1. Controller
The controller responsible for the processing described in this notice is:
Martin AberastegueIrmtraud-Morgner-Straße 11
10318 Berlin
Germany
Email: hi@getbelki.com
Belki is the product name used for this website. No data protection officer has been appointed because there is currently no statutory requirement to appoint one.
2. Website delivery and security
GetBelki.com is delivered through Cloudflare. When you request a page, Cloudflare and the Belki Worker may process connection and request information such as your IP address, request time, requested URL, browser and device information, HTTP headers, security signals, and error information.
If you use the public agent-readiness checker, Belki sends the public URL you provide to Cloudflare Browser Run to render and inspect that page. Belki stores the normalized URL and technical result for up to 24 hours to avoid repeating the same scan. Short-lived aggregate usage records are retained for up to 90 days for cost control and abuse prevention. Do not submit private, authenticated, or secret URLs.
This processing is necessary for our legitimate interests in securely and reliably delivering the website, preventing abuse, and diagnosing failures under Article 6(1)(f) GDPR. Workers invocation logs are retained according to the Cloudflare account configuration and for no longer than seven days.
3. Belki waitlist
When you join the waitlist, we process your email address, the placement from which you joined, the date and time of your consent, and the version of the consent notice shown to you.
We use this information to manage the waitlist and send Belki launch and early-access emails. The legal basis is your consent under Article 6(1)(a) GDPR. Joining is voluntary, but we cannot add you to the waitlist without an email address.
You can withdraw your consent at any time by emailing hi@getbelki.com. Withdrawal does not affect processing that took place before withdrawal. We delete a waitlist record when consent is withdrawn and automatically delete inactive records no later than 24 months after the most recent recorded consent.
Email confirmation: Belki will introduce double opt-in before sending campaign or launch emails. Until that process is active, joining records your request but does not subscribe you to a marketing campaign.
4. Contacting us
If you contact us, we process the details you provide, such as your name, email address, company information, and message. We use them to respond and manage the relationship with you.
The legal basis is Article 6(1)(b) GDPR when your request concerns a possible contract and Article 6(1)(f) GDPR for other business correspondence. We retain correspondence for as long as needed to resolve the request and then only where legal retention or defence requirements apply.
5. YouTube product demo
The website does not connect to YouTube when the page first loads. It displays a Belki-hosted preview and creates the YouTube player only after you select “Load video from YouTube” or “Watch demo.” The player uses YouTube's privacy-enhanced domain, youtube-nocookie.com.
After you choose to load it, Google Ireland Limited may receive your IP address, browser and device information, referrer information, and your interactions with the player. YouTube may also access or store information on your device. Privacy-enhanced mode limits personalization, but it does not prevent the connection to Google.
The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. You can avoid this processing by not loading the video. Once the player has loaded, Belki cannot reverse data already transmitted to Google. See Google's Privacy Policy and data transfer frameworks.
7. Recipients, storage, and international transfers
Cloudflare
Cloudflare, Inc. provides website delivery, security, Workers, logging, and D1 database services as a processor. The waitlist database is configured with Cloudflare's EU jurisdiction restriction and read replication is disabled. Cloudflare may nevertheless process connection and service data internationally.
Where European personal data is transferred outside the EEA, Cloudflare relies on safeguards including the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses. See the Cloudflare Data Processing Addendum.
Google receives data only when you choose to load the YouTube player. Google states that it participates in the EU–US Data Privacy Framework for covered transfers.
Other disclosures
We may disclose data to professional advisers, authorities, or other recipients where necessary to comply with law, establish or defend legal claims, or protect the website. We do not sell personal data or use it for targeted advertising.
8. Your data protection rights
Subject to the GDPR's conditions, you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time.
To exercise a right, email hi@getbelki.com. We may request information needed to verify your identity.
You may also complain to a supervisory authority. The authority responsible for the Berlin-based controller is the Berlin Commissioner for Data Protection and Freedom of Information. You may instead contact the authority where you live or work.
9. Changes to this notice
We will update this notice when our processing changes. The effective date and version at the top identify the notice currently in force. Material changes affecting waitlist consent will be presented before the new processing begins.