Privacy — Institute for Technic and Magic

01 Controller

The person named in our legal notice is responsible for data processing on this website. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

02 Hosting

This website is hosted by Render Services, Inc., 525 Brannan St, San Francisco, CA 94107, USA. Content is delivered from servers in the Frankfurt, Germany region. Processing is based on Art. 6(1)(f) GDPR — legitimate interest in a reliable presentation of the site. Where personal data is transferred to the US, transfer is based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and on Render's certification under the EU–U.S. Data Privacy Framework.

03 Server log files

Render automatically collects technical data that your browser sends with every request: IP address, browser type and version, operating system, referrer URL, and time of the request. Legal basis: Art. 6(1)(f) GDPR. We do not merge this data with other sources. Retention follows Render's policies.

04 Contact form

When you use the contact form, we send the data you enter (name, email, subject, message) to an endpoint at app.senze.ai — the same service that powers the contact form of senze.ai GmbH & Co. KG. From there messages are delivered to our inbox via Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA). Standard Contractual Clauses and data-processing agreements are in place with both providers. For spam protection we use a hidden honeypot field and a server-side check of the time spent on the form — no additional personal data is collected. Legal basis: Art. 6(1)(f) GDPR (handling your request).

05 Newsletter

When you subscribe to our newsletter, we process your email address and the timestamps of your sign-up and confirmation. Your IP address is not separately stored for the newsletter at sign-up; it appears only transiently in the platform server logs (see section 03). Subscription uses double opt-in: you receive a confirmation email with a link, and only after you click it are you actually subscribed. The data is sent to an endpoint at app.senze.ai and from there stored and dispatched via Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA); a data-processing agreement with Resend and EU Standard Contractual Clauses for the US transfer are in place. Legal basis: Art. 6(1)(a) GDPR (consent) and § 7(2) UWG. You can withdraw your consent at any time — either via the unsubscribe link in every newsletter email or by an informal message to the address in our legal notice. We store confirmed subscriptions until you unsubscribe. Unconfirmed sign-ups remain at the processor in "unconfirmed" status and can be deleted on informal request to the privacy address. For newsletter emails we use open and click tracking: every email embeds a 1×1 pixel that fires a request to Resend when the email is opened, logging IP address, user agent, and timestamp; all links in the email are also rewritten through the subdomain links.i-tam.org and routed via Resend, where a click is logged with the same fields before redirecting to the destination. Purpose: measuring newsletter reach and improving deliverability. This processing is covered by the consent you give at sign-up (Art. 6(1)(a) GDPR). Unsubscribing ends tracking for future emails; tracking on already-delivered emails cannot be undone for technical reasons.

06 Local storage

While you fill out the contact form, your input is stored as a draft in your browser's session storage (key: itam:contact-draft) so it is not lost if the tab is closed by accident. The draft stays only in your browser and is deleted at the latest when the form is submitted. Your cookie decision is stored under the key itam_cookie_consent in local storage so the banner does not reappear on every visit. Legal basis: § 25(2)(2) TDDDG.

07 Fonts

We use the typefaces "Inter" and "Bricolage Grotesque". Both are downloaded at build time and served from our own servers (Render, Frankfurt region). No request is made to Google Fonts or any other third-party CDN when you visit this site.

08 Your rights

You have the right to information about the personal data stored about you, its origin and recipients, and the purpose of processing; the right to rectification or erasure; the right to restriction of processing; the right to data portability; and the right to object. An informal email to the address in our legal notice is sufficient. You also have the right to lodge a complaint with the competent supervisory authority — in Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

09 SSL/TLS encryption

This site uses TLS encryption. You can recognise it by the "https://" in the address bar and the padlock icon in your browser. Data you transmit to us cannot easily be read by third parties.

10 Objection to marketing emails

We hereby object to the use of contact data published in our legal notice for the purpose of sending unsolicited marketing material. We expressly reserve the right to take legal action in the event of unsolicited promotional emails.

11 Analytics (PostHog)

This site uses PostHog (PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA) for audience measurement. Data is processed on the EU instance (eu.i.posthog.com) with servers in Frankfurt. Before you consent, measurement runs in cookieless mode: PostHog derives a daily-rotating, pseudonymous identifier from your IP address and user agent; nothing is stored in your browser. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in audience measurement) and § 25(2)(2) TDDDG. When you click "Agree", PostHog sets cookies for session-level measurement; legal basis is then Art. 6(1)(a) GDPR and § 25(1) TDDDG. When you click "No cookie", no measurement takes place. You can withdraw your choice at any time via "Cookie settings" in the footer. A data-processing agreement with PostHog and EU Standard Contractual Clauses for the US transfer are in place.