Privacy Policy

Last updated: 17 July 2026. This policy explains, in plain terms, what data dilynx processes, why, and how we keep the experience anonymous by design.

1. Controller

Tobias Klatt (dilynx)
Thuner Str. 25, 12205 Berlin, Germany
Email: info@dilynx.com
See also our Impressum.

2. Our privacy principle — anonymous by design

dilynx is built to give a CFO a serious assessment without asking for anything sensitive. There is no account and no login. We never ask you to connect an ERP, upload financial statements, grant banking access, or provide personal financial data. The Executive Discovery questionnaire runs anonymously: you can complete it and read your Executive Brief without telling us who you are. We collect the minimum needed to produce your assessment, and nothing more.

3. The Executive Discovery questionnaire

The questionnaire asks about your finance organisation in ranges and categories — for example a revenue band, an employee band, industry, or how your close runs. These are business attributes, not personal data, and in anonymous mode they are not linked to your identity. Your answers are processed to generate your assessment at the moment you request it (legal basis: Art. 6(1)(b) GDPR — steps prior to and performance of a contract you request; and Art. 6(1)(f) GDPR — our legitimate interest in providing the service). If you voluntarily add a company name or email to request a company-specific brief, we process those details only to prepare and deliver what you asked for. Providing a company name is always optional.

4. Payment processing (Stripe)

If you purchase the full Executive Assessment, payment is handled by our payment processor Stripe (Stripe Payments Europe, Ltd., Ireland). You enter your card details on Stripe's secured checkout — dilynx never sees or stores your card number. Stripe processes your payment data as an independent controller/processor under its own terms and privacy policy (stripe.com/privacy). We receive only confirmation that a payment succeeded and the minimum needed to deliver your report and meet our accounting obligations. Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(c) GDPR (statutory retention of transaction records).

5. Server log files

When you visit the site, our hosting provider automatically processes standard server-log data on our behalf: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating-system identifier. This is necessary to deliver the website and to keep it secure and stable. Legal basis: our legitimate interest in the secure and reliable operation of the site (Art. 6(1)(f) GDPR). We do not combine this data with other data or use it to identify you.

Hosting provider (processor): ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data-processing agreement under Art. 28 GDPR is in place, and the data is processed on servers in Germany.

6. Contacting us by email

If you email us at info@dilynx.com, we process the information you provide (your email address, your message and any details you include) solely to handle and respond to your enquiry. Legal basis: Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where your enquiry concerns a potential agreement.

7. Analytics and usage measurement

To understand how the site is used and to improve it, we use Google Analytics 4 (Google Ireland Limited). On your first visit we ask you to choose. Unless and until you select Accept Analytics — and permanently if you select Decline — analytics runs in a privacy-preserving mode that sets no analytics cookies and does not identify you; it measures only aggregate usage such as page views and funnel steps. If you accept, Google Analytics additionally sets analytics cookies on your device so that returning visits can be recognised. Legal basis for that step: your consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG), which you may withdraw at any time with effect for the future by clearing this site's browser storage. Your choice itself is remembered on your device in browser local storage (key dilynx_analytics_consent) so that we do not have to ask again; storing that choice is strictly necessary and needs no consent of its own. We also record the same basic funnel events (for example, that a step of the assessment was reached) in our own server-side logs, to diagnose issues and improve the product; those funnel records carry no IP address. So that we can tell which channel a visit came from, we note once per visit the campaign parameters in the link you followed (utm_source, utm_medium, utm_campaign) and the domain only of the referring site — never the full referring address, which could contain personal data. Those few values are held in your browser's session storage on your device (not a cookie) and are cleared when you close the tab. We never send your questionnaire answers, company details or financial data to analytics, and we run no advertising cookies or cross-site advertising. Legal basis for the cookieless measurement above and for our own funnel logs: our legitimate interest in operating and improving the service (Art. 6(1)(f) GDPR). Google processes analytics data under its own policy (policies.google.com/privacy); where data is processed outside the EEA, Google relies on the EU Standard Contractual Clauses. Stripe's checkout, on Stripe's own domain, uses cookies strictly necessary for secure payment under Stripe's policy.

8. Data retention

We keep personal data only for as long as necessary for the purpose it was collected: server logs and funnel/usage logs are retained only as long as necessary for security, technical operation and any applicable legal obligations, and are then deleted; email correspondence for as long as needed to handle your enquiry; and payment and invoice records for the statutory retention periods required by German tax and commercial law. Your questionnaire answers are processed to generate your assessment and are not stored by us in a profile linked to you; before payment they are held only in your own browser (session storage, on your device) and are cleared when you close the tab.

When you purchase the full Executive Assessment we do keep one thing: the assessment itself, so that you never lose the report you paid for. It is stored on our server in Germany under a long, randomly generated link that only you receive — there is no account, no login, and nothing in the stored report identifies you: no name, no company name, no email address, no IP address. The link is the only key, it is not listed anywhere, and search engines are instructed not to index it. Anyone holding the link can open the report, so treat it as you would any confidential document. If you would like your report deleted, send us the link and we will delete it.

9. International transfers

Website hosting and email are handled in Germany. Where Stripe processes payment data outside the EEA, it relies on the safeguards set out in its privacy policy (including the EU Standard Contractual Clauses where applicable).

10. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21) to the processing of your personal data. To exercise any of these, contact info@dilynx.com. You also have the right to lodge a complaint with a supervisory authority — for Berlin, the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

11. No obligation to provide data

You can browse dilynx.com and complete the anonymous assessment without providing personal data. Personal data becomes necessary only if you choose to contact us or to purchase the full Executive Assessment.