Privacy Policy

Translation notice. This is a convenience translation. The controller is established in Germany and the German version is the legally binding text. In the event of any discrepancy, the German wording prevails.

1. Privacy at a glance

This website is essentially an information site. It additionally offers a contact form (section 12) and uses audience measurement with Google Analytics 4 (section 13). On every page there is also a second, cookieless measurement that does not require consent, Cloudflare Web Analytics (section 14). There is no newsletter sign-up, and no advertising or remarketing services such as the Meta Pixel.

Personal data initially arises only to the extent that is unavoidable for the technical operation of the site: your IP address and general connection data are transmitted to our hosting and CDN provider when a page is requested, and to Google when the fonts in use are loaded. Both are described in detail in sections 7, 8 and 10.

Cookies and consent. Without your consent no analytics cookies are set and you are not recognised. The Google script is, however, already loaded when the page is requested and sends cookieless signals to Google; your IP address is transmitted to Google in the process. Nothing is stored on or read from your device before your decision. Details and the legal bases, including your right to object, are set out in section 13. A banner asks for your decision when you first visit. The second measurement described in section 14 does not depend on that decision: it works without cookies and without recognition and therefore also runs if you decline in the banner. You can decline without any restriction on your use of the site, and you can change your decision at any time.

2. Controller

The controller for data processing on this website within the meaning of Art. 4(7) GDPR is:

Salas UG (haftungsbeschränkt)
Jessnerstraße 6
10247 Berlin
Germany

Represented by the managing director: Jorge Luis Aguilar Salas

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

No data protection officer has been appointed, because the conditions of Art. 37 GDPR in conjunction with § 38 BDSG are not met.

3. Contact

For questions about data protection and for exercising your rights as a data subject you can reach us at:

Email: fleet@343ride.de
Telephone: +49 1573 4551124

Full provider details are available in the Impressum.

4. Your rights as a data subject

Within the limits of the applicable law you have the following rights against the controller:

• Right of access to the data stored about you, its origin, its recipients and the purpose of the processing (Art. 15 GDPR)
• Right to rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• Right to erasure, unless statutory retention obligations prevent it (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability in a structured, commonly used and machine-readable format (Art. 20 GDPR)
• Right to object to processing based on a legitimate interest (Art. 21 GDPR)

An informal message to the email address given in section 3 is enough to exercise these rights. Exercising them is free of charge for you.

5. Right to withdraw consent

Many processing operations are only possible with your express consent. You can withdraw consent already given at any time. The lawfulness of the processing carried out until withdrawal is not affected by the withdrawal.

On this website, audience measurement with Google Analytics is based on your consent (section 13). You can withdraw it at any time by declining in the banner or by changing your selection with the control in section 13; the analytics cookies that were set are then deleted. If you contact us by email, you can likewise object informally at any time to your message being stored further.

6. Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.

The authority competent for the controller is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

7. Hosting and content delivery network

This website is hosted and delivered by Cloudflare. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, represented for users in the European Economic Area by Cloudflare Germany GmbH, Rosental 7, 80331 Munich.

Cloudflare operates a worldwide content delivery network (CDN). When you open this page the content is delivered from the server location closest to you. In doing so Cloudflare processes technically necessary connection data, in particular your IP address, in order to deliver the request, to speed up delivery and to protect the infrastructure against attacks and abuse. For this purpose Cloudflare sets technically necessary cookies which serve the security of the connection and do not permit any analysis of your usage behaviour.

The legal basis is Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable, fast and secure provision of this website. A data processing agreement under Art. 28 GDPR is in place with Cloudflare.

A transfer of data to the USA cannot be excluded. Cloudflare bases this transfer on the European Commission’s standard contractual clauses and on its certification under the EU-US Data Privacy Framework.

8. Server log files

The hosting provider automatically collects and stores information in what are known as server log files, which your browser transmits automatically. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources. Collection takes place on the basis of Art. 6(1)(f) GDPR; the legitimate interest lies in the technically error-free presentation and the security of this website. We do not carry out any personal evaluation of this data.

9. Transfer to third parties and external links

This website contains links to external services, among them LinkedIn, Calendly, Google Drive, Streamlit and editorial contributions by third parties. These services are not embedded: no content from these providers is loaded when our pages are opened, and no automatic transmission of your data takes place.

A transfer of data only occurs once you actively click such a link. From that moment your request leaves this website; the provider in question receives your IP address and possibly further connection data and becomes an independent controller in that respect. We have no influence on the scope and purpose of that processing. The privacy policies of the respective provider apply.

We point out in particular that when a scheduling link (Calendly) is opened, the data you enter there is processed exclusively by that provider and by us as the recipient of the booking. Some of the providers named are based in the USA.

10. External fonts (Google Fonts)

For a consistent presentation of typefaces this website uses the font „Inter“, which is provided via Google Fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The fonts are not delivered locally but loaded from Google servers when a page is opened. Your IP address is transmitted to Google in the process; a transfer to the USA cannot be excluded. Google bases this transfer on the European Commission’s standard contractual clauses. According to the provider, Google Fonts does not store cookies on your device.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the consistent and accessible presentation of this website. If your browser does not support Google Fonts or blocks the loading, a default font of your device is used; the page remains fully usable.

Further information is available in Google’s privacy policy at policies.google.com/privacy.

11. Contact by email

In addition to the contact form (see section 12) you can reach us via the email link provided, which opens the email program on your device. In that case data is only transmitted to us once you actually send a message.

If you contact us by email, the details you provide, including the contact data you give, are stored by us for the purpose of handling the enquiry and in case of follow-up questions. We do not pass this data on without your consent.

Processing takes place on the basis of Art. 6(1)(b) GDPR where your enquiry is connected with the performance of a contract or with pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR).

12. Contact form

You can send us an enquiry through the contact form at jorgeag.com/contact/. The fields you complete are processed: your message, plus an email address and/or telephone number (at least one of the two is required so that we can reply), and optionally name, company or organisation, role or title, type of enquiry, timeframe, budget range and your indication of how you came across us. Technically, your IP address is additionally processed, exclusively for abuse detection and to limit the number of submissions.

Purpose. The data is used solely to handle and answer your enquiry. It is not used for advertising.

Legal basis. The processing is based on your consent under Art. 6(1)(a) GDPR, which you give via the checkbox before sending. Where your enquiry is connected with the initiation or performance of a contract, the processing is additionally based on Art. 6(1)(b) GDPR.

Retention period. We store your details for up to 12 months after the last contact relating to that enquiry and then delete them, unless statutory retention obligations prevent this. IP addresses processed for abuse detection are removed automatically after a maximum of one hour. In the notification email the IP address is reproduced in truncated form only; the last address segment is removed before sending, so that no complete address reference remains.

Recipients. The recipient of the data is Jorge Aguilar (Salas UG (haftungsbeschränkt)). For the technical transmission and delivery of the message, the service providers named below and the provider of the receiving mailbox (Microsoft Outlook) are used. These providers process the data as processors on our behalf; data processing agreements under Art. 28 GDPR are in place with each of them.

Form processing (Cloudflare Workers). Submission of the form is processed by Cloudflare Workers, a serverless platform operated by Cloudflare, Inc. The form data you enter and your IP address are processed in the Cloudflare infrastructure in order to receive the request, check it for abuse and pass it on for delivery. The form content is not stored permanently at Cloudflare. The legal bases are Art. 6(1)(b) GDPR (pre-contractual measures or contract initiation) and Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).

Spam protection (Cloudflare Turnstile). To protect against automated submissions we use Cloudflare Turnstile, a service provided by Cloudflare, Inc. Technical information about your device and your browser environment is transmitted to Cloudflare and checked there. The legal basis is our legitimate interest in preventing abusive use (Art. 6(1)(f) GDPR). Further information is available in Cloudflare’s privacy policy: cloudflare.com/privacypolicy.

Email delivery (Resend). The notification of your enquiry and the automatic confirmation of receipt sent to the email address you provide are delivered via Resend (Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA). The data required for delivery is processed in the process, in particular your email address, your name and the content of the message. Processing takes place on servers within the European Union (Ireland region). A data processing agreement under Art. 28 GDPR is in place with Resend; for transfers to the USA the European Commission’s standard contractual clauses are applied. The legal bases are Art. 6(1)(b) GDPR (answering your enquiry as a pre-contractual measure) and Art. 6(1)(f) GDPR (legitimate interest in reliable delivery). Further information is available in Resend’s privacy policy: resend.com/legal/privacy-policy.

Your rights. You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent already given at any time with effect for the future. An message to fleet@343ride.de is sufficient to exercise these rights.

13. Audience measurement with Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). The measurement serves exclusively to understand which content of this website is used, in order to be able to improve it. Besides the portfolio pages it also covers the pages of the publication „Operations in Motion“ (/motion/, /de/motion/ and /es/motion/); the same measurement ID, the same consent and the same settings apply there as on all other pages. The measurement ID used is G-4XMR36K6W9.

Before your consent. We use Google Analytics in Advanced Consent Mode. The Google script is already loaded when the page is requested, but with the consent signals set to denied: no analytics cookies are set, no identifiers are assigned, and no information is stored on or read from your device. You are not recognised across page views.

In this state the script transmits what are known as cookieless signals to Google. These contain no identifier for your device, but they do contain the technical data of each page view – in particular your IP address, browser and device information, the address requested and the time. The IP address is personal data; we therefore expressly do not describe these signals as anonymous towards Google. Google uses them solely to model statistical estimates from the non-consented share of traffic; no profile relating to you is created from them.

Legal basis before consent. Since no information is stored on or retrieved from your device in this process, § 25(1) TDDDG does not apply. We base the transmission of the connection data described above on our legitimate interest under Art. 6(1)(f) GDPR, namely being able to assess the reach of this website as a whole. We have weighed your interest in the protection of this data against it and taken it into account by limiting the processing to cookieless, identifier-free signals and by disabling all advertising functions.

Your right to object. You may object to this processing at any time under Art. 21(1) GDPR. To do so, open any page with the parameter ?noga=1 (for example jorgeag.com/?noga=1). The Google script will then permanently no longer be loaded in that browser, including the cookieless signals; ?noga=0 reverses this. Alternatively an informal message to the address named in section 3 is sufficient.

After your consent. Only when you expressly agree in the banner does analytics_storage switch to granted. From that point analytics cookies are set and your use is measured pseudonymously across several page views. The legal basis is your consent under Art. 6(1)(a) GDPR; for the storage of information on your device and access to it, this is at the same time the consent under § 25(1) TDDDG. From that point the cookies _ga and _ga_4XMR36K6W9 are set. If you decline, analytics_storage stays permanently at denied: no cookies are set and you are not recognised, but the cookieless signals described above continue. If you withdraw consent previously given, cookie-based measurement ends immediately and the analytics cookies that were set are deleted.

Data processed and retention. Pages viewed, approximate location derived from the IP address, device and browser information, and interactions with the site are processed. IP addresses are shortened by Google before storage. Event data stored in Google Analytics is deleted after at most 14 months.

Recipients and transfers to third countries. The processor is Google Ireland Limited; a data processing agreement under Art. 28 GDPR is in place. Processing by Google LLC in the United States cannot be excluded. Google LLC is certified under the EU-US Data Privacy Framework; in addition, the European Commission’s standard contractual clauses are applied. Despite these safeguards it cannot be entirely excluded that US authorities may access the data.

Changing your decision. You can change your selection at any time. Change cookie settings Current status:

14. Audience measurement with Cloudflare Web Analytics

This website additionally uses Cloudflare Web Analytics, a web analytics service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, represented for users in the European Economic Area by Cloudflare Germany GmbH, Rosental 7, 80331 Munich. The measurement is not limited to particular areas: it covers all pages of this website including the publication „Operations in Motion“ (/motion/, /de/motion/ and /es/motion/) as well as the subdomains of jorgeag.com. The measurement script is not delivered from our server but inserted into the page automatically by Cloudflare while the page is delivered to your browser via the CDN.

No cookies, no recognition, no consent. Cloudflare Web Analytics sets no cookies, uses no browser storage (localStorage) and places no identifier on your device. Neither a visitor nor a session identifier is assigned, and no „fingerprinting“ via IP address, user agent or other characteristics takes place. Since no information is therefore stored on or read from your device, § 25(1) TDDDG does not apply and no consent is obtained. This measurement is consequently independent of your decision in the cookie banner: declining there does not switch it off, and it records all views of this website.

Data processed. When a page of this website is opened, your browser loads a measurement script from static.cloudflareinsights.com and then transmits the measured values to the address jorgeag.com/cdn-cgi/rum, that is to our own domain, from where Cloudflare receives them. What is transmitted is in particular: the address requested, the previously visited page (referrer), the time of the request, information on browser, operating system and device type from the user agent, the country derived from the IP address, and technical measurements of the page load time. Your IP address is processed for the transmission and to derive the country; it is removed as early as the nearest Cloudflare data centre and is not carried over into the analysis.

What the report shows. The analysis is aggregated. A „visit“ there is simply a page view whose referrer comes from another website; there is no „unique visitor“ in the sense of conventional analytics services, and your behaviour is not combined across several page views or visits.

Legal basis and objection. The legal basis is our legitimate interest in data-minimising, consent-free audience measurement that shows which contributions are read (Art. 6(1)(f) GDPR). You may object to this processing at any time under Art. 21 GDPR using the contact routes named in section 3. Since there is no banner control, you can also block the measurement script technically, for example by using a browser extension to block scripts from static.cloudflareinsights.com; the pages remain fully usable.

Recipients and transfers to third countries. Cloudflare already acts as the hosting and CDN provider of this website (section 7); a data processing agreement under Art. 28 GDPR is in place which also covers this processing. Processing in the United States cannot be excluded; in addition the European Commission’s standard contractual clauses are applied. Further information is available in Cloudflare’s privacy policy: cloudflare.com/privacypolicy.

15. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar changing from „http://“ to „https://“ and by a padlock symbol being displayed.

When encryption is active, the data you transmit to us cannot be read by third parties.

16. Retention period

Unless a more specific retention period is stated within this policy, your personal data remains with us until the purpose of the processing no longer applies. If you assert a justified request for erasure or withdraw consent, your data is deleted, unless we have other legally permissible grounds for storing it.

Statutory retention periods – in particular commercial and tax law periods under § 257 HGB and § 147 AO – remain unaffected. After those periods expire the corresponding data is deleted.

Server log files are kept by the hosting provider only for a short period and are then deleted automatically. Email correspondence is deleted once the enquiry has been dealt with conclusively and no retention obligations prevent it.

17. Liability for content

As a service provider we are responsible under § 7(1) DDG (formerly § 7 TMG) for our own content on these pages in accordance with general law. Under §§ 8 to 10 DDG, however, we as a service provider are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate unlawful activity.

Obligations to remove or block the use of information under general law remain unaffected. Liability in this respect is, however, only possible from the point in time at which a concrete infringement becomes known. If we become aware of such infringements we will remove the content immediately.

The projects, metrics and case studies presented on this website describe past professional activities. They do not constitute an assurance of future results and do not constitute legal, tax or business advice.

18. Liability for links

Our service contains links to external third-party websites over whose content we have no influence. We therefore cannot accept any responsibility for this third-party content. The respective provider or operator of the pages is always responsible for the content of the linked pages.

The linked pages were checked for possible legal infringements at the time of linking; unlawful content was not identifiable at that time. Permanent monitoring of the content of the linked pages is not reasonable without concrete indications of an infringement. If we become aware of infringements we will remove such links immediately.

19. Copyright

The content and works created by the site operators on these pages are subject to German copyright law. Reproduction, adaptation, distribution and any kind of exploitation outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this page are permitted only for private, non-commercial use.

Insofar as the content on this page was not created by the operator, the copyrights of third parties are respected and marked as such. Should you nevertheless become aware of a copyright infringement, we ask you to notify us accordingly. If we become aware of infringements we will remove such content immediately.

Third-party brand, company and product names mentioned on this website are the property of the respective rights holders and serve exclusively to describe past professional activities.