Privacy policy
Last updated: September 2026
1. Controller
The controller for data processing on this website is:
DEVELOPMENT INSTITUTE LLC, 1209 Mountain Road Pl NE, Albuquerque, NM 87110, USA.
2. What this website does not do
This website sets no cookies. It embeds no analytics or advertising services. There is no profiling and no user tracking. Fonts are served from this server and not loaded from Google Fonts — your IP address is therefore not transmitted to Google. No consent banner is needed, because there is nothing to consent to.
3. Visiting the site (server logs)
When you visit, the hosting service collects technically necessary access data (including IP address, timestamp, requested address, volume transferred, browser identifier). This serves secure operation and attack defence. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in undisrupted operation). This data is not combined with other data.
4. Contact form
When you submit the form, the details you entered (name, email address, optionally company and industry, your message) are stored in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry is directed at a contract, otherwise Art. 6(1)(f) GDPR.
A technical timestamp and the browser identifier are stored as well. Your IP address is not stored in clear text, only as a non-reversible check value (SHA-256 with a secret addition). That value serves solely to limit bulk automated submissions; it cannot be converted back into your IP address.
The details are deleted once the enquiry has been dealt with, unless statutory retention obligations apply.
5. Hosting and transfer to the USA
This website is delivered via Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Stored form data resides in the Cloudflare D1 database. Personal data is therefore processed in the United States. The transfer is based on the EU Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. As the controller is itself a US company, access by US authorities under their law cannot be ruled out in every case.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
7. Changes
This policy is adjusted when processing changes. The version published here is the one that applies.