This website uses cookies

To make your visit as pleasant as possible, this site uses necessary and functional cookies.By giving us your consent, you help us improve your experience.For more information, please see our Data Privacy.

Privacy policy

This privacy policy explains which personal data is processed when you visit elejal.de, contact me or book an appointment, why this happens and which rights you have.

1. Who is responsible

Responsible for data processing on this website (controller under Art. 4(7) GDPR):

Isaac Alonso Elejalde Calles
Franzstr. 11
90419 Nürnberg
Germany
Email: support@elejal.de
Phone: +49 (0) 175 120 59 49

I have not appointed a data protection officer, as there is no legal obligation to do so.

2. In short

  • This website sets no cookies of its own and shows no advertising.
  • Google Analytics only runs if you agree to it in the cookie banner.
  • Fonts and scripts are loaded from this website itself, not from external servers.
  • I never sell your data.

3. Hosting and delivery (Cloudflare)

This website is hosted on Cloudflare Pages and delivered through the Cloudflare network, which also protects it against attacks and overload. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Whenever you open a page, your browser sends technical data that Cloudflare processes to deliver and protect the website: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system. I do not store these server logs myself and do not combine them with other data.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is a secure, fast and reliable website. I have concluded a data processing agreement with Cloudflare.

Transfer to the USA: Cloudflare is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies (Art. 45 GDPR). Cloudflare also uses the EU Standard Contractual Clauses.

More information: https://www.cloudflare.com/privacypolicy/

4. Cookie banner and local storage

The cookie banner is part of this website. It is not an external consent service, so no data is sent to anyone when it appears or when you make a choice.

This website saves two small entries in your browser's local storage. They are not cookies and are never sent to me:

  • elejal-consent: your cookie choice and when you made it, so the banner does not appear on every page. It is kept for 180 days, then you are asked again.
  • elejal-lang: your preferred language (English, Spanish or German), so the home page opens in your language. It is kept until you clear your browser data.

These entries are strictly necessary for functions you request (§ 25(2) no. 2 TDDDG). Saving your consent choice also allows me to demonstrate consent as required by law (Art. 6(1)(c) and Art. 7(1) GDPR).

You can change or withdraw your choice at any time with the Cookie settings link in the footer of every page.

5. Google Analytics (only with your consent)

If you click “Accept All” or switch on Analytics in the cookie settings, this website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your consent, Google Analytics is not loaded at all.

Google Analytics helps me understand how the website is used: which pages are viewed, how long visits last, which website you came from, which device and browser you use, your approximate location (country and city) and whether the contact form was sent, without its content. Google Analytics 4 does not store IP addresses. I only look at this information in aggregated form, to improve the website.

For this, Google sets the cookies _ga and _ga_GP28KG9CBG, which are stored for up to 2 years. The analytics script is loaded from this website, but the measurement data is sent to Google.

Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time with effect for the future via Cookie settings; the Google Analytics cookies are then deleted.

Storage period: analytics data is deleted automatically after 14 months.

Transfer to the USA: Google may process data on servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). I have concluded a data processing agreement with Google.

More information: https://policies.google.com/privacy

6. Contact form

If you send me a message through the contact form, I process the data you enter (name, company, email address, the service you are interested in, your budget and your message), plus the page you sent it from, the time, and the country derived from your IP address.

The form is received by a function running on Cloudflare (see section 3) and forwarded to my own automation server and my email inbox, so I can reply to you. A hidden field and a time check protect the form against spam; no external captcha service is used.

Legal basis: Art. 6(1)(b) GDPR if your request concerns a possible project, otherwise Art. 6(1)(f) GDPR (my legitimate interest in answering your request).

Storage period: I delete your request once it has been dealt with, unless statutory retention obligations (for example under German tax and commercial law) require me to keep it longer.

7. Email and phone

If you contact me by email or phone, I process the data you share to answer your request, on the same legal basis as for the contact form (section 6). My email is hosted by Google Workspace (Google Ireland Limited), with whom I have a data processing agreement; transfers to the USA are covered by the EU-US Data Privacy Framework.

8. Booking appointments (TidyCal)

On the pages for the discovery call, the deep dive strategy session and technical support, I embed a booking calendar from TidyCal, a service of Sumo Group, Inc., 1345 E. 6th Street, Suite 125, Austin, TX 78702, USA.

When one of these pages opens, your browser connects to TidyCal's servers, which receive your IP address and technical browser data. If you book an appointment, TidyCal processes the details you enter, such as your name, email address, chosen date and any notes. For paid sessions, the payment is handled by the payment provider shown in the booking form. I receive your booking details so I can prepare and hold the appointment.

Legal basis: Art. 6(1)(b) GDPR for the booking itself, and Art. 6(1)(f) GDPR for showing the calendar on the pages you open to book.

Transfer to the USA: TidyCal processes data in the USA on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR).

If you prefer not to use TidyCal, just email me and we will find a time together.

More information: https://tidycal.com/privacy-policy

9. Fonts, scripts and external links

All fonts, icons, animations and scripts are loaded from this website itself. No connection is made to Google Fonts or other external content networks.

This website links to other websites, for example Trustpilot or client projects. Data is only sent to those websites when you click a link; from then on, their own privacy policies apply.

10. Your rights

You have the following rights regarding your personal data:

  • access (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdrawal of your consent at any time, with effect for the future (Art. 7(3) GDPR)

Right to object: if I process your data on the basis of Art. 6(1)(f) GDPR, you can object at any time for reasons arising from your particular situation (Art. 21 GDPR).

To exercise your rights, just write to support@elejal.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany: https://www.lda.bayern.de

11. No automated decisions

I do not use your data for automated decision-making or profiling (Art. 22 GDPR). You do not have to provide any personal data to visit this website; without the fields marked as required, I cannot answer a contact request.

12. Changes to this policy

I update this privacy policy when the website or the legal situation changes. The version published here applies.

Last updated: October 2026