“The results are clear: 256.000$ YoY revenue growth, at a profitable 3.97 ROAS” – Tom S.
Get My Free Growth Audit

Privacy Policy

Last updated: November 2026

This policy explains what personal data we process when you visit germanlaunch.com, book an appointment, are in contact with us, or have received a letter from us.

1. Controller

Lukas Baumann
German Launch
Schneidemühler Str. 45a
76139 Karlsruhe
Germany

Phone: +49 179 4191382
Email: info@germanlaunch.com

We have not appointed a data protection officer, as we are not legally required to.

2. Your rights

You have the right to:

  • access the data we hold about you (Art. 15 GDPR)
  • have incorrect data corrected (Art. 16 GDPR)
  • have your data erased (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent at any time, with effect for the future (Art. 7(3) GDPR)

You also have the right to object (Section 3). A short email to info@germanlaunch.com is enough.

You can also lodge a complaint with a data protection authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

3. Your right to object

Where we process your data based on our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21(1) GDPR).

You can object to the use of your data for marketing, including by post, at any time and without giving reasons (Art. 21(2) GDPR). A short email to info@germanlaunch.com is enough. We will not contact you again after that.

4. Hosting and server log files

Our website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server is located in Frankfurt am Main, Germany. We have a data processing agreement with Hostinger.

Each time a page is loaded, the server automatically stores what your browser sends: IP address, date and time, the page requested, the previous page, and your browser and operating system. We need this data to deliver the website and protect it against attacks. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Log files are kept only as long as needed for this and are then deleted automatically.

To make pages load faster, we use the LiteSpeed Cache plugin. It stores copies of our pages on the server and sets no cookies for visitors.

5. Protection against attacks (Wordfence)

We use the Wordfence security plugin by Defiant, Inc., Seattle, USA. It checks requests to our website to detect and block attacks. This involves your IP address, the page requested and the time. Data on blocked attacks and login attempts, including IP addresses, is sent to Defiant’s servers in the USA on the basis of the European Commission’s standard contractual clauses. The legal basis is our legitimate interest in website security (Art. 6(1)(f) GDPR).

6. Cookies

We ourselves do not use cookies for marketing or statistics, and we do not use analytics services such as Google Analytics.

Our website itself sets only one cookie: “pll_language” remembers whether you view the site in German or English and is deleted after one year. It is strictly necessary for the language choice (Section 25(2) no. 2 TDDDG). The legal basis is Art. 6(1)(f) GDPR.

On pages with a booking form, Jotform and Calendly set their own cookies (Section 8).

7. Visitor counting for our letter campaign

On the pages named in our letters, we count visits with our own plugin on our server. It sets no cookies and shares no data.

To count each visitor only once per day, the server creates a one-way identifier (hash) from the IP address, browser identifier and a secret key. The IP address itself is not stored. On the day of the visit, the identifier is pseudonymous. The key is replaced every day. After that, we can no longer trace the identifier back to an IP address. We keep the entries as statistics without a fixed deadline.

We also record the device type, whether the page was opened via the QR code, and whether someone clicked into the booking form. The QR code is the same on every letter, and we do not link visits to letter recipients. The legal basis is our legitimate interest in measuring the success of our letter campaign (Art. 6(1)(f) GDPR).

8. Amazon growth analysis and appointment booking (Jotform, Calendly)

When you book an Amazon growth analysis or a call through our form, we process the details you enter (e.g. name, email address, details about your Amazon account and revenue, ASIN) and the booked appointment. We use them to prepare the analysis, hold the appointment and contact you about it. The legal basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

The form is provided by Jotform Inc., San Francisco, USA. Jotform stores the entries on servers in Frankfurt am Main, Germany. Appointment booking within the form runs through Calendly LLC, Buford (Georgia), USA. We have data processing agreements with both providers.

Jotform and Calendly load when the page opens. Your IP address and technical browser data are sent to these providers. The legal basis is our legitimate interest in simple online booking (Art. 6(1)(f) GDPR). The providers set their own cookies: Calendly “__cf_bm” for bot protection. On the English-language form, Jotform also sets “guest” and “userReferer”, which Jotform itself classifies as statistics and marketing cookies. For details, see the privacy notices of Jotform and Calendly.

We also copy your form details and appointment into our contact list (Section 9).

9. Email, appointments and contact list (Google Workspace)

For email, calendar, video calls (Google Meet) and our contact list (Google Sheets), we use Google Workspace by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. When you write to us, book an appointment or talk to us, your messages, contact details and appointments are processed there. We have a data processing agreement with Google.

Depending on the case, the legal basis is your request or our contract with you (Art. 6(1)(b) GDPR), or our legitimate interest in communicating with you (Art. 6(1)(f) GDPR).

10. Our letters to Amazon sellers

We write to companies that sell on Amazon by post and offer them a free Amazon growth analysis. If you have received such a letter:

  • Source of the data: the public seller information (imprint) on your Amazon seller profile. The revenue range is our own estimate.
  • Which data: company name, brand, legal form, name of the managing director or owner, address, email address, phone number, website, VAT ID, Amazon seller ID, estimated revenue range, region, contact status and internal notes.
  • Purpose: to tell you about our services by post and see who responds. We only use your email address and phone number once you respond to our letter.
  • Legal basis: our legitimate interest in marketing to businesses by post (Art. 6(1)(f) GDPR, Recital 47).
  • Where the data is kept: in our contact list in Google Workspace (Section 9). We address the letters ourselves, without a printing or mailing service.
  • Storage period: Section 12.
  • Objection: at any time by email to info@germanlaunch.com (Section 3).

11. Clients and invoices (sevDesk)

For invoicing and accounting, we use sevDesk by sevDesk GmbH, Im Unteren Angel 1, 77652 Offenburg, Germany. The data is stored on servers in Germany. We process name, company, address, VAT ID and invoice data. We have a data processing agreement with sevDesk. The legal bases are the performance of our contract with you (Art. 6(1)(b) GDPR) and our legal retention obligations (Art. 6(1)(c) GDPR).

12. How long we keep data

  • Prospects and letter recipients: we keep contact details, requests, form details and appointments as long as they are relevant to a possible collaboration or later contact. We delete them at your request or after an objection.
  • Do-not-contact list: if you have objected or become a client, we keep your company name, address and the date on a do-not-contact list, so we never send you marketing again. We keep this entry as long as we run letter campaigns (Art. 6(1)(f) GDPR).
  • Clients: we keep your data for the duration of our collaboration. After that, we keep it only as long as the law requires: invoices and other accounting records 8 years, business letters 6 years, books and annual accounts 10 years (Section 147 AO, Section 257 HGB).
  • Server log files and visitor counting: Sections 4 and 7.

13. Transfers outside the EU

Jotform, Calendly and Google may transfer data to the USA. Jotform Inc., Calendly LLC and Google LLC are certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies to them (Art. 45 GDPR). For Wordfence (Defiant, Inc., USA), the European Commission’s standard contractual clauses apply (Art. 46 GDPR).

14. Other information

You are not legally or contractually required to give us any data. Without the details in the form, however, we cannot carry out the Amazon growth analysis. We do not make automated individual decisions, including profiling, within the meaning of Art. 22 GDPR.