Noah Sioly

Privacy notice

Last updated: 8 November 2026

This notice explains how Noah Sioly UG (haftungsbeschränkt) ("we", "us") uses personal data:

  • when we contact a business about our services,
  • when someone replies to us or writes to us, and
  • when someone visits noahsioo.com.

Legal references are to the EU General Data Protection Regulation (GDPR). It applies because our company is based in Germany.

Your right to say stop

You can object to the use of your data for direct marketing at any time, free of charge (Art. 21(2) GDPR). This includes the research we do to prepare our messages.

Reply "stop" to any email or Instagram message from us, or write to noah@noahsioo.com. We will then not contact you again, by email or on Instagram. We keep one short entry on our do-not-contact list so that this stays true (see section 8).

You can also object at any time for reasons related to your particular situation (Art. 21(1) GDPR).

1. Who is responsible

Noah Sioly UG (haftungsbeschränkt)
Hoheluftchaussee 139
20253 Hamburg
Germany

Email: noah@noahsioo.com
Legal notice: https://noahsioo.com/imprint

2. Why we contacted you

We offer creative services to businesses, for example content ideas, scripts and video editing for social media.

We look for businesses and content creators, such as gyms, studios and coaches, whose online presence could benefit from this. Then we write to them by email or on Instagram.

3. What data we use and where it comes from

If we contacted you first, we did not get your data from you. We took it from public sources:

  • your business website,
  • your public Instagram profile and posts,
  • public business listings and map services.

We use:

  • the name and address of your business,
  • the name of a contact person, if it is shown publicly, for example in an email address or on a website,
  • the business email address and the Instagram username that your business has published,
  • public information about your business, for example your services, your posts and how your website and profile look,
  • our messages, your replies and the status of our contact (for example "replied" or "stop").

We only use contact details that your business has published itself. We do not buy address lists, and we do not guess email addresses.

We use this data to:

  • find businesses for which our services could be useful,
  • prepare a short message that fits your business,
  • send you this message by email and/or on Instagram,
  • answer you if you reply,
  • make sure we respect a "stop".

Legal basis: our legitimate interest in offering our services to businesses (Art. 6(1)(f) GDPR). Direct marketing can be such a legitimate interest (Recital 47 GDPR).

We keep the impact on you small. We only use information that your business has published. We only write to businesses and to people in their professional role. You can say stop at any time.

We use the public information to judge whether our offer could fit your business. This never leads to a decision that has legal effects on you or affects you in a similarly significant way. There is no automated decision-making under Art. 22 GDPR.

5. If you reply or write to us

If you reply to us or write to us, we use your message and your contact details to answer you.

If you want to work with us, we also use them to prepare an offer or a contract (Art. 6(1)(b) GDPR). In all other cases, the legal basis is our legitimate interest in answering your message (Art. 6(1)(f) GDPR).

You do not have to give us any data. Without your contact details, we cannot answer you.

6. Who receives the data

We store our working files on our servers in Austria (EU) and on our own computers in Germany.

We share data only with these categories of recipients, and only as far as needed for the purposes above:

  • IT service providers for hosting and email, in Germany and Austria (EU). For this website, see section 10.
  • IT service providers for text processing and data analysis, based in Ireland (EU). They also process data in the USA.
  • Search services that we use to find public information about businesses, some of them in the USA.
  • An address lookup service in the United Kingdom. It only receives addresses.
  • Meta Platforms Ireland Ltd. (Instagram), Ireland, if we write to you on Instagram. Meta's own privacy policy also applies to messages on Instagram.
  • A messaging service for our internal notifications. Its provider is based outside the EU and stores the data of European users in the Netherlands. We only use it for short status updates: the name of a business, its city and the status of our contact. We do not send email addresses, names of contact persons or the content of messages through it.

We do not sell your data. We do not give it to anyone for their own advertising.

If you ask us, we will tell you the names of the providers that received your data.

7. Transfers outside the EU

Some recipients are located outside the EU:

  • USA: Our providers for text processing and data analysis transfer data to the USA on the basis of the EU standard contractual clauses (Art. 46(2)(c) GDPR). For our other providers in the USA, the transfer is based either on the EU-U.S. Data Privacy Framework and the adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR), or on the EU standard contractual clauses (Art. 46(2)(c) GDPR).
  • You can read the standard contractual clauses at https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en or ask us for a copy at noah@noahsioo.com.
  • United Kingdom: adequacy decision of the European Commission (Art. 45 GDPR).
  • Internal messaging service: its provider is based outside the EU, in a country without an adequacy decision. That is why we only send it the short status updates described in section 6, and no personal data of contact persons.

8. How long we keep data

  • No reply: we close the matter at the latest 12 months after our last message. Then we delete the data.
  • Reply, but no work together: we keep the conversation while we are in contact. We delete it at the latest 12 months after our last message.
  • Customers: we keep your data while we work together. After that, we keep contracts, invoices and business letters as long as German commercial and tax law requires, usually 6 to 10 years (§ 257 HGB, § 147 AO).
  • Stop: we delete your other data. We keep only one entry on our do-not-contact list: your email address, your Instagram username and the name of your business. We keep this entry permanently, because without it we cannot make sure that we never contact you again. Legal basis: our legal obligation to respect your objection (Art. 6(1)(c) and Art. 21(3) GDPR) and our legitimate interest in being able to show that we did (Art. 6(1)(f) GDPR).

9. Your rights

You have the right to:

  • get a copy of the data we hold about you and information about how we use it (Art. 15 GDPR),
  • have incorrect data corrected (Art. 16 GDPR),
  • have your data deleted (Art. 17 GDPR),
  • have the use of your data restricted (Art. 18 GDPR),
  • receive the data you gave us in a common, machine-readable format, where this right applies (Art. 20 GDPR),
  • object to the use of your data, see "Your right to say stop" above (Art. 21 GDPR).

To use these rights, write to noah@noahsioo.com.

You can also complain to a data protection supervisory authority in the EU (Art. 77 GDPR). The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22
20459 Hamburg
Germany
https://datenschutz-hamburg.de

10. Visiting this website

When you open noahsioo.com, our hosting provider automatically processes technical data that your browser sends: your IP address, the date and time, the page you opened, and your browser and operating system.

This is needed to show you the website and to keep it secure (Art. 6(1)(f) GDPR). These log data are kept only as long as needed for this purpose and are then deleted automatically.

Our hosting provider is located in the USA and is certified under the EU-U.S. Data Privacy Framework (see section 7).

This website uses no cookies, no tracking and no analytics tools. Links to other services, for example Instagram, YouTube or TikTok, are simple links. These services only receive data from you when you click on them.

11. Changes to this notice

We update this notice when the way we use data changes. You can always find the current version at https://noahsioo.com/privacy.