Privacy Policy
Last updated: 7 October 2026
Controller
The controller responsible for processing personal data on this website is:
Calmsides UG (haftungsbeschränkt)
c/o Smarvo 168
Südstraße 31
47475 Kamp-Lintfort
Germany
Email: contact@calmsides.com
This policy covers the website calmsides.com. The Pausean app has its own privacy policy.
Hosting and delivery
The website is delivered through Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary data: your IP address, date and time, the page requested, the page you came from (referrer), and your browser and operating system.
The purpose is to deliver the website securely and quickly and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement with Cloudflare is in place. Cloudflare is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses apply in addition (Art. 46(2)(c) GDPR). Cloudflare keeps the logs for as long as these purposes require. Cloudflare does not name a fixed period.
The website is only available over an encrypted connection (TLS).
Audience measurement with Cloudflare Web Analytics
We measure the reach of the website with Cloudflare Web Analytics. The service sets no cookies, stores nothing in your browser and builds no user profiles. It records aggregated information: pages viewed, referrer, country, device type and browser, and loading times. Cloudflare shows this information for the last six months.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to understand which pages are used and to improve the website.
Google Analytics, only with your consent
If you consent to the “Statistics” category, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before that, the website loads no Google script and sets no cookie.
Google Analytics stores cookies in your browser and records how you use the website, such as pages viewed, time spent, device and approximate region. Google Analytics 4 does not store IP addresses. Data may be transferred to Google LLC in the United States; Google is certified under the EU-US Data Privacy Framework, and Standard Contractual Clauses apply in addition.
The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time via “Privacy settings” in the footer of every page. Usage data is deleted after 2 months.
Cookies and browser storage
The website stores some settings in your browser. They are not sent to us.
- Your consent choice, so the prompt does not appear on every visit, for 12 months. Entry “calmsides:consent” in browser storage (localStorage).
- Your chosen language and light or dark theme, until you change them or clear your browser storage.
These entries are strictly necessary to provide functions you explicitly request (Section 25(2) No. 2 TDDDG, Art. 6(1)(f) GDPR).
Only with your consent, Google Analytics additionally sets the cookies _ga and _ga_<ID> to distinguish visits. They are stored for up to 24 months.
Contacting us by email
If you email us, we store your details and the content of your message to handle your inquiry and answer follow-up questions. We do not share this data without your consent. The legal basis is Art. 6(1)(b) GDPR where your inquiry concerns a contract, otherwise Art. 6(1)(f) GDPR.
Request for a first conversation
On the pages for companies you can request a first conversation. We process the details from the form (whom you are seeking support for, your concern, previous measures, name, email address and, if you provide them, company, role and number of employees) to prepare and arrange the conversation with you. The form runs on our own website. Your request reaches us as an email that Brevo delivers on our behalf (see “Newsletter”). The legal basis is Art. 6(1)(b) GDPR.
Newsletter
For the newsletter we need your email address. We also store the language of the page you signed up on, so that we write to you in that language. After signing up, you receive an email to confirm your subscription. The newsletter is sent through Brevo (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) on our behalf, under a data processing agreement. The legal basis is your consent (Art. 6(1)(a) GDPR).
We evaluate whether a newsletter is opened and which links in it are clicked. For this, the emails contain a tracking pixel, a small image file that is loaded from Brevo’s servers when the email is opened, and links that are routed through Brevo. In the process, your email address, the time of the opening or click, your IP address and details of your device and email program are processed. We use this evaluation to see which content is read and to improve the newsletter. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give when you sign up. You can withdraw it at any time by unsubscribing from the newsletter.
You can unsubscribe at any time via the link in every email or by writing to us. We keep your address until you unsubscribe.
Links to other services
The website links to Instagram and the App Store. No content from these services is embedded. Only when you follow a link do the privacy terms of that provider apply.
The website’s fonts are delivered with the website. No connection is made to Google Fonts or any other font provider.
Retention
We store personal data only as long as the purpose requires or the law demands.
- Logs at Cloudflare: for as long as delivery and protection against attacks require
- Google Analytics: 2 months
- Your consent choice: 12 months
- Newsletter: until you unsubscribe
- Emails and requests: until your matter is resolved, then only as far as statutory retention periods apply
Your rights
Under the GDPR you have the right to
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- withdraw consent with effect for the future (Art. 7(3) GDPR)
To exercise them, write to contact@calmsides.com. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Right to object
Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.