Legal
Privacy Policy
Last updated: June 12, 2026
This policy explains how we collect and process personal data when you use this website (pmfpcf.com) and the PMF-PCF diagnostic. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable law.
1. Data controller
Vallenstone LLC16192 Coastal Highway, Lewes, Delaware 19958, USA
Represented by Norbert Steinhauser
Email: contact@pmfpcf.com
2. What we collect and why
- When you contact us (e.g. by email to request a diagnostic): your name, email address, and the content of your message. We use this to respond to your enquiry. Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR), or pre-contractual steps at your request (Art. 6(1)(b) GDPR).
- When you take part in a diagnostic: the email address used to send you a secure access link, your role/perspective, and the answers you provide. We use this to operate the assessment and produce results for the commissioning organization. Legal basis: consent (Art. 6(1)(a) GDPR) and/or our legitimate interest in delivering the service (Art. 6(1)(f) GDPR).
3. Cookies and tracking
This marketing website does not set tracking or advertising cookies. We measure visits with Matomo, a web analytics tool self-hosted on our own EU server, configured to run without cookies; no data is shared with third parties and visits are measured in aggregate only. The diagnostic application uses only the strictly necessary cookies required to keep you signed in during a session.
4. Hosting and data location
The website and application are hosted on a dedicated server operated on our behalf by Hetzner Online GmbH, located in Germany (EU). Each engagement runs in an isolated environment with its own data store, keeping each organization's respondent data separated.
5. Data sharing
We do not sell your personal data. Diagnostic responses are made available to the organization that commissioned the assessment. We may use service providers (such as our hosting and email delivery providers) who process data on our behalf under appropriate agreements.
6. International transfers
As we are a US-based entity, your data may be processed in the United States. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
7. Retention
We keep personal data only as long as necessary for the purposes described above or as required by law. Diagnostic data is retained for the duration of the engagement and deleted thereafter, typically within 12 months, unless a longer period is agreed or legally required.
8. Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise any right, contact contact@pmfpcf.com. You also have the right to lodge a complaint with a supervisory authority.
9. Changes to this policy
We may update this policy from time to time. The current version is always available on this page.