Privacy policy

Translation of the German Datenschutzerklärung. This website has no contact form and loads no fonts from third-party servers. With your consent, we count page views with Cloudflare Web Analytics (section 3). The Meta Pixel only runs with your consent.

1. Controller

Hansdampf GmbH, represented by its managing director Michael Bialozyt. The postal address is in the legal notice. Email: mike@qbdatadriven.com

2. Hosting and server logs

This website is hosted by Cloudflare. With every request your browser sends technically necessary data to Cloudflare: IP address, date and time, the page requested, the amount of data transferred and details about your browser and operating system. Cloudflare processes this data in server logs to deliver the site and to protect it against attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Cloudflare runs a global network, so processing outside the EU, for example in the USA, is possible.

3. Visitor statistics

We count page views with Cloudflare Web Analytics. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, USA.

The counting script sets no cookies and stores nothing on your device. Cloudflare states that the script does not store any data in the browser and does not access cookies, localStorage, sessionStorage or IndexedDB (Cloudflare, RUM beacon for Web Analytics, as of 5 October 2026).

When a page loads, the script sends the following to Cloudflare:

  • the address of the page and of the referring page, both without parameters,
  • a random identifier created anew for every page view,
  • the type of page view,
  • browser engine, browser and operating system version,
  • loading and rendering times including the address of the largest loaded content,
  • in Chromium browsers, the rounded size of the script memory,
  • the identifier of this website.

The script reads this information from your browser. There is no persistent identifier that would let us recognise you.

Your IP address reaches Cloudflare with every request for technical reasons. According to Cloudflare, it is discarded at the nearest data centre and not stored in core databases or logs. The measurement data is kept in full for seven days and then condensed to about one tenth; it remains available in the dashboard for up to six months.

Processing may take place outside the EU, including in the USA. Cloudflare bases the transfer on the EU-U.S. Data Privacy Framework, under which Cloudflare, Inc. is certified, and alternatively on standard contractual clauses. A data processing agreement with Cloudflare is in place (Cloudflare Data Processing Addendum).

The counting script only loads once you agree in the notice. The legal basis is your consent (Art. 6(1)(a) GDPR; for reading the browser information, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future (section 5).

4. Meta Pixel, only with your consent

With your consent we use the Meta Pixel of Meta Platforms Ireland Limited (Ireland) to measure whether our ads on Instagram reach the right people. The pixel sets cookies and sends data about your visit to Meta, such as the page you view, your IP address and details about your browser. Meta may link this data to your Meta account and may also process it in the USA. The legal basis is your consent (Art. 6(1)(a) GDPR). Without consent the pixel is not loaded.

No pixel ID is set yet, so the pixel does not load even after you accept.

You can withdraw your consent at any time with effect for the future, using “Settings” at the bottom of every page. We then delete this website's pixel cookies in your browser.

5. Your choice

We store your choice on visitor statistics in your browser's local storage (localStorage) so that the notice does not appear on every visit. This information does not leave your browser. You can change it in the settings or delete it in your browser.

6. Contact by email

If you email us, we process your address and your message to answer your inquiry. The legal basis is Art. 6(1)(b) GDPR where a possible collaboration is concerned, otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). We delete the data once it is no longer needed and no retention obligation applies.

Emails to mike@qbdatadriven.com are received by Cloudflare, Inc. (101 Townsend St., San Francisco, USA) and forwarded to our mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). An AI assistant reads and sorts incoming mail. For this, the text and attachments of your message are sent to Anthropic Ireland, Limited (6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland), which processes them under its own privacy policy. Data may also be processed outside the EU, in particular in the USA.

7. Information about the athlete BB15

This website contains information about a young athlete who is publicly known only as BB15: his sport, his country, since when he has trained, and his training plan in planned weekly hours. We do not publish photos, first names, club, school, or health or body data. The controller is Hansdampf GmbH (section 1).

We publish this information only with the consent of both parents (Art. 6(1)(a) GDPR) and show it as long as this consent stands. It can be withdrawn at any time with effect for the future; we then remove the information from this website. The same applies if he later asks for deletion himself.

No performance data about him is shown here yet. Before we publish any or pass it on to partners, we will add to this section.

8. Publishing on Instagram

For the Instagram account @qbdatadriven2040 we use our own tool that publishes posts through the interface of Meta Platforms Ireland Limited. Michael Bialozyt uses the same tool privately for the athlete account @roadtonflbb15; he himself, not Hansdampf GmbH, is the controller for this account and its data, and he can be reached at the same address. The tool only reads data of the two own accounts: the posts with captions and the accounts' statistics, including aggregated audience data, for example by country. It does not read comments or direct messages. The legal basis for @qbdatadriven2040 is our legitimate interest in showing our work on Instagram (Art. 6(1)(f) GDPR); for content about BB15, the consent of both parents applies (section 7).

The tool first processes images and videos on a computer of Michael Bialozyt: it blurs faces, except BB15's face in sports clips of the athlete account, and removes location data. The processed files are stored in his account with Dropbox International Unlimited Company; to publish, Meta fetches each file through a link that expires after four hours. An AI assistant writes and checks drafts. For this, texts, figures and the processed images are sent to Anthropic Ireland, Limited (address in section 6); for sports clips of the athlete account, this is the version we publish, showing his face. Data may also be processed outside the EU, in particular in the USA.

The tool keeps the statistics for the own analysis and deletes them once they are no longer needed. If you want to know which data from the two accounts the tool processes, or ask for its deletion, email mike@qbdatadriven.com; we then delete it in the tool. For data that Instagram itself processes, Meta's privacy policy applies.

9. Fonts and links

This website serves all fonts itself. Links to Instagram are plain links: data only goes to Instagram when you follow one.

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

11. Status

This policy describes the current technical state of this website. It is updated whenever features change.