Skip to content

Privacy Policy

Transparent and as minimal as possible: no tracking services are used, and external media are only loaded with consent.

This is a translation. The German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Aervista LLC (FYN Media is a brand of Aervista LLC)
30 N Gould St
Sheridan, WY 82801
USA
Email: [email protected]

No data protection officer has been appointed.

Personal data is processed only to the extent necessary to provide the website, respond to enquiries, or on the basis of consent. The legal bases are in particular:

  • Art. 6(1)(a) GDPR – consent (e.g. external media such as appointment booking)
  • Art. 6(1)(b) GDPR – performance of a contract and pre-contractual measures (e.g. enquiries, quotes, initial consultation)
  • Art. 6(1)(f) GDPR – legitimate interests (e.g. secure and stable operation of the website)
  • Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act) – consent for storing or accessing information on the end device where not strictly necessary; Section 25(2) no. 2 TDDDG for strictly necessary storage (e.g. the cookie choice)

3. Hosting

This website is a static website hosted by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When the website is accessed, the host processes the data technically required for delivery. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

Cloudflare is certified under the EU-US Data Privacy Framework. Transfers to the USA are based on the adequacy decision (EU-US Data Privacy Framework); in addition, the European Commission’s standard contractual clauses have been agreed (see section 12).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable and secure provision of the website).

4. Server log files

When the website is accessed, information transmitted by the browser is automatically stored in server log files:

  • IP address (truncated where applicable)
  • date and time of access
  • page or file accessed
  • referrer URL
  • browser type and version, operating system
  • HTTP status code and amount of data transferred

This data is used to ensure operation, analyse errors and fend off attacks. It is not combined with other data sources. Legal basis: Art. 6(1)(f) GDPR. Retention period: 30 days, after which the data is deleted unless retention is required for evidentiary purposes.

5. Fonts

The fonts used on this website are served locally from our own server. No Google Fonts or other fonts are loaded from third-party servers, and no data is transferred to third parties in this context.

6. Contact form

When the contact form is used, the data entered is processed, e.g. name, email address, company, topic (“What is it about?”), optional budget range and message. The data is used to handle the enquiry and any follow-up questions.

Submissions are sent via the service Formspree (Formspree, Inc., USA; contact: [email protected]), which receives the form data and forwards it by email. A data processing agreement is in place with the provider. Formspree is based in the USA; transfers are based on EU standard contractual clauses (Art. 46(2)(c) GDPR) (see section 12).

Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

7. Multi-step “Free Check” form

A multi-step form is offered for the free check. The following data is collected:

  1. website URL
  2. goals (e.g. more enquiries, more revenue, brand awareness)
  3. marketing channels used so far
  4. budget range
  5. name and email address, plus confirmation of the privacy notice

The information is used to analyse the website manually and to prepare and send a personal assessment (e.g. video or PDF). Submissions are also sent via Formspree (see section 6).

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at the data subject’s request). The information is not used for promotional emails or a newsletter.

8. Contact by email

When contact is made by email, the data provided (e.g. name, email address, content of the enquiry) is processed to handle the enquiry. Incoming emails to [email protected] are forwarded via Cloudflare Email Routing (Cloudflare, Inc., USA, see section 3) to a mailbox at Proton AG (Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland) and stored there. An adequacy decision of the European Commission is in place for Switzerland (Art. 45 GDPR).

Legal basis: Art. 6(1)(b) or (f) GDPR.

9. Appointment booking

The tool Calendly (Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA) is embedded for booking an initial consultation. The booking widget is loaded only after consent to the “External media” category; until then only a placeholder is shown. Once loaded, data such as IP address, device information and the booking details entered (name, email address, preferred date, any notes) are transferred to the provider.

Calendly is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the adequacy decision (EU-US Data Privacy Framework) (see section 12).

Legal basis for loading: Art. 6(1)(a) GDPR and Section 25(1) TDDDG; for processing the booking data: Art. 6(1)(b) GDPR.

10. Video conferencing (Zoom)

We hold initial consultations and follow-up meetings by video conference via Zoom (Zoom Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA). The Zoom link is generated automatically through the Calendly integration when a meeting is booked and sent by email.

When participating, Zoom processes in particular the name or display name, email address, meeting metadata (e.g. date, time, duration, participants), technical connection data (e.g. IP address, device and browser information) and – where enabled – audio and video data during the call. Calls are not recorded; Calendly’s note-taking feature (Notetaker) is disabled.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at the data subject’s request). A data processing agreement pursuant to Art. 28 GDPR is in place with Zoom. Zoom is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the adequacy decision (EU-US Data Privacy Framework) (see section 12). Participation is also possible without a camera.

On the first visit, a consent banner is displayed. The choice made is stored in the browser’s localStorage under the key “consent-v1” (categories, timestamp, version) so that the banner does not reappear on every page view. This information remains on the end device and is not transmitted to a server.

No analytics, statistics or marketing services (tracking) are used on this website. Consent is required only for the “External media” category, i.e. loading the Calendly appointment booking (see section 9).

Legal basis: Section 25(2) no. 2 TDDDG and Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent). The entry remains until deleted by the user or until the consent version changes. An overview of the categories is available on the Cookie settings page.

12. Transfers to third countries

The following providers mentioned above are based in the USA: Cloudflare (hosting, email forwarding), Formspree (forms), Calendly (appointment booking) and Zoom (video conferencing). Since 10 July 2023, an adequacy decision of the European Commission has been in place for the USA (EU-US Data Privacy Framework).

  • Cloudflare, Calendly and Zoom are certified under the EU-US Data Privacy Framework. Transfers are based on the adequacy decision (EU-US Data Privacy Framework, Art. 45 GDPR); for Cloudflare, standard contractual clauses have additionally been agreed.
  • Formspree: transfers are based on EU standard contractual clauses (Art. 46(2)(c) GDPR).
  • Proton AG (email mailbox) is based in Switzerland. An adequacy decision of the European Commission is in place for Switzerland (Art. 45 GDPR).

Note: The controller, Aervista LLC, is based in the USA (Wyoming). Personal data is processed in accordance with the requirements of the GDPR, insofar as it applies.

13. Retention period

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion. Enquiries submitted via the contact and check forms or by email are deleted 12 months after they have been fully handled, unless statutory retention obligations apply. Documents relevant under commercial and tax law are retained for the statutory period (usually 6 or 10 years). For third-party services, the information above or the providers’ terms apply.

14. Rights of data subjects

Data subjects have the right at any time to:

  • access the stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on Art. 6(1)(f) GDPR on grounds relating to their particular situation (Art. 21 GDPR)

An informal request to [email protected] is sufficient.

Consent given can be withdrawn at any time with effect for the future (Art. 7(3) GDPR). Simply click the “Cookie settings” link in the website footer, where individual categories can be deactivated. The lawfulness of processing carried out before the withdrawal remains unaffected.

16. Right to lodge a complaint with a supervisory authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

17. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

18. Changes

This privacy policy will be updated whenever the website, the services used or the legal situation change. The version published here applies.

Last updated: October 28, 2026

Free intro call