Privacy Policy

1. Controller

Innovatech Consulting LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA, represented by Christian D. Steffen. Email: contact@freedom-formation.com

We are based in the USA. Because our services are also directed at people in the EU, the General Data Protection Regulation (GDPR, Art. 3(2)) applies to this processing.

2. Visiting the website (hosting)

The website is hosted by Vercel Inc. (USA). When you visit it, the server processes technically necessary data: IP address, date and time, page requested, browser and operating system, referrer. This is necessary to deliver the site and protect it against misuse (Art. 6(1)(f) GDPR). Server logs are deleted after a short period.

3. Fonts and images

We serve fonts and images ourselves. No data is transferred to Google or other providers for this purpose.

4. Browser storage

In your browser's local storage (localStorage), we only store which language you selected and which cookie choice you made. These entries do not leave your device. The legal basis is § 25(2) no. 2 TDDDG (strictly necessary for the function you requested).

5. Analytics and advertising (only with consent)

Only if you expressly consent do we use the Meta Pixel (Meta Platforms Ireland Ltd.) to measure advertising. It receives page views as well as inquiries, call bookings, the start of a purchase and a completed purchase with its amount. Data may be transferred to the USA in the process. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via "Cookie settings" in the footer. Without consent, these services do not load.

6. Contact and scheduling

If you email us, we process your information to answer your inquiry (Art. 6(1)(b) GDPR for pre-contractual inquiries, otherwise Art. 6(1)(f) GDPR).

For scheduling calls, we link to Calendly (Calendly LLC, USA). Calendly only loads when you click the link. There you enter your name, email and preferred time; Calendly processes this data on our behalf. Calendly's privacy notice also applies.

7. Booking and payment

When you book a package, we first ask for your country of residence in order to comply with legal restrictions (sanctions). Payment is processed by Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe Inc., USA). Stripe receives your name, email, billing address, phone number and payment details. We receive the order details from Stripe, not your full card details. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR). Stripe also screens payments to prevent fraud.

8. Performing your order

For the formation, we need information about you and your company: name, address, nationality, identity documents, information on any other owners and on the business purpose. You enter this in our online questionnaire. We store it in our customer database (Neon Inc. as database provider) and documents in storage at Cloudflare Inc. We share it to the extent necessary for your order: with the registered agent and the competent state authority, with the IRS (EIN, ITIN), with the partner tax firm (annual filings) and, at your request, with banks or payment providers. We send emails via Resend Inc. We use AI services from Anthropic PBC to draft messages and summarize documents; decisions are made by a human. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).

9. Transfers to the USA

We and several of our service providers are based in the USA. Where a service provider is certified under the EU-US Data Privacy Framework, we rely on that (Art. 45 GDPR); otherwise we rely on the European Commission's Standard Contractual Clauses (Art. 46 GDPR). Forming a US company necessarily requires transferring your information to US authorities (Art. 49(1)(b) GDPR).

10. Retention period

We delete data as soon as it is no longer needed for its purpose. We keep contract and invoice records for as long as statutory retention obligations apply (usually up to ten years), and inquiries that did not lead to an order usually for up to two years.

11. Your rights

• Access to your data (Art. 15 GDPR)
• Rectification (Art. 16) and erasure (Art. 17)
• Restriction of processing (Art. 18) and data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consent with effect for the future (Art. 7(3))
• Complaint to a data protection supervisory authority, for example in your country of residence (Art. 77)

For any request, an email to contact@freedom-formation.com is sufficient.

12. Obligation to provide data

You do not have to provide any data to use the website. For a booking, we need the information requested; without it, we cannot carry out the formation.