Skip to content

Privacy Policy

This privacy policy describes which personal data buddiesCREW processes on this public website and what it is used for.

We keep the processing as limited, transparent and comprehensible as possible.

Last updated: September 2026

1. Controller

Controller within the meaning of the General Data Protection Regulation:

Michael Krieger
Buchenring 11
94086 Bad Griesbach i. Rottal
Germany
Email: hello@buddiescrew.com

buddiesCREW is the name of the project.

Further details can be found in the Imprint.

2. Hosting and server log files

buddiescrew.com is operated on webspace provided by United Domains.

The website consists mainly of static HTML, CSS, JavaScript, image and media files. For certain functions – in particular the server-side processing of sign-ups – PHP is also used.

When you visit the website, technically necessary server data are generated. These may include in particular:

  • the domain or address requested
  • IP address
  • date and time of access
  • HTTP method used
  • referrer

According to United Domains, data generated in Apache log format are stored for 14 days for security reasons.

The purpose of the processing is the technical provision, stability and security of the website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted operation of buddiescrew.com.

The recipient or processor is the hosting provider United Domains.

3. Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Platform of
Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany.

Usercentrics helps us present privacy and consent settings transparently, store your choices and make them changeable later.

In particular, information about your privacy choice, the time of that choice and technically required information may be processed.

The Usercentrics CMP is integrated on buddiescrew.com as a technically necessary service.

You can reopen and change your privacy settings at any time via the “Privacy Settings” link in the website footer.

We ask for your privacy choice again after twelve months at the latest. If there are material changes to the services used or to the processing, the prompt may appear again earlier.

For the processing of consent data, Usercentrics uses among others Google Cloud EMEA Ltd. According to Usercentrics, the servers used for this are located in Germany and Belgium. Usercentrics also notes that access or transfers to third countries cannot be fully excluded and that safeguards under Art. 44 et seq. GDPR are used for this purpose.

Where the processing is required to provide and document a legally compliant consent management, it is based on Art. 6(1)(c) GDPR. In addition, there is a legitimate interest in a transparent and user-friendly management of privacy choices pursuant to Art. 6(1)(f) GDPR.

Where technically necessary information is stored on or accessed from your device, this is done – where applicable – on the basis of Section 25(2) no. 2 TDDDG.

We currently do not use optional analytics or marketing tracking services on buddiescrew.com.

4. Two ways to sign up

You can register for Early Access or sign up for buddiesCREW updates.

Mandatory fields in each case are your email address and your first name. Further details are optional.

Consent is not pre-selected.

The legal basis for processing the data you provide voluntarily is Art. 6(1)(a) GDPR.

5. Early Access

If you sign up for Early Access, the following data may be processed:

  • email address
  • first name
  • region or city, if provided
  • interests, if selected:
    • Community
    • Inspiration
    • Personal Development
    • Shared activities
  • free-text comments, if provided
  • type of sign-up
  • source or page of the sign-up
  • language used
  • consent status and technical information about the double opt-in

The purpose is to inform you about the launch and relevant developments of buddiesCREW and – where appropriate – to involve you in further development.

Signing up does not create any entitlement to later access.

6. Updates

If you sign up for updates, the following data may be processed in particular:

  • email address
  • first name
  • region or city, if provided
  • free-text comments, if provided
  • type of sign-up
  • source or page of the sign-up
  • language used
  • consent status and technical information about the double opt-in

The purpose is to send selected information about buddiesCREW.

7. Server-side transmission and Brevo

Form data are not stored permanently in a database of our own on the website.

After you submit the form, they are transmitted to Brevo via a server-side PHP endpoint.

We use Brevo for:

  • managing sign-ups
  • sending the double opt-in email
  • managing the confirmation status
  • later sending the communication you requested

The Brevo API key is held exclusively on the server and is not delivered in the browser or in the publicly accessible website code.

Brevo states that the hosting servers used for its databases are operated within the European Union. The primary hosting providers named are locations in France and Germany as well as Google Cloud in Belgium.

Brevo provides a data processing agreement for the processing of personal data.

The legal basis for the processing is Art. 6(1)(a) GDPR.

8. Double opt-in

After you submit a sign-up form, your sign-up is not yet complete.

Brevo sends an email with a confirmation link to the address provided.

Only after you click the confirmation link is your sign-up treated as confirmed.

Until then, the contact remains in “Pending” status.

After successful confirmation, the contact is moved to “Confirmed” status and may be used for buddiesCREW communication according to the sign-up selected.

If the sign-up is not confirmed, no marketing communication takes place on the basis of this sign-up.

The confirmation serves in particular to ensure that the email address provided is actually controlled by the person who submitted the sign-up.

9. Retention period for sign-ups

We generally store confirmed contact data for as long as the corresponding consent exists or for as long as they are required for the stated purpose.

You can withdraw your consent at any time with effect for the future.

After withdrawal, a request for erasure or if the purpose ceases to apply, the data are erased or – where storage is required due to legal obligations or to evidence a withdrawal – restricted or processed only for that purpose.

Unconfirmed sign-ups are not used for newsletter or marketing communication and are erased or restricted once the purpose of processing ceases to apply.

Technical sending, security or evidence data may be stored for longer in line with statutory or technically required retention periods.

10. Fonts, images and videos

The fonts used on buddiescrew.com – in particular Poppins – are self-hosted.

They are not loaded from Google Fonts.

Images and hero videos are hosted on our own website infrastructure.

No YouTube, Vimeo or comparable external video embeds are currently included.

11. Local settings in the browser

buddiescrew.com may store information locally in your browser in order to keep your own settings.

This includes in particular:

  • bc-theme
    for the chosen display or colour scheme
  • bc-lang
    for the chosen language

This information generally remains on your device and is not used for tracking or profiling.

The purpose is convenient use of the website.

The legal basis is Art. 6(1)(f) GDPR.

12. No analytics and no marketing tracking

We currently do not use analytics or marketing tracking services on buddiescrew.com such as:

  • Google Analytics
  • Meta Pixel
  • Microsoft Clarity
  • session recording
  • Google Ads tracking

No behaviour-based advertising profiles are currently created via this website.

If optional analytics, media or marketing services are added later, they will be included in the consent management platform before they are activated and – where required – loaded only after your consent.

13. Social networks

Links to social networks such as Instagram or LinkedIn are simple external links.

Simply visiting buddiescrew.com does not embed any content from those platforms.

Only if you click such a link and visit the respective platform do that provider’s privacy terms apply.

14. Spam protection in the forms

Our forms contain technical safeguards against automated or abusive sign-ups.

These may include:

  • an invisible honeypot field
  • a simple arithmetic check
  • plausibility and input checks
  • a check for unusually fast form submissions
  • server-side validation

These measures serve solely to protect the forms and the systems behind them against abuse.

They are not used for advertising or profiling.

The legal basis is Art. 6(1)(f) GDPR.

15. No Grok or Vercel runtime

The publicly provided website does not require a Grok, xAI or Vercel runtime.

No Grok preview or development environments are delivered to website visitors.

The production website is provided via the configured webspace.

16. Withdrawal and your rights

You can withdraw consent you have given at any time with effect for the future.

For buddiesCREW communication you can use the unsubscribe options provided or email hello@buddiescrew.com.

You can also change the website’s privacy and consent settings at any time via “Privacy Settings” in the footer.

You have – where the statutory requirements are met – in particular the right to:

  • access
  • rectification
  • erasure
  • restriction of processing
  • data portability
  • object to certain processing

You also have the right to lodge a complaint with a data protection supervisory authority.

17. Competent supervisory authority

For non-public controllers in Bavaria, the Bavarian State Office for Data Protection Supervision (BayLDA) is generally competent:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany

Further information and a way to lodge a complaint can be found on the BayLDA website.

If the idea speaks to you.