engagement involves data sharing, the Client will be informed in advance.
11. Email Communication
When you contact us via email, we process your email address, name (if provided), and the content of your message for the purpose of handling your inquiry.
12. Use of Artificial Intelligence
In accordance with Art. 4 of the EU AI Act on AI literacy, we provide information about our use of AI. This website does not use AI-based chatbots or AI-driven automated decision-making.
13. Data Retention
We retain personal data according to the following schedules:
- Contact inquiries: 6 months after last correspondence
- Payment records (Stripe): 10 years (German commercial and tax law)
- Analytics data: 14 months (Google Analytics default)
- Contract documents: 6 years after end of contractual relationship
14. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
To exercise any of these rights, please contact us at: [email protected]
15. Right to Lodge a Complaint
The competent authority for our business is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden‑Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
16. Security
This website uses SSL/TLS encryption (HTTPS) to protect data transmitted between your browser and our servers.
17. Changes to This Privacy Policy
We may update this privacy policy to reflect changes in our data processing practices or legal requirements.