Privacy policy

Last updated: October 13, 2026

1. Who is responsible

Friedrich Zwanzger
Am Küppershäuschen 2
42781 Haan, Germany
Email: hello@hikanos.org

Hikanos Project is currently run by Friedrich Zwanzger as a private person, until the non-profit legal entity is set up.

2. In short

3. Hosting (GitHub Pages)

This website is hosted by GitHub (GitHub, Inc., USA; GitHub B.V., Prins Bernhardplein 200, 1097 JB Amsterdam, Netherlands). When you visit the site, GitHub logs your IP address for security purposes, whether or not you have a GitHub account. GitHub may process this data in the USA; GitHub participates in the EU-U.S. Data Privacy Framework.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, reliable website).

More: GitHub Privacy Statement, https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

4. Visitor statistics (GoatCounter)

We use GoatCounter (operated by Martin Tournoij, Ireland) to count page views. GoatCounter uses no cookies or browser storage. Your IP address is used only to derive your country and is not stored; of your browser identification only the browser and operating system name are kept. A random ID linked to your visit is held in memory for up to eight hours. We see aggregate figures only (pages, referrers, browser, operating system, country, language, screen width). Data is stored on servers of Hetzner Online GmbH in Finland and Germany.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding, in aggregate, how the site is used).

More: https://www.goatcounter.com/help/privacy

5. Application form and contact form (Tally)

Our application form and contact form are provided by Tally BV (Belgium) and open on tally.so. We receive what you enter, e.g. name, email, country and time zone, and for applications your answers about your financial situation, your interests and your availability. Tally stores form data in the EU (Google Cloud, Belgium) and acts as our processor under a data processing agreement.

Purpose: to answer your question or assess and discuss your application.

Legal basis: Art. 6(1)(b) GDPR (steps prior to your participation, at your request) and Art. 6(1)(f) GDPR (answering inquiries).

Retention: contact requests are deleted once answered, unless a follow-up conversation results. Applications are deleted once they are no longer needed for the program.

More: https://tally.so/help/gdpr

6. Newsletter (MailerLite)

If you sign up for our newsletter, we use MailerLite (MailerLite Limited, 88 Harcourt Street, Dublin 2, Ireland) to store your email address and send the newsletter, roughly every 1–3 months. MailerLite acts as our processor; its data storage is in the EU. Our sign-up form is part of our own website; MailerLite's script is not loaded on our pages.

We use double opt-in: after signing up you receive an email asking you to confirm. Only after confirming are you subscribed. We record the time of sign-up and confirmation to be able to prove your consent.

We measure whether newsletters are opened and which links are clicked, to improve them.

Legal basis: Art. 6(1)(a) GDPR (your consent). You can withdraw at any time via the unsubscribe link in every email or by writing to us. Your address is then deleted or blocked.

More: https://www.mailerlite.com/legal/privacy-policy

7. Email and calls

If you email us or book a call, we use your data to reply and to prepare the conversation.

Legal basis: Art. 6(1)(b) or (f) GDPR. We delete the correspondence when it is no longer needed, unless legal retention periods apply.

8. Links to other websites

We link to other sites, e.g. Calendly (booking calls), LinkedIn, Google Sheets (our calculators), and the sites of partner programs, podcasts and books. No data is passed to them until you click a link; from then on, their privacy policies apply.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to withdraw consent at any time with effect for the future (Art. 7(3)). Where we rely on legitimate interest, you may object to the processing on grounds relating to your particular situation (Art. 21).

You also have the right to complain to a data protection authority. The authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, poststelle@ldi.nrw.de, https://www.ldi.nrw.de

10. Changes

We update this policy when the website or the services we use change. The current version is always on this page.