[TO BE REVIEWED BY A LAWYER]

Privacy

Your data,
handled with care.

Draft for the intended website configuration · 3 October 2026

Who is responsible?

Bachir Al Sawaf, trading as ProductivityInfluence
De-Fries-Str. 18, 58675 Hemer, Germany
Email: hello@productivityinfluence.com
Phone: +49 176 56981478

Hosting and connection data

This website is intended to run on ChatGPT Sites, provided by OpenAI. Delivering and securing the website involves technical connection data such as IP addresses, request times, requested pages and browser information. Hosting providers may process data outside the European Union.

The purpose is to deliver a reliable website and prevent abuse. The intended legal basis is our legitimate interest under Article 6(1)(f) GDPR. The applicable provider entity, processing agreement, subprocessors, retention periods and safeguards for international transfers must be confirmed before public launch.

Brand briefs and creator applications

When you send an enquiry, we process your name, email address, message and the information you choose to provide about your company, website, channel, audience, project, budget and timeline. Please do not include sensitive personal data that is unnecessary for your enquiry.

Submissions are stored in the Site’s D1 database. Resend is configured to send an email notification to us containing the enquiry. Email addresses used for delivery are configured on the server. We do not publish your submission.

We use these details to respond and discuss working together. Depending on the enquiry, the legal basis is steps before a contract under Article 6(1)(b) GDPR, a legitimate interest in responding under Article 6(1)(f), or consent under Article 6(1)(a). Where consent applies, it can be withdrawn for the future without affecting earlier lawful processing.

We retain enquiry information only as long as needed to handle your request and applicable obligations. The operational deletion schedule must be confirmed before launch. Records subject to statutory retention are held for the applicable period.

Protection against spam

The forms use a honeypot and server-side request limits. A short-lived hash derived from the connection IP and time window is used to limit repeated submissions. The raw IP is not stored in the enquiry record. Request-limit entries are removed during subsequent form processing after their validity period. The intended basis is Article 6(1)(f) GDPR: protecting the service against abuse.

Booking with TidyCal

Embedded calendars load only when you allow TidyCal in Cookie settings and choose “Load calendar”. TidyCal receives connection information such as your IP address and may use cookies or similar storage. It receives the booking details you enter. You can reject this optional service and still browse or submit an enquiry.

Alternatively, the clearly labelled booking link takes you to the external provider in a new tab, where its own privacy practices apply. You can withdraw permission for embedded calendars at any time using Cookie settings in the footer. This reloads the page to stop the service; it does not erase information already received by TidyCal or cookies stored on its domain.

See TidyCal’s privacy information. Provider processing agreements, transfer safeguards and retention details remain subject to review.

Cookies and privacy preferences

Optional application-controlled services are off by default. The banner offers equally accessible accept and reject choices, plus individual settings. Continuing to browse does not give consent.

We use local storage named “pi-cookie-preferences” to remember your selected permissions, the notice version and the time you saved them for up to 180 days on this browser. This necessary preference storage contains no contact details. If storage is unavailable, the choice applies only to the current page session. Clearing browser storage, expiry or a change in providers or purposes may prompt a new choice.

The application loads no advertising pixels or analytics services. Fonts are self-hosted. Sites also provides visitor analytics at the hosting layer. These platform features are outside this application’s cookie controls; their storage behaviour, legal basis and retention require separate verification with the hosting provider.

Who receives information?

Hosting and storage providers, the configured email provider Resend, and TidyCal when you use booking may process the relevant information. We do not sell enquiry data. We discuss any necessary sharing with prospective business partners with you first, unless another legal basis applies.

Before launch, the provider list, processing contracts and any adequacy decisions or standard contractual clauses required for transfers outside the EEA must be checked.

Your rights

Subject to the GDPR’s conditions, you may request access, rectification, erasure, restriction, data portability and object to processing based on legitimate interests. You may withdraw consent at any time with effect for the future.

Contact hello@productivityinfluence.com to exercise your rights. You also have the right to complain to a supervisory authority, including the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.