How ready is your site for AI agents? Run the free Agent Readiness Check.
Check for free

Privacy policy

As of: April 2026

1. Controller

HARWAY Experience GmbH
Ericusspitze 4
20457 Hamburg
Germany
Email: info@harwayexperience.com

2. What data we process

We process personal data that you actively provide to us or that is technically required to deliver this website and handle requests.

  • Contact and briefing data such as name, email address, company, message or project description.
  • Lead and booking metadata such as source page, language, CTA, booking intent, Calendly entry point and lead-magnet interest.
  • Technical data such as IP address, user agent, timestamps, server logs and necessary session or security cookies.
  • Usage data from Vercel Analytics, in particular page views, referrers, device data and performance metrics in aggregated form.

3. Contact form, briefing and lead magnet

When you submit a contact form, briefing form or lead-magnet form, we store the submitted data in Supabase. Supabase acts as a backend and database service for reliable capture, deduplication and tracking of processing status.

For notifications about new enquiries we use Resend. Resend processes the necessary content and recipient data for email notifications to HARWAY Experience.

The legal bases are Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient request handling).

4. Hosting and analytics

This website is provided via Vercel. Vercel processes technical access data, server logs and security-relevant information to deliver the website, detect attacks and ensure performance.

Vercel Analytics is active. The collected data is used for technical reach and performance analysis, not for building personal advertising profiles.

We also use Plausible Analytics, a cookieless, privacy-friendly analytics tool. It sets no cookies and builds no personal profiles; the IP address is used only for anonymized aggregation and is not stored. The legal basis is our legitimate interest in privacy-friendly analytics (Art. 6(1)(f) GDPR).

5. External services for booking and payment

For discovery calls we link to Calendly. For appointment bookings Calendly processes appointment, contact and calendar data according to its own privacy terms.

For workshop bookings we use Stripe Payment Links. For payments Stripe processes payment, billing, device and fraud-prevention data according to Stripe's privacy terms.

6. Recipients, third-country transfers and retention

Recipients are HARWAY Experience and the listed service providers, as far as required for operations, communication, analytics, booking or payment processing.

Some service providers may process data outside the EU/EEA. Transfers rely on appropriate safeguards, in particular standard contractual clauses or equivalent protection mechanisms.

We store personal data only as long as necessary for the respective purpose or as legal retention obligations require.

7. Your rights

Data subjects have rights under the GDPR to access, rectification, erasure, restriction of processing, data portability and objection to certain processing.

Consent can be withdrawn at any time. You have the right to lodge a complaint with the data protection authorities.

Contact: info@harwayexperience.com

8. Status of this policy

This privacy policy reflects the current state of the website, including Supabase, Resend, Vercel Analytics, Stripe Payment Links and Calendly.