Consequence Machines

Privacy

This page explains how personal information is handled when you visit this website or contact Consequence Machines.

1. Who is responsible

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
Vladyslav Moroshan
Wilhelmstr. 43, 80801 München, Germany
Email: hello@consequencemachines.com

2. What this website is

This website provides information about our research. It has no user accounts, no purchases and no comment functions. We do not use analytics, advertising or tracking tools, and we do not embed third-party content such as videos, maps, fonts or social media widgets.

3. Hosting and server logs

This website is delivered by Cloudflare, Inc. (United States (global network)). When you open a page, the hosting provider’s servers process technical data that your browser transmits, in particular your IP address, the date and time of the request, the requested page, the referring page, the response status, and browser and device information (user agent).

We process this data to deliver the website, to keep it secure and stable, and to defend against abuse. The legal basis is our legitimate interest in the secure and reliable operation of our website (Art. 6(1)(f) GDPR). The provider acts as our processor and keeps log data for a limited period in line with its own policies; see its privacy policy. We do not combine this data with other information about you.

4. Contact form

If you send us a message through the contact form, we process the information you enter: your name, your email address, your organization (optional), the role you select (optional) and the content of your message. The form provider, Formspree, Inc. (United States), may additionally record technical data such as your IP address, the time of submission and browser information. Providing this data is voluntary, but we cannot answer your inquiry without a name, an email address and a message. Please do not include confidential or sensitive information.

We use this data only to read and answer your inquiry and for any follow-up conversation. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a possible collaboration or other agreement, and otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

The form provider processes submissions on our behalf as a processor and forwards them to our email inbox; see its privacy policy. Submissions are also kept in our account with the form provider and in our mailbox.

Storage period. We delete your inquiry once it has been handled and no further conversation is expected, generally within 12 months of our last contact. We keep it longer only if a collaboration or agreement results from it or if a legal retention obligation applies.

5. Contacting us by email

If you write to us by email, we process your email address, the content of your message and the associated metadata in order to answer you. The legal bases and storage period are the same as for the contact form. Please note that unencrypted email can be read or altered in transit.

6. Recipients

Personal data is shared only with the service providers named above, which act as processors under data processing agreements, and with the email service that hosts our mailbox. We do not sell personal data and do not use it for advertising.

7. Transfers outside the EU/EEA

Some of our providers are based in, or process data in, the United States. Where personal data is transferred to a country without an EU adequacy decision, the transfer relies on safeguards under Art. 44 ff. GDPR, such as the provider’s certification under the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. You can find the details in the providers’ privacy documentation linked above.

8. Cookies and similar technologies

We do not set cookies and do not use local storage or similar technologies on this website. Because we do not use any technologies that require consent, there is no cookie banner.

9. External links

This website links to our LinkedIn profile. The link is a plain link; no data is sent to LinkedIn unless you click it. After that, LinkedIn processes your data under its own privacy policy.

10. Your rights

You have the following rights under the GDPR, subject to its conditions:

  • access to your personal data (Art. 15),
  • rectification of inaccurate data (Art. 16),
  • erasure (Art. 17),
  • restriction of processing (Art. 18),
  • data portability (Art. 20), and
  • objection to processing based on legitimate interests (Art. 21).

Right to object: you may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR. We will then stop the processing unless we can demonstrate compelling legitimate grounds for it.

To exercise your rights, contact us using the details in section 1. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The authority competent for us, as a controller based in Bavaria, is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

11. No automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects for you.

12. Changes to this notice

We update this notice when our website or the way we process data changes. Last updated: 10 November 2026.