Shifting Tomorrow
Back to home

Privacy policy

Last updated: 5 October 2026

Controller

Shifting Tomorrow GmbH
Lutterothstraße 17, 20255 Hamburg, Germany
Represented by managing director Felix Radloff
Email: felix.radloff@shiftingtomorrow.com
Phone: +49 173 2162589

Hosting and technical delivery

This website is served from a virtual server operated by us at IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Requests require processing technical connection data, particularly the IP address, time, requested address and technical information transmitted by your browser. This is necessary to deliver the website and maintain its security. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing a secure and reliable website.

Our web server does not continuously log individual website requests. Technical diagnostic and error logs may arise during operational incidents and may contain IP addresses. They are used solely for troubleshooting and security and deleted when no longer needed for those purposes. Further information is available in the IONOS privacy notice. Communication between your browser and our website is encrypted using HTTPS.

Contact form and email

The contact form does not send data to a form server. It prepares a draft in your email application. A message is transmitted through your email provider only when you send it yourself. We do not receive your entries unless you send the message.

We process contact details and message contents to respond to your enquiry. For enquiries concerning the preparation or performance of a contract, Article 6(1)(b) GDPR applies. Other enquiries are handled under our legitimate interest in business communication under Article 6(1)(f) GDPR. We use Microsoft 365 for business email. Processing by Microsoft and affiliated companies may take place outside the European Economic Area. Microsoft states that it is certified under the EU–US Data Privacy Framework. Information about Microsoft's processing and safeguards for international transfers is available in the Microsoft privacy statement.

We retain enquiries for as long as needed to handle them and, where applicable, manage the business relationship. Documents subject to statutory retention requirements, particularly business correspondence and tax records, are retained for the required period. They are then deleted unless another legal basis applies.

Scheduling and external links

Scheduling links lead to Calendly. Calendly is not embedded here and your browser does not connect to it simply by visiting our website. Opening a link takes you to the external service, where its privacy notice applies. We use scheduling and contact details provided to us for your requested meeting to prepare and conduct it, under Article 6(1)(b) GDPR for pre-contractual enquiries or Article 6(1)(f) GDPR otherwise. LinkedIn's privacy notice applies when you open our external LinkedIn profile.

Cookies, fonts and analytics

Our website uses no analytics or marketing tools and sets no cookies. It does not store a language preference or other browser settings. Images, scripts, stylesheets and the Manrope font are served from our own web server. Loading the font does not connect your browser to an external font provider.

Your rights

Subject to the applicable legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing relies on consent, you may withdraw that consent at any time with effect for the future.

Right to object: Where processing relies on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. To exercise your rights, contact us using the email address above.

You may lodge a complaint with a data protection supervisory authority, particularly the Hamburg Commissioner for Data Protection and Freedom of Information.

Providing data

Connection data is necessary to serve the website. Information in an enquiry is voluntary; without sufficient contact details and a description of your request, we may be unable to respond. This website does not use automated decision-making, including profiling.