Legal Notice & Privacy Policy
Impressum & Datenschutzerklärung

§ 1 — Legal Notice (Impressum)

Javier Andres Peñalba Barreto operates as a self-employed individual (Einzelunternehmer) providing intellectual property strategy and advisory services. He is not a licensed attorney or patent attorney and does not provide legal advice within the meaning of the Legal Services Act (Rechtsdienstleistungsgesetz).

Responsible for the content of this website pursuant to § 18 para. 2 MStV: Javier Andres Peñalba Barreto, at the address listed above.

§ 2 — Privacy Policy

2.1 General Information

This Privacy Policy explains how your personal data is collected, processed, and protected when you visit penalba-ip.com. We process your data strictly in accordance with applicable data protection law, in particular the General Data Protection Regulation (GDPR). Protecting your privacy is important to us.

2.2 Controller

2.3 Cookies

This website uses technically necessary cookies to ensure its correct functioning. These are small text files stored on your device. Necessary cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in providing a technically sound website). Session cookies are automatically deleted when you close your browser.

We also use Calendly, an external scheduling service, which may set its own cookies when you use the booking widget. Please refer to Calendly's Privacy Policy for details.

You can configure your browser to notify you when cookies are set or to refuse cookies entirely. Please note that disabling cookies may limit the functionality of this website.

2.4 Contact Form

When you submit a message via the contact form, your name, email address, and message are transmitted to and processed by Formspree (Formspree, Inc., USA), our form processing service provider, and then forwarded to us by email. Your data is used solely to respond to your enquiry. We do not share it with third parties without your explicit consent.

Processing is based on Art. 6 para. 1 lit. a GDPR (your consent given when submitting the form). You may withdraw your consent at any time by contacting us. Data is deleted once your enquiry has been resolved, unless statutory retention obligations apply.

2.5 Calendly

This website embeds a booking widget provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. When you use the booking widget, Calendly collects and processes personal data (including your name, email address, and selected time slot) in accordance with its own privacy policy, available at calendly.com/privacy. Data may be transferred to the United States. Calendly participates in the EU-US Data Privacy Framework. The legal basis for this processing is Art. 6 para. 1 lit. a GDPR (your consent when using the booking widget).

2.6 Server Log Files

Our hosting provider (STRATO AG, Germany) automatically collects and stores server log files, which your browser transmits to us. These include browser type, operating system, referrer URL, IP address, and time of access. This data cannot be attributed to specific individuals and is not combined with other data sources. It is stored on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website).

2.7 SSL/TLS Encryption

This website uses SSL/TLS encryption for all data transmissions, recognisable by the "https://" prefix and padlock symbol in your browser's address bar. This ensures that data you transmit cannot be read by unauthorised third parties.

2.8 Data Retention

Personal data submitted via this website is retained only for as long as necessary to fulfil the stated purpose. Data subject to statutory commercial or tax retention obligations may be stored for up to ten years.

2.9 Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — to obtain confirmation of whether we process your data and a copy thereof
• Right to rectification (Art. 16 GDPR) — to request correction of inaccurate data
• Right to erasure (Art. 17 GDPR) — to request deletion of your data under certain conditions
• Right to restriction (Art. 18 GDPR) — to request restricted processing of your data
• Right to data portability (Art. 20 GDPR) — to receive your data in a structured, machine-readable format
• Right to object (Art. 21 GDPR) — to object to processing based on legitimate interests
• Right to withdraw consent (Art. 7 para. 3 GDPR) — at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact: javier@penalba-ip.com

You also have the right to lodge a complaint with your local data protection supervisory authority. In Hesse, Germany, this is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit (HBDI): datenschutz.hessen.de

2.10 Links to Third-Party Websites

This website contains links to external websites (LinkedIn, Calendly). We have no control over the content or data practices of these sites and accept no responsibility for them. Please review the respective privacy policies of those services.