← Back to home

Privacy notice

This site works without cookies, without analytics and without embedded third-party resources. Fonts and scripts are served from our own server. No cross-device recognition takes place.

Controller (Art. 4(7) GDPR)

1. Hosting and server logs

This website is operated on Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). When you access the site, Cloudflare, acting as our processor, automatically processes log data (such as IP address, user agent, requested URL and timestamp) in order to deliver the page and protect it against abuse.

Legal basis

Art. 6(1)(f) GDPR (legitimate interest in secure, technically sound operation)

Recipients

Cloudflare, Inc. as processor

International transfers

USA: covered by the EU-US Data Privacy Framework where certified, otherwise by Standard Contractual Clauses

Retention

We use log data solely for troubleshooting and security. Cloudflare keeps the logs of our form and chat endpoints for at most seven days and deletes them after that

2. No cookies, no analytics

This site sets no cookies and stores nothing on your device, neither for statistics nor for marketing. No access to information on your device within the meaning of Sec. 25 TDDDG takes place, so no consent banner is required. We use no analytics or tracking services.

3. No third-party resources

Fonts, scripts, images and logos are loaded from our own server. No external font services and no third-party content delivery networks are embedded. The one exception is the bot check Cloudflare Turnstile, which is loaded only when you open the “Request a quote” dialog (section 7). Merely visiting this page transmits your IP address to no additional provider.

4. Interactive budget calculator

The calculator on the home page runs entirely in your browser. The values you enter are not transmitted to us unless you explicitly submit them via the form. It is an illustrative example model, not an analysis of your data.

5. Contacting us via the forms

When you submit a form, your browser transmits the data you entered to our server and we send an email from it to hello@econ.works. We use Resend (Plus Five Five, Inc.) as a processor for delivery; Resend keeps the content and the delivery log of the email for 30 days on servers in the USA and then deletes both. For the form below the budget calculator, the scenario you created (budget, target metric and channel split) is additionally included so that we can recalculate your case. To fend off automated submissions we check an invisible extra field and the time between page load and submission; no analysis of your behaviour takes place.

Messages sent through this website are delivered to our team mailbox, hello@econ.works. Inbound mail for that domain is routed by Cloudflare Email Routing (Cloudflare, Inc.) to mailboxes hosted on Microsoft 365 (Microsoft Ireland Operations Ltd.). Both act as our processors. The website itself stores nothing.

Legal basis

Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR

Recipients

Resend (Plus Five Five, Inc.) for sending; Cloudflare, Inc. (Email Routing) and Microsoft Ireland Operations Ltd. (Microsoft 365) for delivery and the mailbox; all three as processors

International transfers

USA: via the EU-US Data Privacy Framework where certified, otherwise via Standard Contractual Clauses; for Microsoft 365 the EU Data Boundary applies where available

Retention

Your message stays in our team mailbox for as long as we need it to handle your enquiry and any business relationship arising from it, under our ordinary business-correspondence practice. Statutory retention periods remain unaffected.

6. Scheduling via Microsoft Bookings

If you book a meeting, you are redirected in a new browser tab to our Microsoft Bookings page. Microsoft processes the data you enter there (e.g., name, email, appointment preferences) to schedule the appointment. Because the page opens on Microsoft's own domain, no Bookings cookies are set on this website.

Legal basis

Art. 6(1)(b) GDPR

Recipients

Microsoft Ireland Operations Ltd. / Microsoft Corporation (processor)

International transfers

USA: via the EU-US Data Privacy Framework where certified, otherwise via Standard Contractual Clauses; the Microsoft 365 EU Data Boundary applies where available

7. Requesting a quote via chat

“Request a quote” opens a dialog in which you enter your email address and a message. An AI assistant summarises your request and asks at most one follow-up question. For that, our server sends the text of the dialog, your email address and, if you used the budget calculator, the scenario it produced to Anthropic, PBC (USA), which operates the language model. The result, your details and the transcript are sent by email to hello@econ.works through the mail path described in section 5. We do not store the dialog ourselves; the email is our only record. A dialog you abandon is delivered to us with what was entered up to that point, once you have submitted a valid email address and a first message. To keep automated access out, the dialog checks with Cloudflare Turnstile that a person is using it; Turnstile processes only the technical characteristics of your browser needed for that check, not your entries. Our server calls Anthropic directly. Three further technical steps run at Cloudflare, Inc., our hoster: the server asks Cloudflare's DNS resolver whether the domain of your email address accepts mail (the domain only, not the address), it remembers a random identifier of the dialog for 24 hours so that it is not delivered twice, and it limits the number of requests per IP address.

Legal basis

Art. 6(1)(b) GDPR (pre-contractual communication)

Recipients

Anthropic, PBC (USA) as processor for the language model; Cloudflare, Inc. for Turnstile and the technical steps named in this section; for sending the email, the processors named in section 5

International transfers

USA: via the EU-US Data Privacy Framework where certified, otherwise via Standard Contractual Clauses

Retention

Anthropic keeps inputs and outputs of the interface for up to 30 days for abuse monitoring and then deletes them; the email is kept for the period stated in section 5

8. External links

This site links to econ.works, econworks.de and LinkedIn. The respective providers are responsible for data processing on those pages. They are only contacted once you actively click the link.

9. Your rights

You have the rights set out in Art. 15 to 22 GDPR:

• Access to the personal data stored about you
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Objection to processing

You may also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, https://datenschutz.hessen.de.

10. Security

We take appropriate technical and organisational measures under Art. 32 GDPR, including TLS encryption of the connection, access controls and deletion routines.

11. Changes

We update this notice as soon as the processing or the legal situation changes. The version published here, with the revision date shown above, applies. Provider details are set out in our imprint.