Who we are
ToWhom.ai is the data controller for this website. For full controller details, see the Impressum. For privacy questions, write to [email protected].
What we collect
- Email correspondence. If you write to us at [email protected] or [email protected], we receive your email address and the contents of your message.
- Anonymous analytics. When you visit this site, we collect cookieless analytics about how the site is used.
Why we collect it
Email: to reply to you. Legal basis: our legitimate interest in answering messages addressed to us (Art. 6(1)(f) GDPR).
Analytics: to understand how visitors use the site and improve it. Legal basis: our legitimate interest in operating and improving the website (Art. 6(1)(f) GDPR).
Analytics
We use PostHog (EU region) in cookieless mode. PostHog collects:
- Pages visited
- Browser type and version
- Device type (desktop / mobile)
- Approximate location (country level)
- How you found us (search engine, social, direct)
The analytics setup is privacy-preserving:
- No cookies. No persistent identifiers.
- No cross-day tracking. The anonymous identifier rotates daily.
- No personally identifiable information collected.
- Your IP address is used only briefly — together with your user agent, hostname, and a daily-rotating salt — to derive that day’s anonymous identifier. The IP is then discarded, never stored, never logged.
Where the data lives
Anonymous analytics data is processed and stored by PostHog in the EU region. Email correspondence is stored in our mail provider’s inbox.
How long we keep it
- Email: retained as long as needed to handle your inquiry; deleted on request.
- Analytics: anonymous data is retained indefinitely. Because it cannot be linked to an individual, it stays anonymous over time.
Your rights under GDPR
You can ask us to:
- Access your data
- Correct your data
- Delete your data
- Object to processing
- Restrict processing
- Receive your data in a portable format
Write to [email protected]. We respond within 30 days.
What we will never do
- Sell your data
- Share your email with third parties unrelated to your inquiry
- Add you to a mailing list without your explicit request
Supervisory authority
If you believe your data is being handled improperly, you can complain to the data protection authority in Berlin:
Berliner Beauftragte für Datenschutz und Informationsfreiheit · datenschutz-berlin.de.