Privacy Policy

The controller responsible for data processing on this website within the meaning of the GDPR is:

Jonas Hermann
Herm-Wandersleb-Ring 10
53121 Bonn, Germany
Email: jonas@twentyfourseven.agency
Phone: +49 176 24135305

You have the following rights with respect to your data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7 para. 3 GDPR)

To exercise these rights, an informal message to the email address stated above is sufficient. Independently of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes data generated on this website on our behalf as a processor; a data processing agreement (DPA) pursuant to Art. 28 GDPR is in place.

When the website is accessed, information transmitted by your browser is automatically recorded in server log files. This includes: anonymized or shortened IP address, date and time of the request, the requested page or file, the referring URL (referrer), browser type and operating system (user agent). This data is technically necessary to deliver the website and ensure its stability and security. The legal basis is our legitimate interest in secure, disruption-free operation pursuant to Art. 6 para. 1 lit. f GDPR.

Because the server location or parent company is in the USA, data may be transferred to a third country. This is safeguarded by the EU Standard Contractual Clauses (SCCs) and supplementary measures. Further information can be found in Vercel's privacy policy.

This website does not set cookies requiring consent when merely accessed and uses no tracking, analytics or marketing services, such as Google Analytics or advertising pixels. Only technically necessary cookies are used where required for individual functions. A consent banner is therefore not required. Individual embedded services (see appointment booking) may set their own cookies only when you actively open the respective function.

For consistent display, we use the fonts "Plus Jakarta Sans" and "Instrument Sans". They are delivered locally from our server (self-hosted via Next.js font optimization). There is no connection to Google servers or other third-party providers; no data is transferred to third parties.

To schedule appointments, we integrate the Cal.comservice provided by Cal.com, Inc. (USA). The booking calendar is loaded only when you actively open it, not when the page is generally loaded.

If you book an appointment, we process the data you provide, particularly name, email address as well as appointment and, where applicable, request details, for the purpose of scheduling and carrying out the appointment. The legal basis is the initiation or performance of pre-contractual or contractual measures pursuant to Art. 6 para. 1 lit. b GDPR. Cal.com acts for us as a processor (Art. 28 GDPR).

Data may also be transferred to the USA in this context, safeguarded by the EU Standard Contractual Clauses (SCCs). Details can be found in Cal.com's privacy policy.

Contact is currently possible via the appointment booking described above or directly by email or phone. If you contact us, we process your information solely to handle your request and any follow-up questions. The legal basis is Art. 6 para. 1 lit. b GDPR for contract-related inquiries or our legitimate interest in responding to inquiries pursuant to Art. 6 para. 1 lit. f GDPR. We delete the data once it is no longer required for the purpose and no statutory retention obligations prevent deletion.

In the footer, we link to our profiles on LinkedIn and Instagram. These are simple links only, not embedded content or plugins. Accessing our website does not transfer data to LinkedIn or Instagram as a result. Only when you click one of these links and open the respective platform do the privacy terms of that provider apply.

This privacy policy is current as of the date stated above. Further development of our website or changed legal requirements may make it necessary to adapt it. The current version can be accessed on this page at any time.