Privacy notice
This is a personal site, and it collects as little as it can: no cookies, no tracking across sites, no advertising, and no fonts or scripts loaded from other companies. It keeps simple, anonymous statistics. Personal data is processed in four cases only: when you visit, when you write to me, if you join the newsletter, and if you choose to play a video.
Last updated 16 November 2026
Who is responsible
Mouad Krikbou, c/o IMPREGO, Golzwarder Straße 28, 26919 Brake (Unterweser), Germany. Email: support@mouadkrikbou.com. More in the imprint.
When you visit
To deliver a page, the server records your IP address, the date and time, the page asked for, the page you came from, and the browser and system your browser reports. This is needed to send you the site and to keep it secure, for instance to notice and stop attacks (Art. 6 (1) (f) GDPR, a legitimate interest in a site that works and is safe).
These logs are kept for at most 14 days, then deleted. The site runs on a server in Germany, operated by a hosting provider on my behalf under a data processing agreement (Art. 28 GDPR).
Statistics
The site keeps simple statistics, such as how often a page is read. They are anonymous: no personal data is collected.
When you write to me
The contact form sends your first name, family name and email address, and, if you give them, your LinkedIn profile, your message and what you would like to do; when you ask for access to an exclusive piece, also which piece and why you would like it. If you write by email, I receive your address and whatever your email contains. Either way, it is used only to answer you: where your message is about working together, as steps you asked for before a possible agreement (Art. 6 (1) (b) GDPR); otherwise on the basis of a legitimate interest in replying (Art. 6 (1) (f) GDPR).
Writing is voluntary, and nothing obliges you to give these details; without a name and an email address, though, I cannot answer.
A message sent through the form is stored on the site's server in Germany, and a copy is sent to my mailbox. Email, yours or that copy, reaches my mailbox through an email forwarding service and is kept by my email provider; both may process it in the United States, under the EU-US Data Privacy Framework (Art. 45 GDPR). Beyond them, your message is read only by me and shared with no one, and deleted 6 months after our last exchange, or sooner if you ask.
To stop abuse, the form accepts only a few messages an hour from one address: your IP address is used to count them, held in the server's memory for at most an hour, and never stored with your message.
Videos
Some pages offer a video from YouTube. Until you press play, nothing is loaded from YouTube and no connection to it is made. When you press play, the video loads from YouTube's privacy-enhanced service (youtube-nocookie.com), run by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: your IP address and browser details reach Google, and Google may process data in the United States, where Google LLC is certified under the EU-US Data Privacy Framework.
Pressing play is your consent to this (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), and not pressing it is enough to refuse. Google's own notice: policies.google.com/privacy.
On your device
The site sets no cookies. The AI page keeps one note in your browser's session storage, saying its short introduction has been shown, so it does not play again while the tab is open; it is deleted when you close the tab. And if you close the message in a bottle, or join, one note in your browser's local storage remembers it, so the bottle does not wash up again (for two months after closing it, never after joining). Neither note ever leaves your browser, and you can clear both in your browser's settings. The statistics store nothing on your device.
Links to other sites
Links to other sites, such as LinkedIn or the organisers' pages about past workshops, open those sites only when you follow them; from then on, their privacy notices apply.
Your rights
You may ask what data about you is held, have it corrected or deleted, have its use restricted, and receive it in a portable form (Art. 15 to 18 and 20 GDPR). A consent you gave can be withdrawn at any time, for the future. Write to support@mouadkrikbou.com, or by post to the address above.
Your right to object. Where your data is used on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you may object at any time, on grounds relating to your situation; the use then stops, unless there are compelling legitimate grounds that override your interests, or it is needed to establish, exercise or defend legal claims (Art. 21 GDPR).
You may also complain to a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77 GDPR).
No decision about you is made automatically, and no profile of you is built.
Changes
If the site starts to handle data differently, for example through a new service, this notice changes first, and the date at the top with it.