Legal

Privacy policy.

This site loads Google Analytics and YouTube players only if you allow them in the cookie notice, and you can change your mind at any time. Here is what happens to your data, on what legal basis, and your rights under the GDPR.

1. Controller

The controller for data processing on this website within the meaning of Art. 4(7) GDPR is Niclas Schlopsna, trading as spectup, Kirchbachweg 22, 81479 Munich, Germany. Email: management@dealmakers.studio. Telephone: +49 172 7754188.

We have not appointed a data protection officer because we are not required to under Art. 37 GDPR or § 38 BDSG. Please send any privacy enquiry to the address above.

2. Hosting and delivery

This website is hosted and delivered by Cloudflare (Cloudflare, Inc., United States) through Cloudflare Pages. When you open a page, your browser transmits your IP address, the date and time of the request, the page requested and the referring address, and your browser type and operating system. Cloudflare processes this data to deliver the page and to protect the site against attacks and abuse. Cloudflare sets no cookies on this site.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in the secure and reliable operation of the website. Cloudflare acts as our processor. We keep no access logs of our own.

The fonts, images and scripts of this site are served from our own domain. Your browser makes no request to Google Fonts or any other font provider, and none to a third party at all until you allow Google Analytics or embedded video in the cookie notice.

3. The episode player (YouTube)

Episodes play in a YouTube player in privacy-enhanced mode (youtube-nocookie.com, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The player is built only when you press play, and only if you have allowed embedded video in the cookie notice. If you have not, pressing play shows a play button that loads that one video when you press it. Your cookie choice does not change. Until a player loads, no data goes to YouTube.

When a player loads, YouTube receives your IP address, the page you are on and technical information about your browser, and may store information on your device to play the video. What YouTube does with this data is governed by Google's privacy policy.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, given in the cookie notice or by pressing play on the held video. You can withdraw it at any time with "Cookie settings" in the footer; withdrawing does not affect what happened before. YouTube's own cookies sit on youtube.com and cannot be deleted from this site; your browser settings remove them.

4. Reach measurement (Google Analytics 4)

With your consent, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, United States, as its processor) to see which pages are read, how visitors find the site and for how long they stay. It is loaded only after you accept measurement in the cookie notice. Until then nothing is requested from Google and no Google Analytics cookie exists. The site tells Google that analytics storage is denied by default (Google consent mode) and grants it only when you accept.

When it runs, Google Analytics sets the cookies "_ga" and "_ga_" followed by our measurement ID, which last up to 2 years, and records the pages you view, the time spent, the referring address, your approximate location (city level, derived from your IP address), and the type of device, browser and operating system. Google Analytics 4 does not log or store IP addresses. We have switched off Google signals and ad personalisation, and we use no advertising features. We do not combine the data with other data about you.

Retention: event data in Google Analytics is kept for at most 14 months and then deleted automatically.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time, with effect for the future, by switching off "Measurement" under "Cookie settings" in the footer. Withdrawing deletes the Google Analytics cookies on this site and stops all further requests to Google. Recipient: Google, as our processor under an order processing agreement. See section 8 for transfers outside the EU.

5. Links to YouTube, Spotify and Substack

Links to our channels on YouTube, Spotify and Substack open those services. Nothing is sent to them before you click. Once you are on their pages, their own privacy policies apply.

6. Getting in touch

The form under "Pull up a chair" does not send anything from this website. It opens your own email program with a note addressed to management@dealmakers.studio, filled in with what you typed. Nothing is transmitted until you send that email yourself.

When you write to us, we process your name, your email address, your firm and your message to reply to you and, if you want to be a guest or a sponsor, to plan the episode or the partnership with you.

Legal basis: Art. 6(1)(b) GDPR where your message concerns a guest appearance or a sponsorship. Otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention: we keep your messages while we are in contact with you, and afterwards as long as they are needed for the episode or partnership that followed, or to establish, exercise or defend legal claims. Business letters are kept for 6 years under § 257 HGB, and accounting records for 10 years under § 147 AO. You can ask us to delete your data at any time; we do so within one month unless a legal duty requires us to keep it.

7. Storage in your browser

The site stores three small entries in your browser, none of which is sent to us or to anyone else:

• "dealmakers.consent.v1" (local storage): your answer to the cookie notice, the date you gave it and the version of this policy it relates to. It stays until you clear your browser data or until this policy changes in a way that needs a new answer.
• "dealmakers.consent.dismissed" (session storage): a note that you closed the cookie notice without answering, so it does not appear again on every page of the same visit. It is deleted when you close the tab.
• "dm-leader" (session storage): the short opening animation plays once per visit, and this entry skips it when you reload. It is deleted when you close the tab.

Legal basis: § 25(2) no. 2 TDDDG, because the first two are needed to remember and respect your cookie choice and the third to provide the page as you asked for it, and Art. 6(1)(f) GDPR, our legitimate interest in respecting your choice. Apart from the Google Analytics cookies described in section 4, which exist only if you accept them, and the cookies that YouTube may set if you allow video, this site sets no cookies and uses no advertising or tracking tools.

You can change your choice at any time with "Cookie settings" in the footer of every page.

8. Transfers outside the EU

Cloudflare and Google may process data in the United States, Google only where you have allowed Google Analytics or embedded video. Both are certified under the EU-U.S. Data Privacy Framework, and the European Commission has decided that certified companies provide an adequate level of protection (Art. 45 GDPR). Where data is transferred outside that framework, the EU Standard Contractual Clauses apply (Art. 46(2)(c) GDPR).

9. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR)
• have it corrected (Art. 16 GDPR) or deleted (Art. 17 GDPR)
• restrict its processing (Art. 18 GDPR)
• receive it in a portable format (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR)

Write to management@dealmakers.studio to use any of these rights.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

10. Changes

We update this policy when the site changes. The date at the top shows the current version.