Privacy Policy
Last updated: 23 May 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Loyal Team GmbH
Schwedter Str. 52
10435 Berlin
Phone: +49 (0) 30 / 202 382 480
Email: info@loyal-team.com
2. General information on data processing
As a matter of principle, we only process our users' personal data to the extent necessary to provide a functioning website as well as our content and services. Personal data is generally processed only with the user's consent (Art. 6 Abs. 1 lit. a DSGVO) or for the performance of a contract (Art. 6 Abs. 1 lit. b DSGVO).
We have concluded a data processing agreement (DPA) in accordance with Art. 28 DSGVO with all service providers that process personal data on our behalf. This applies in particular to our hosting and form provider Netlify, Inc. and to the spam-filter service Akismet (Automattic Inc.). These agreements oblige the providers to process the data solely in accordance with our instructions, while maintaining confidentiality and applying appropriate technical and organisational measures. Any transfer of data to the USA takes place on the basis of the EU Standard Contractual Clauses.
3. Server log files
When you access our website, technically necessary data is recorded in the server log files of our hosting provider Netlify (see §6). This includes:
- IP address
- Date and time of access
- Page accessed / URL
- Referrer URL
- Browser type and version
- Operating system
This data is processed exclusively by Netlify to ensure the operation of the website, to prevent abusive access, and for the statistical analysis of server usage. We ourselves do not run any server log analysis of our own and do not carry out any anonymisation; the data is processed and stored in accordance with Netlify's specifications. For details, please see the Netlify privacy policy.
Legal basis: Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in the stability and security of operations).
5. Contact & booking
5.1 Contact form
When you use our contact form, we collect the following data:
- First and last name
- Email address
- Phone number (optional)
- Content of your message
The transmission is technically handled via Netlify Forms. The data is stored on servers of our host Netlify (see §6) in the USA; Netlify is certified under the Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework. An automatic email notification is sent to our contact address info@loyal-team.com (see §7).
Legal basis: Art. 6 Abs. 1 lit. b DSGVO (initiation of a contract) or lit. f DSGVO (legitimate interest in responding to your enquiry).
Retention period: until the enquiry has been conclusively processed and, where applicable, any subsequent retention obligations have elapsed; at the latest 2 years after the last contact.
5.2 Seminar booking
For a binding booking via the booking form, we collect the following data:
- First and last name
- Email address
- Company (optional)
- Phone number (optional)
- Selected seminar (title, date, location)
- Booking status (confirmed / waiting list / cancelled) as well as booking reference and timestamp
- Information on whether the certification exam was booked as well
- Any comments you voluntarily enter in the booking form
The data is processed in two systems:
- It is stored server-side in Netlify Blobs (Netlify's encrypted key-value store, data centres in the USA) so that our administration can manage the booking.
- In parallel, a notification is sent via Netlify Forms to our booking address info@loyal-team.com (see §7).
The recipients of the data are exclusively authorised employees of Loyal Team GmbH and, where applicable, the trainer assigned to your seminar for the purpose of preparing the session. The data is not passed on to third parties for advertising or analytics purposes.
Legal basis: Art. 6 Abs. 1 lit. b DSGVO (performance of the seminar contract).
Retention period: Booking and invoice data is retained for 10 years in accordance with § 147 AO and § 257 HGB. Bookings that do not lead to an invoice (e.g. withdrawn waiting-list requests) are deleted without delay on request.
6. Hosting
Our website and form processing are hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). When the website is accessed, connection data is transmitted to Netlify (see §3). Form submissions (contact and booking form) are stored with Netlify Forms, and booking data additionally in Netlify Blobs. Netlify processes this data in accordance with its own privacy policy: netlify.com/privacy.
Legal basis: Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in stable operations) or lit. b DSGVO for the form processing.
Data is transferred to the USA on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
6.1 Spam protection (Akismet)
To protect our forms against automated spam requests, Netlify Forms uses the Akismet service provided by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). With every form submission, the following data is transmitted to Akismet in full and without anonymisation and checked there for typical spam characteristics:
- the content entered in the form (name, email address, phone number where applicable, company, message or booking details)
- your IP address
- your browser's user agent
We have no influence over whether a request is classified as spam; suspicious submissions are flagged separately in Netlify. Transmitting your IP address to Akismet is technically necessary, since IP-based anomalies in particular are a key spam characteristic.
Legal basis: Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in spam protection and the prevention of abusive requests).
Data is transferred to the USA on the basis of the EU Standard Contractual Clauses. Further information: automattic.com/privacy.
6.2 Encrypted transmission and storage
All data transmissions between your browser and our website take place exclusively via an encrypted HTTPS connection (TLS 1.2 / 1.3). You can recognise the active encryption by the padlock symbol in your browser's address bar and the https:// prefix. Communication between Netlify and third-party providers (e.g. Akismet) also takes place via encrypted API connections. Booking and form data is additionally stored in encrypted form at Netlify (encryption at rest).
Please note that complete end-to-end encryption cannot be technically guaranteed for conventional email. While transport between mail servers is usually TLS-encrypted (STARTTLS), the message is stored in plain text in the respective mailbox. If you wish to send us particularly sensitive data, please use the contact form on our website.
7. Email notifications via Netlify Forms
When a contact enquiry or seminar booking is received, Netlify automatically sends a notification email to our contact address info@loyal-team.com. This email contains the data entered in the form and is generated and sent by Netlify (see §6).
We use the email address entered in forms exclusively to respond to your enquiry or booking and to carry out any necessary follow-up communication (e.g. booking confirmation, seminar materials, invoicing). Any use beyond this – in particular for advertising or newsletters – does not take place without your separate consent.
Legal basis: Art. 6 Abs. 1 lit. b DSGVO (performance of the seminar or consulting contract) or lit. f DSGVO for responding to general enquiries.
8. Rights of the data subject
You have the following rights vis-à-vis us with regard to your personal data:
- Right of access (Art. 15 DSGVO)
- Right to rectification (Art. 16 DSGVO)
- Right to erasure (Art. 17 DSGVO)
- Right to restriction of processing (Art. 18 DSGVO)
- Right to data portability (Art. 20 DSGVO)
- Right to object (Art. 21 DSGVO)
- Right to withdraw consent given (Art. 7 Abs. 3 DSGVO)
To exercise these rights, please contact: info@loyal-team.com.
9. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin
www.datenschutz-berlin.de
10. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will then apply to your next visit.