Privacy Policy

Last updated: 25 October 2026

This notice explains how we process personal data when you visit talkacy.com, join the Talkacy waitlist or contact us. It covers the current website and waitlist.

Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

For privacy questions and requests, email dominik@talkacy.com.

Visiting the website

Cloudflare, Inc. provides our website hosting, content delivery and security. Your browser sends technical information needed to deliver the site, including your IP address, the requested URL, request time, browser and device information, and a referring page where your browser supplies one.

We process this information to deliver the website, detect abuse and diagnose faults. The legal basis is our legitimate interest in operating a reliable, secure website under Article 6(1)(f) GDPR. Technical application logs are retained within Cloudflare’s limited log retention period, currently no longer than seven days. Information about a specific security incident may be retained for as long as needed to investigate it or establish, exercise or defend legal claims.

Joining the waitlist

When you choose “Join waitlist”, you agree to receive emails about Talkacy’s availability. We store your email address, the date and time of signup, and the version of the signup notice in a private database hosted by Cloudflare. Your IP address and the spam-check token are not stored in that subscriber database.

The legal basis is your consent under Article 6(1)(a) GDPR. Providing your email is voluntary. Without it, we cannot add you to the waitlist or send availability updates. Joining the waitlist does not place an order.

You can withdraw consent at any time by emailing dominik@talkacy.com and asking to leave the waitlist. We will stop availability emails and remove your waitlist entry. Withdrawal does not affect the lawfulness of processing before withdrawal.

We retain your entry while the waitlist is being used to notify you about availability, until you withdraw consent or the waitlist purpose ends, whichever happens first. Where a specific legal obligation or dispute requires limited records to be retained, they are kept only for that obligation or claim and are not used to send availability updates.

Protecting the signup form

When you submit the form, Cloudflare Turnstile checks technical signals such as your IP address, browser information, connection characteristics and the website origin to distinguish people from automated requests. The check runs invisibly and is loaded when you submit the form. We also use your IP address to limit repeated signup attempts.

The legal basis is our legitimate interest in preventing spam and misuse under Article 6(1)(f) GDPR. Access to information on your device that is strictly necessary to secure the signup service you request is based on § 25(2)(2) TDDDG. Security information is processed for as long as necessary for abuse detection, service security and incident investigation.

Cloudflare processes Turnstile signals on our behalf to protect this form. It also acts as a controller when using signals to improve Turnstile’s bot detection. Its Turnstile Privacy Addendum and Privacy Policy explain that processing and its retention criteria.

Email correspondence

If you email us, we process your email address, message and any information you choose to provide so we can respond. We use Google Workspace for email, so Google processes the correspondence as our service provider.

The legal basis is our legitimate interest in answering enquiries under Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR where your enquiry concerns steps you request before entering a contract. We retain correspondence until the enquiry is resolved and any necessary follow-up is complete. If statutory retention obligations apply or records are needed for a legal claim, we retain the relevant correspondence for that period.

Service providers and international transfers

Cloudflare processes website, security and waitlist data. Google processes email correspondence and emails we send through Google Workspace. Their authorised subprocessors may assist with these services. Personal data may be processed outside the European Economic Area, including in the United States.

Where applicable, transfers are covered by an adequacy decision, including the EU–US Data Privacy Framework for participating US recipients. For transfers requiring additional safeguards, the providers’ data processing terms incorporate the European Commission’s Standard Contractual Clauses. The relevant terms and safeguards are available in Cloudflare’s Data Processing Addendum and Google’s Cloud Data Processing Addendum. You can also contact us for information or a copy of the safeguards relevant to your data.

Cookies and tracking

The website does not use advertising pixels or visitor analytics scripts. Fonts and images are served with the website. Cloudflare’s security services may access device information or use storage where necessary to protect the requested service. Turnstile is described above.

Your rights

Subject to the conditions in the GDPR, you can request access to your personal data, correction, deletion, restriction of processing and a portable copy of data you provided. You can withdraw consent at any time.

You can object to processing based on legitimate interests for reasons relating to your particular situation. You can object to use of your data for direct marketing at any time; we will then stop that use. Contact dominik@talkacy.com to exercise these rights.

You also have the right to complain to a data protection supervisory authority, particularly in the EU country where you live, work or believe an infringement occurred.

We do not use your data to make decisions producing legal or similarly significant effects solely by automated means.