Privacy Policy

Introduction

This Privacy Policy explains what personal data we collect when you visit cto.berlin, how and why we use it, who we share it with, and the rights you have over it. Please read it before using the site or submitting any personal information.

Who is responsible

The controller responsible for the processing described here is Lucido LLC, 7901 4th St N, STE 300, St. Petersburg, FL 33702, United States. You can reach us by e-mail at [email protected] or by phone at +1 (315) 898-1130.

Information we collect

Information you provide. When you use the contact form we collect your name, company, e-mail address and your message. When you book a call, you provide the details needed to schedule it (such as your name, e-mail address and chosen time).

Information collected automatically. When you visit the site, our hosting/CDN and the analytics tools below receive technical data such as your IP address, browser and device type, referring page, and the pages and page elements you interact with.

Cookies and your consent

We use cookies and similar technologies (such as local storage). Strictly necessary technologies that make the site work are always active. Optional analytics technologies are described below.

Visitors in the EU/EEA are shown a cookie banner, and analytics are only enabled after you click “Accept.” Google Analytics additionally runs under Google Consent Mode and sets no analytics cookies until consent is given. You can change or withdraw your choice at any time by clearing this site’s cookies and local storage in your browser, which will make the banner appear again.

Analytics tools

PostHog. A product-analytics tool that we self-host on our own infrastructure (ph.lucido.dev). It records usage events and heatmaps (clicks, scrolling) to help us improve the site. It uses cookies/local storage and is activated only after you consent.

Google Analytics 4 (Google Ireland Ltd. / Google LLC). Consent-gated via Google Consent Mode — cookies are set only after you accept.

Plausible Analytics. A privacy-friendly, cookieless analytics tool that we self-host (t.lucido.dev). It does not use cookies and does not store personal data or full IP addresses.

Legal basis: your consent (Art. 6(1)(a) GDPR) for cookie-based analytics; our legitimate interest in aggregate, privacy-friendly statistics (Art. 6(1)(f) GDPR) for the cookieless analytics.

Booking a call

Scheduling is handled by our provider Cal.com, Inc. (United States). The details you submit to book a meeting are processed by Cal.com on our behalf to arrange and manage the appointment. Legal basis: taking steps prior to, or performing, a contract (Art. 6(1)(b) GDPR).

Contact form and spam protection

Messages sent through the contact form are transmitted to us by e-mail via our own mail service (lucido.dev) and used solely to respond to your enquiry. The form is protected against spam by Google reCAPTCHA (Google), which may process your IP address and interaction data to distinguish humans from bots. Legal basis: our legitimate interest in handling enquiries and preventing abuse (Art. 6(1)(f) GDPR), and/or steps prior to a contract (Art. 6(1)(b) GDPR).

WhatsApp

If you click the “Chat Now” button you are taken to WhatsApp, operated by Meta Platforms Ireland Ltd. Any conversation you start there is processed by WhatsApp/Meta under their own privacy policy.

Sharing and international transfers

We do not sell your personal data. We share it only with the service providers named above, acting as our processors, and where required by law. Some providers (Google, Cal.com, Meta) are based in or transfer data to the United States; such transfers are safeguarded by appropriate measures such as the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses. PostHog and Plausible are self-hosted on our own infrastructure.

Your rights

If you are in the EU/EEA (or the UK), you have the right to access, rectify, erase, restrict and port your personal data, to object to processing, and to withdraw consent at any time without affecting processing carried out beforehand. You also have the right to lodge a complaint with a data-protection supervisory authority. To exercise any of these rights, contact us at [email protected].

Data retention

We keep contact and booking data only as long as needed to handle your request and to meet any legal obligations, after which it is deleted. Analytics data is retained according to each tool’s configured retention period.