Privacy Policy

Last updated: August 2026

1. Data controller

2. Overview

This site is a small, static brochure site. We keep data collection to a minimum: there is no analytics or advertising tracking on this site. The sections below explain the few places where data is processed regardless.

3. Hosting & server log files

This site is hosted by Netlify, Inc. Like most hosting providers, Netlify's servers automatically record technical information for every visit (so-called server log files), such as your browser type, operating system, referring page, date and time of the request, and an anonymized or shortened IP address. This data is used solely to ensure the stable and secure operation of the site (Art. 6 (1)(f) GDPR – legitimate interest) and is not merged with other data sources. For details, see Netlify's own privacy policy at netlify.com/privacy.

4. Cookie banner & local storage

This site does not set any tracking or marketing cookies. When you visit, a small banner asks whether you're okay with that; your choice (accepted / opted out) is stored locally in your browser (localStorage), not as a cookie, purely so we don't ask you again. This is strictly necessary for the banner to function and does not identify you. You can change your choice at any time via "Cookie settings" in the footer, or clear it by clearing your browser's site data.

5. Contact

If you email us or use the "Book a free call" link, we process the information you provide (e.g. name, email address, and the content of your message) solely to respond to your inquiry or to schedule the call, based on your consent and/or to take steps prior to entering into a contract (Art. 6 (1)(a)/(b) GDPR). We do not use this data for any other purpose.

6. Scheduling calls (Google Calendar)

The "Book a free call" button links out to a Google Calendar appointment scheduling page (calendar.app.google), hosted and operated by Google Ireland Limited. We do not embed this page or receive any data before you actively click through. Once you leave our site, Google's own privacy policy applies: policies.google.com/privacy.

7. External links (Substack)

Our About page may display the title and an excerpt of our latest newsletter post, fetched from Substack's public feed at build time on our server – this does not involve your browser or your data. If you click through to read the full post, you'll leave our site for Substack, whose own privacy policy applies.

8. Your rights

Under the GDPR, you have the right to:

• Request access to the personal data we hold about you (Art. 15)
• Request correction of inaccurate data (Art. 16)
• Request erasure of your data (Art. 17)
• Request restriction of processing (Art. 18)
• Object to processing based on legitimate interest (Art. 21)
• Request data portability (Art. 20)
• Lodge a complaint with a supervisory authority – in Germany, the authority responsible for Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

To exercise any of these rights, contact us at laura.dietze@productandchange.com.

9. Changes to this policy

If we add analytics, newsletter sign-up, or other tools that process personal data in the future, we will update this policy accordingly and, where required, ask for your consent via the cookie banner beforehand.