Communication Forge™

Privacy Policy

Last updated: 11 October 2026

This policy explains what personal data we process when you visit communicationforge.com, join the waitlist, contact us, or (from launch) create a customer account, buy the program and, where applicable, withdraw from it. It follows the EU General Data Protection Regulation (GDPR) and German data-protection law.

1. Controller

Romina Alexandru, sole proprietor, trading as Communication Forge
Mohrstraße 2, 80939 München, Germany
Email: hello@communicationforge.com · Phone: +49 171 3502259
Website: communicationforge.com

You can contact us about data protection at the email address above.

2. Overview

PurposeDataLegal basisStorage period
Delivering and securing the websiteIP address, date and time, requested page, browser/device data, technical logsArt. 6(1)(f) GDPR (legitimate interest in a secure, working website)Short-term technical logs at the hosting provider; not combined with other data by us
WaitlistEmail address, time of sign-up, source of sign-upArt. 6(1)(a) GDPR (consent)Until you unsubscribe or withdraw consent, or until the waitlist is closed after launch, then deletion
Contact by email or phoneYour contact details and messageArt. 6(1)(b) or (f) GDPRUntil the matter is resolved, then deletion unless retention duties apply
Customer account (from launch)Name, email address, login credentials, email-confirmation status, login and session dataArt. 6(1)(b) GDPR (contract)Until the account is deleted; data we must keep for legal reasons until the relevant period ends
Withdrawal through the customer account (from launch)Name, identification of the contract withdrawn, content of the declaration, date and time of receipt, address for the confirmation, confirmation emailArt. 6(1)(b) and (c) GDPR (contract; legal obligation to confirm the withdrawal, § 356a BGB)Until the statutory retention and limitation periods have expired
Voluntary reason for withdrawal (from launch)Your voluntary statement of why you withdrewArt. 6(1)(a) GDPR (consent)kept only as long as needed to evaluate it for improving the program, and deleted when you withdraw your consent; you can withdraw your consent at any time
Program purchase (from launch)Name, email, billing data, order and payment status, access dataArt. 6(1)(b) GDPR (contract); Art. 6(1)(c) GDPR (tax and commercial law)Statutory retention periods for accounting records and business letters (6 to 10 years, depending on the document)
Saving your cookie choiceYour consent choice and its date, stored in your browser§ 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPRUp to 6 months, then we ask again

3. Hosting and server logs

The website is delivered through Cloudflare (Cloudflare, Inc., USA, and its affiliates). When you open the site, your browser transmits technical data (such as your IP address and request details) to Cloudflare’s servers, which process it to deliver the page and to protect against attacks and misuse. Cloudflare acts as our processor under a data processing agreement. Where data is transferred to the USA, this is covered by the safeguards in Cloudflare’s Data Processing Addendum. More information: cloudflare.com/privacypolicy.

4. Waitlist

If you enter your email address and click “Join the waitlist”, we use it to inform you about the launch of Communication Forge™ and about early-access offers. Providing it is voluntary. You can withdraw your consent at any time with effect for the future, by using the unsubscribe link or writing to us; the lawfulness of processing before withdrawal is not affected.

The sign-up form sends your email address to our waitlist, which is stored with Cloudflare (Cloudflare, Inc., USA), which processes it on our behalf. We also send you a one-time confirmation email through Cloudflare’s email service; it contains no advertising.

5. Contact

If you write or call us, we process the data you give us to answer your request. We delete it once the matter is resolved, unless we must keep it by law.

6. Customer account, purchases and withdrawal (from launch)

Customer account. To buy and use the program you create a customer account. We process your name, email address and login credentials for this and confirm your email address through a link. Through the account you can use the program, view your order details and withdraw from your contract.

Purchases. When the program is on sale, we will process the data needed to conclude and perform the contract, give you access, issue invoices, and meet tax and accounting duties. Payment is handled by the payment provider shown at checkout, which receives the payment data it needs; its privacy policy, linked at checkout, applies to that processing.

Withdrawal. If you withdraw from your contract using the withdrawal function in your customer account, we process your name, the identification of the contract withdrawn, the content of your declaration and the date and time of receipt. We send you a confirmation of receipt by email to your account address without undue delay; we are legally required to do so (§ 356a BGB). We also use this data to handle the withdrawal and the refund, and keep it as evidence.

Voluntary reason. After your withdrawal is complete you may voluntarily tell us why you withdrew. This is not required, has no effect on your withdrawal and is stored separately from it. We use it to improve our offering. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

7. Recipients

We pass personal data on only to the service providers mentioned above that process it on our behalf (hosting, waitlist and email service, also for account and confirmation emails, payment handling), to our tax adviser or authorities where the law requires it, and otherwise only with your consent or where the law permits.

8. Transfers outside the EU/EEA

Some providers (for example Cloudflare) are based in or may process data in the USA. We rely on the safeguards offered by the provider, such as Standard Contractual Clauses or an adequacy decision, as stated in the provider’s agreement with us.

9. Cookies and similar technologies

We do not use analytics or marketing cookies at present. See our Cookie Policy for details, and use to change your choice.

10. Your rights

You have the right to: access your data (Art. 15 GDPR); rectification (Art. 16); erasure (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7(3)). To exercise your rights, write to the email address above.

11. Complaints

You have the right to complain to a data-protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Ansbach, Germany, www.lda.bayern.de. You may also contact the authority at your place of residence.

12. Automated decisions

We do not use automated decision-making or profiling that produces legal effects concerning you.

13. Changes

We will update this policy when our Services or the law change. The current version is always available on this page.

© 2026 Communication Forge™