PRIVACY POLICY

1. Controller and contact

The controller responsible for the processing described below is ISMAN & Partner, owner Calin-Mihai Isman, Steinstraße 31 bis 33, 50259 Pulheim, Germany.

For privacy enquiries or to exercise your rights, contact info@ismanundpartner.com or telephone +49 173 5235276.

2. Website hosting by Netlify

Our website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Netlify uses a distributed server network. When you request a page, the hosting infrastructure processes technical information, in particular your IP address, request time and destination, data volume, response status and information supplied by your browser, such as browser type, operating system and, where transmitted, the referring URL.

This processing delivers the website, monitors availability, helps diagnose faults and detects and prevents abuse and attacks. It includes the hosting service’s technical request and error statistics. The legal basis is Article 6(1)(f) GDPR: our legitimate interest is to provide a functioning and secure website.

Netlify processes personal data on our behalf under its Data Processing Agreement (DPA), pursuant to Article 28 GDPR. Netlify incorporates this DPA into its contractual terms. It also uses further service providers; its current list is linked below.

Retention of technical logs depends on the type and purpose of the data: request and error data support investigation of transmission failures and service faults; security data support detection and investigation of attacks. Records relevant to a specific incident may need to be retained until the investigation and any necessary legal action are complete. Once the relevant purpose and any statutory retention requirement have ended, the data must be erased or anonymised. Technical implementation follows the deletion rules applicable to the hosting service. A reporting period selectable in the Netlify dashboard does not establish when all logs are erased.

3. Transfers outside the European Economic Area

Hosting with Netlify may involve processing personal data in the United States in particular. Netlify states in its DPA that it participates in the EU–US Data Privacy Framework. Transfers covered by that certification rely on the European Commission’s adequacy decision under Article 45 GDPR. For the circumstances specified in the DPA where that mechanism does not apply, the agreement provides for EU Standard Contractual Clauses as safeguards under Article 46 GDPR.

Information about these safeguards and additional service providers is available through the links in the preceding section. You may also request a copy of the relevant safeguards by emailing info@ismanundpartner.com.

4. Fonts, cookies and interactive content

Fonts, images and animations are served with the website through its hosting infrastructure. We do not embed external font services, advertising pixels or social media plugins. Our website does not set analytics or marketing cookies or create visitor identifiers for recognition across other websites.

The interactive room and forms initially process your input in your browser. The AI head shown on the monitor is an animation, not a chatbot, and does not send input to an AI provider. Technical processing by Netlify is described in section 2.

5. Contact, introductory coffee and qualification enquiries

When you contact us by email or telephone, we process the contact details and information you provide to respond and, where relevant, arrange an appointment or prepare your participation.

The Negotiation Masterclass for Top Executives form uses your name, business email, company, role and motivation to prepare an email. Completing it does not send those details to our web server. Opening the enquiry passes the details to your email application. We receive them only when you send the message there. The optional copy function writes the prepared text to your device’s clipboard at your request. Introductory coffee enquiries likewise use an email that you send yourself.

The legal basis is Article 6(1)(b) GDPR where you request pre-contractual steps or contact us about your contract. For general enquiries and business contacts acting for a company, we rely on Article 6(1)(f) GDPR; our legitimate interest is to respond to and organise business communications.

Providing your data is voluntary. However, we cannot properly respond or assess a qualification enquiry without the necessary information. Please avoid unnecessary confidential case details or particularly sensitive personal data. Sending and receiving email involves the respective email service providers.

6. Registration and booking through Universe

Our booking buttons link to external event pages on Universe, a service within the Ticketmaster group. No booking widget is embedded in this website. Your browser connects to Universe only when you open the link. The booking provider’s privacy information and, where applicable, cookie settings then apply. Universe identifies Ticketmaster GmbH as the relevant company for Germany; its linked privacy notice lists the responsible companies for other countries.

When you book a masterclass, Universe makes information available to us as the organiser for participation and administration. This may include names, contact details, the booked event, booking reference, booking or payment status and billing information where applicable. We use it to organise attendance, provide event communications, administer billing and handle booking enquiries. A booking person or their company may also provide us with details of another participant.

The legal basis is Article 6(1)(b) GDPR for a contract with you. Where your company or another person books on your behalf, we rely on Article 6(1)(f) GDPR; our legitimate interest is to deliver the booked event to the nominated participants. Statutory billing and retention obligations are based on Article 6(1)(c) GDPR.

You enter payment details with the booking provider or its payment providers. Those providers explain their own processing purposes, international transfers and retention periods in their privacy information. Details marked as required during booking are necessary for the booking process. The following retention rules apply to information received by us.

7. Other recipients and retention

Within our organisation, data is accessible to those who need it for the activities described. Depending on the activity, further recipients may include the hosting, email and booking providers described above, billing service providers and tax advisers, and public authorities where disclosure is legally required.

We retain enquiries and qualification information until the matter is concluded. This depends on whether questions, appointment arrangements requested by you or an admission decision remain outstanding. If a contract follows, information needed for it is retained with the contract records. Information no longer needed is erased unless a statutory retention obligation or a specific need to establish, exercise or defend legal claims applies.

Booking and attendance data is retained for the event and its final administration. Where statutory retention obligations apply, accounting records such as invoices are generally retained for eight years and qualifying business correspondence for six years. The start of each period follows the applicable law, usually the end of the relevant calendar year. Statutory extensions may apply. This retention is based on Article 6(1)(c) GDPR, in particular in conjunction with section 147 of the German Fiscal Code. Any further retention needed for legal claims follows the applicable limitation periods and the progress of a specific proceeding, on the basis of Article 6(1)(f) GDPR.

We restrict the use of data retained solely for statutory retention or evidential purposes to those purposes. Specific information about hosting logs is provided in section 2.

8. External links

Our pages contain links to external websites, such as Universe and LinkedIn. Linked content is not embedded as external plugins. If you follow a link, the relevant provider processes data generated by that request under its own responsibility and privacy information.

9. Protecting transmission

Connections to this website use HTTPS with TLS encryption. This protects data in transit between your browser and the hosting infrastructure. Email protection also depends on the email services involved; end-to-end encryption is not automatically provided.

10. Your data protection rights

Subject to the applicable statutory conditions, you have the following rights. To exercise them, contact info@ismanundpartner.com.

Where processing is based on your consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before withdrawal.

• Access to your personal data and information about its processing (Article 15 GDPR).
• Rectification of inaccurate data or completion of incomplete data (Article 16 GDPR).
• Erasure of your data (Article 17 GDPR).
• Restriction of processing (Article 18 GDPR).
• Data portability for automated processing based on consent or a contract (Article 20 GDPR).

11. Your right to object

Where processing relies on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Article 21 GDPR). We will then stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.

You may object to processing for direct marketing at any time without giving a reason. Your data will then no longer be processed for that purpose. Send objections to info@ismanundpartner.com.

12. Complaints and automated decisions

You may complain to a data protection supervisory authority, particularly in the place of your habitual residence, place of work or the alleged infringement. The authority responsible for our location is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW). Its current contact details and complaint form are available through the link below.

This website does not make decisions based solely on automated processing that produce legal or similarly significant effects under Article 22 GDPR. Qualification enquiries are submitted for personal assessment; the website does not decide admission.

13. Version and changes

Last updated: September 2026. This notice applies to negotiation-masterclass.de. We update it when the services used on this website, the processing described or legal requirements change.