Privacy Policy

Last updated: 20 October 2026 · Version 4.0 · applies to this website. In case of doubt, the German version prevails.

1. Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Folkert Eggen
Sole proprietorship “YearAtlas”
Münzweg 8
20097 Hamburg
Germany
Email: mail@yearatlas.com
Phone: +49 173 2622608

No data protection officer has been appointed, as the legal requirements for doing so (Section 38 BDSG, Art. 37 GDPR) are not met. Please send any data protection questions directly to the address above.

2. Summary

• This website sets no cookies and contains no analytics or marketing tools.
• We do not keep access logs ourselves. Our hosting provider processes technically necessary data when you visit (3.1).
• We only process your email address if you voluntarily join the waiting list (3.2) or write to us (3.6).
• No advertising, no tracking, no sale of data.

3. This website

3.1 Hosting and server log files

When you visit this website, our hosting provider automatically processes technical information transmitted by your browser: IP address, date and time of access, page requested, browser and operating system, and the referring page. This is necessary to deliver the website securely and reliably and to protect it against attacks.

Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare Pages” service). The website is delivered through the provider's global network of data centres, usually from the one closest to you. A data processing agreement under Art. 28 GDPR is in place. For transfers to the USA, see section 6.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).
Retention: We do not keep access logs ourselves and have not enabled logging in our account. Cloudflare processes the data only as long as necessary to deliver the site and fend off attacks, and then deletes it according to its own schedules; Cloudflare does not state a fixed period for this.

3.2 Waiting list

If you join the waiting list, we process your email address to invite you personally when YearAtlas launches. There is no newsletter and no other promotional email.

Double opt-in: After signing up you receive an email with a confirmation link. You are only added once you confirm. To be able to prove your consent, we store the time of sign-up and confirmation and the IP address used.

Service provider: We use Brevo, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Brevo processes the data on servers within the European Union and is bound by our instructions under a data processing agreement (Art. 28 GDPR). More information: Brevo privacy policy.

Legal basis: your consent (Art. 6(1)(a) GDPR); logging the consent is based on Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (duty to demonstrate consent).
Retention: until the launch invitation has been sent, at most six months after YearAtlas launches, or until you withdraw — whichever comes first. We keep proof of consent for up to three years after the end of the year in which the consent ends (standard limitation period).
Withdrawal: at any time via the unsubscribe link in every email or informally by email to mail@yearatlas.com. This does not affect the lawfulness of processing before withdrawal.
Voluntary: Providing your email address is voluntary; without it we simply cannot invite you.

3.3 Fonts

The fonts used on this website are hosted on our own web server. No connection to Google or other font providers is made when you visit the site.

3.4 Cookies and browser storage

This website does not set cookies or store information in your browser. There are no analytics or marketing tools, so no consent banner is required. Should this change, we will update this policy beforehand and obtain your consent where necessary.

3.5 Share and follow buttons

The buttons for sharing (e.g. WhatsApp, LinkedIn) and for following our profiles (LinkedIn, Instagram) are plain links. Only when you click one does the respective provider's page open, and its privacy policy applies. No data is sent to these providers before that.

3.6 Contact by email

If you email us, we process your address and the information you provide in order to respond. Emails to mail@yearatlas.com are forwarded to our mailbox by Cloudflare (see 3.1); Cloudflare does not store the messages permanently.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Retention: until your enquiry has been dealt with, unless statutory retention obligations apply.

4. The YearAtlas app

The YearAtlas app has not been released yet. We will add the privacy information for the app to this page before it appears in the App Store.

5. Recipients and service providers

We only share personal data where necessary for the purposes described. We do not sell data. All service providers processing data on our behalf are contractually obliged to protect your data at least as well as described in this policy.

• Cloudflare (hosting of this website, email forwarding) — Cloudflare, Inc., San Francisco, USA, see 3.1 and 3.6.
• Brevo (waiting list) — Sendinblue GmbH, Berlin, see 3.2.
• Authorities — only where we are legally required to.

6. Transfers to third countries

Cloudflare, Inc. is based in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, so an adequacy decision of the European Commission applies to the transfer (Art. 45 GDPR). In addition, our data processing agreement with Cloudflare includes the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Brevo processes waiting-list data within the European Union.

7. Retention

• Website server log files: see 3.1.
• Waiting list: see 3.2.
• Email enquiries: see 3.6.

Statutory retention obligations (e.g. under commercial and tax law) remain unaffected.

8. Security

All connections to this website are encrypted with TLS.

9. Minimum age

The waiting list is intended for people aged 16 and over. Younger people may only sign up with the consent of their parents or guardians (Art. 8 GDPR).

10. No automated decisions, no tracking

We do not make automated decisions within the meaning of Art. 22 GDPR and do not create profiles. This website contains no advertising and no tracking.

11. Your rights

You have the following rights regarding personal data concerning you:

• access (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdrawal of consent with effect for the future (Art. 7(3) GDPR).

For any request, an email to mail@yearatlas.com is sufficient.

Right to object (Art. 21 GDPR): Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.

Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

12. Changes to this policy

We update this privacy policy when our data processing changes — in particular before the YearAtlas app is released. The current version applies and can be found on this page.