Privacy Policy

1. Controller & Contact

PaperFrame7 UG (haftungsbeschränkt)
Belgradstraße 68
80804 Munich, Germany
Phone: +49 151 52452142
General contact: [email protected]
Privacy inquiries: [email protected]
Managing Director: Niclas Ondrak

2. Scope

This policy explains how we process personal data when you visit this website, submit a cohort application, contact us, or book a program Q&A, or submit an application through a Meta Instant Form. PaperFrame•7 is coaching-oriented and non-therapeutic. Please do not submit clinical or detailed medical histories through standard website forms.

3. Data We Process

Depending on your interaction, we may process:

• Website & technical data: IP address, browser and device information, timestamps, and server logs required for secure site delivery.
• Application and inquiry data: name, email address, optional mobile number, application focus, a short work-related decision statement, availability, participation acknowledgement, and separate contact choices.
• Scheduling data: the contact details and appointment information you provide if you book a program Q&A through Calendly.
• External service requests: requests to third-party services that are loaded directly in the browser, especially Calendly and the application intake endpoint when active.

4. Purposes & Legal Bases

We process technical data to provide and secure the website (Article 6(1)(f) GDPR). We process application, inquiry, and scheduling data to respond to your request and take pre-contractual steps (Article 6(1)(b) GDPR). We do not use application data for unrelated email marketing unless you separately opt in to that communication.

5. Recipients & External Services

We share data only where necessary with service providers that support website hosting, secure delivery, scheduling, and application processing. This includes:

• Hosting and CDN providers for reliable site delivery and server security logs.
• Calendlyon the contact page when you schedule a program Q&A.
• Our application intake endpoint when you submit your cohort application.
• Meta Lead Ads and Instant Forms when you submit an application through Facebook or Instagram.

Some of these providers may process data outside the EU/EEA. Where required, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

6. Meta Lead Ads and Instant Forms

We use Meta Lead Ads and Meta Instant Forms to receive non-binding applications and expressions of interest for PaperFrame•7 cohorts. When you submit an Instant Form on Facebook or Instagram, Meta provides us with the information you enter in the form. Depending on the form, this may include your name, email address, professional situation, application answers, availability, acknowledgements, and contact choices.

PaperFrame7 UG (haftungsbeschränkt) processes this information to assess your request, administer the admissions process and contact you about a potential admissions step or booking. The legal basis is Article 6(1)(b) GDPR, as the processing is necessary to take steps at your request before a potential contract.

The form is provided within Meta's platforms. Meta processes personal data in accordance with its own privacy information and applicable terms. When you submit the form, the application data is transmitted to PaperFrame7 UG. Meta and other service providers may process information outside the EU/EEA. Where required, appropriate transfer safeguards apply.

Access is limited to authorised members of the PaperFrame•7 admissions team and service providers required for application administration and communication. We do not use application data for unrelated email marketing unless you have separately opted in.

Applications that do not result in a booking are retained for up to six months after submission and are then deleted or anonymised, unless continued retention is required to document pre-contractual communication or comply with legal obligations. Contractual, booking and accounting records may be retained for the statutory retention period.

Applications are reviewed by a person. We do not make admission decisions based solely on automated processing.

For more information about your rights or to submit a privacy request, please use the privacy contact details stated in this policy.

7. Cookies, Analytics & Tracking

We use Vercel Web Analytics to understand how this site is used. It is a privacy-friendly, cookie-free analytics service that records aggregated page views, referrers, countries, device types, and versioned application-funnel events. Funnel events may include string-based campaign, ad set, ad, creative, and form identifiers supplied in the page URL. They never include names, contact details, or free-text application answers. No cookies are set, no cross-site tracking takes place, and no personally identifiable information is stored. IP addresses are processed only transiently to derive an approximate country and are not retained. The data processor is Vercel Inc. (USA); processing is based on our legitimate interest in understanding aggregate site usage (Art. 6(1)(f) GDPR). If you opt in through our cookie settings, we also use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) to measure visits and conversions originating from LinkedIn and to build website audiences for LinkedIn advertising. The tag may process online identifiers, device and browser data, IP address, referrer URL, pages viewed, timestamps, and cookie information. This processing, including any transfer outside the EU/EEA, takes place only on the basis of your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time via “Cookie settings” in the site footer. Third-party embeds such as Calendly may still place or read technical cookies needed for their own service once you use the widget.

8. Retention

We retain website and inquiry data only as long as necessary for the relevant purpose. Applications that do not result in a booking are retained for up to six months after submission and are then deleted or anonymised unless continued retention is required to document pre-contractual communication or comply with legal obligations. If a booking is concluded, fiscal and contract-related records may be retained for up to 10 years in line with German retention obligations.

9. Your Rights

Under GDPR, you have the right to access, rectification, erasure, restriction of processing, objection, and data portability. You can also withdraw any consent you have given with effect for the future. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with the competent supervisory authority.

10. Contact

For questions regarding this privacy policy or data protection, please contact [email protected].