Cedric F. Jacob

Privacy policy

This policy explains which personal data is processed when you use www.cedricfjacob.com, for which purposes, on which legal basis, and for how long. Last updated: 22 October 2026.

1. Controller

Cedric Jacob, Markt 35, 53721 Siegburg, Germany. Email: contact [at] cedricfjacob.com. See also the imprint. A data protection officer is not required.

2. The short version

  • No tracking, no advertising, no profiling. Only anonymous page and click counts, without cookies.
  • The website sets no cookies of its own. Fonts and images are served from this website; nothing is loaded from Google.
  • Personal data is only processed when you contact me or sign up for the newsletter. Support requests are deleted automatically after 12 months.
  • Calendly is only loaded after you allow it.

3. Hosting and delivery

The website is hosted on Amazon Web Services (AWS) in the EU region Frankfurt and delivered through the Amazon CloudFront content delivery network. Provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. When you open a page, your browser necessarily transmits connection data (IP address, date and time, requested address, browser and operating system). This data is processed to deliver the website and to protect it against attacks (Art. 6 (1) (f) GDPR; my legitimate interest is a secure and working website). I do not store access logs. AWS acts as my processor under a data processing agreement; transfers to the USA, where they occur, are covered by the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses.

4. Support requests and contact form

When you submit the form in the Help Center, I process your name, email address, the selected topic, the optional Zendesk subdomain, the subject and your message. Purpose: answering your request and providing support for my apps, book and services. Legal basis: Art. 6 (1) (b) GDPR where the request relates to a contract or its preparation, otherwise Art. 6 (1) (f) GDPR (my legitimate interest in answering inquiries).

Technically, the request is processed by AWS Lambda, sent as an email to my support inbox through Amazon Simple Email Service (both in the EU region Frankfurt) and stored in a database (Amazon DynamoDB, Frankfurt) so I can track open requests. The stored copy is deleted automatically after 12 months. To prevent abuse, your IP address is used in pseudonymized (hashed) form for rate limiting and deleted after one hour.

My mailbox is hosted by Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) as my processor. Emails are kept as long as needed to handle your request and, where they are business correspondence, for the statutory retention periods (up to six years under German commercial and tax law).

5. Contact by email

If you email me directly, the same applies: I process your message and contact details to answer you (Art. 6 (1) (b) or (f) GDPR) and keep them as described above.

6. Booking a call with Calendly

Booking is provided by Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. By default, choosing a day opens Calendly in a new tab, and the data you enter there is processed by Calendly under its own privacy policy. The booking link tells Calendly which page of this website and which button led to the booking (for example "services-zendesk-audit"), plus any campaign tag in the address you came from; nothing about you is stored on your device for this. Only if you allow "Calendly scheduling" in the cookie settings (or click "Show the calendar here instead"), the Calendly calendar is embedded on this website. Calendly then receives your IP address and device information and may set cookies. Legal basis: your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw your consent at any time via "Cookie settings" in the footer. Calendly is certified under the EU-U.S. Data Privacy Framework.

7. Local storage

Your choice in the cookie settings is saved in your browser's local storage (key "cfj-consent") so the question is not asked again. This is technically necessary to respect your choice (§ 25 (2) No. 2 TDDDG). Nothing is transmitted to me. You can delete it in your browser settings at any time.

8. Anonymous statistics

To see which pages and offers are useful, the website counts page views and a few clicks: "Book a call" buttons, booking days, links to the Zendesk Marketplace and to book stores, and sending the contact or newsletter form. For each of these, your browser sends the page address, the type of click, the domain of the website you came from (page views only) and a campaign tag from the address, if there is one, to my server at AWS in Frankfurt. There, only a daily counter is increased. Your IP address is used to deliver the request but is not stored, and neither are browser details or any identifier. Nothing is stored on your device and no cookies are used. Nothing is sent if your browser signals "Do Not Track" or "Global Privacy Control". Legal basis: Art. 6 (1) (f) GDPR; my legitimate interest is improving the website with aggregate numbers only. The counters are deleted after about 26 months.

9. Newsletter

If you sign up for the newsletter, I process your email address, where on the website you signed up, and the dates of sign-up and confirmation, to send you occasional emails about new posts, apps and books. Legal basis: your consent (Art. 6 (1) (a) GDPR). I use the double opt-in procedure: you first receive an email with a confirmation link, and only after you confirm are you subscribed. Unconfirmed sign-ups are deleted automatically after 7 days. Every email offers one-click unsubscribe; if an email to you bounces permanently or is marked as spam, your address is deleted automatically. I do not track whether you open emails or click links. The data is stored in Amazon DynamoDB and the emails are sent through Amazon Simple Email Service (both AWS, Frankfurt). You can withdraw your consent at any time with the unsubscribe link in every email or by writing to me; your data is then deleted. If I start using a separate newsletter service, I will update this section first.

10. Videos from YouTube

Some posts contain YouTube videos (YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Until you click "Play video", nothing is loaded from YouTube. When you click it, or if you allowed "Embedded media" in the cookie settings, the video is loaded from youtube-nocookie.com; YouTube then receives your IP address and device information and may set cookies or similar storage. Legal basis: your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), given by the click or in the cookie settings, which you can withdraw there at any time. Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework.

11. Fonts, images and blog

The Inter typeface, all images and the blog are hosted on this website. No content is loaded from Google or other third parties. Old links to blog.cedricfjacob.com are redirected to the blog on this website.

12. External links

Links to other websites (for example the Zendesk Marketplace, LinkedIn or Calendly) are plain links. No data is transmitted to these providers until you click them.

13. Recipients

Personal data is only shared with the processors named above (AWS, Google Workspace) and, if you allow it, Calendly and YouTube. It is not sold or used for advertising.

14. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent with effect for the future (Art. 7 (3)). Where processing is based on Art. 6 (1) (f) GDPR, you have the right to object (Art. 21); for the anonymous statistics you can also simply turn on "Do Not Track" or "Global Privacy Control" in your browser. To exercise your rights, contact me using the details above.

You also have the right to lodge a complaint with a supervisory authority, for example: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf.

15. Further information

You are not required to provide personal data; without it, I simply cannot answer a request. There is no automated decision-making or profiling. I may update this policy when the website or legal requirements change; the current version is always available on this page.