Privacy notice

This page explains what happens with the details you enter into the handbook download form, and how we measure how the site is used. We keep this deliberately light: no cookies, no cross-site tracking, and no third-party analytics — nothing about your visit ever leaves our own server.

Who is responsible

Jan Kipping (kipp.ing) — reachable at info@kippings.de. Full legal details (Impressum): Jan Kipping, Kantstr. 3, 71093 Stuttgart, Germany.

What we store, and why

To deliver the handbook we store: your email address (required), name and company (only if you enter them), the edition you requested, and the time of the request. For each optional consent you grant (release notifications; contact about coaching), we also store the time, your IP address, and the exact version of the consent text you saw.

To measure how the site is used (anonymous) we keep simple, aggregate statistics: which pages are viewed, roughly which website or campaign sent visitors here, and whether a visit came from a phone or a computer. This is cookieless and anonymous: we do not store your IP address, and we use only a short-lived daily fingerprint (rotated and thrown away every day) to avoid counting the same visitor twice within a day — it cannot recognise you tomorrow, or on any other website. We never use Google Analytics or any outside tracker.

To understand where our readers come from we record, together with your request, how you arrived: the referring page and any campaign tags in the link you followed. This helps us see which of our efforts actually reach people. You can object to this at any time (see Your rights), and we will delete it and stop.

Legal bases

• Delivering the handbook (storing your request, sending the confirmation mail, personalizing your copy if you entered a name): contract, Art. 6(1)(b) GDPR. The download requires only your email; it is not conditional on any consent.
• Anonymous site statistics and recording where a reader came from: our legitimate interest in understanding and improving the handbook's reach, Art. 6(1)(f) GDPR. The statistics are kept lawful by being cookieless and non-identifying; the "where you came from" record is minimal, first-party only, never shared, and you can object to it at any time (Art. 21).
• Release notifications and contact about coaching/engagements: your separate, optional consents, Art. 6(1)(a) GDPR — revocable at any time with effect for the future.

How long

• Your lead record (including how you found us): until you revoke / object / request deletion.
• Unconfirmed requests: deleted automatically after 7 days.
• Download links: expire after 72 hours and are then deleted.
• Anonymous usage events: deleted after 90 days; only aggregate counts (which contain no personal data) are kept longer.
• Technical logs containing personal data: deleted after 180 days at the latest.

Your rights

Access, correction, deletion, export (portability), restriction, objection to the legitimate-interest processing above, and revocation of consents — one mail to info@kippings.de is enough. Deletion removes your data from all stores here; a hashed marker of your address remains solely to prevent you being contacted again after a backup restore. You can also complain to a supervisory authority.

Where

The site and everything it stores run on our own self-hosted server in Germany — hardware we operate ourselves, not a third-party web host. All analytics stay on that server. The single outside party involved is our email provider, Hetzner Online GmbH (Germany), which relays the confirmation and notification messages we send you and acts only as our processor for that transport — it does nothing with your data beyond passing the mail on. Your data is not transferred to any other third party or to a third country, and no advertising or analytics network is embedded in this site.

Booking a call

The Book a call page embeds the booking form of our own Nextcloud (cloud.kippings.de, our own server in Germany). When you book, we process your name, e-mail address, phone number if given, your topic and the chosen time, to confirm, prepare and hold the call. Legal basis: Art. 6(1)(b) GDPR.

Cookies. Unlike the rest of this site, the embedded form sets Nextcloud's technically necessary session cookies when it loads — no tracking, no analytics.

E-mails (confirmation link, confirmation, cancellation) are sent by the Nextcloud through our mail provider Hetzner Online GmbH, Gunzenhausen, Germany (processor). Nothing is passed to third parties or to third countries.

Process. Every confirmed booking is reported to me automatically on our own servers; only I can cancel. There is no automated decision within the meaning of Art. 22 GDPR.

Retention. A booking whose confirmation link is not clicked within 2 hours expires. Data about calls is kept as long as the business relationship needs it or the law requires. Server logs with IP addresses protect against abuse (Art. 6(1)(f) GDPR). The upstream proxy's logs are deleted after 11 weeks at the latest; Nextcloud's error logs rotate by size (currently after about 5 weeks).