Privacy notice: website tools and the Inquiry Diagnostic
This notice covers the documentation cost calculator, the agency assessment, and the Inquiry Diagnostic intake. It explains what each one records, when it records it, why the information is used, who receives it, and how long it is kept.
1. Who is responsible
HG Connect UG (haftungsbeschränkt)
Spatzenweg 17
85238 Petershausen
Germany
Represented by: Managing Director Henrik Grünfeld
Registered: Amtsgericht München, HRB 299598
VAT ID (§ 27a UStG): DE451961643
Email: henrik@gokogsy.com
We are established in Germany, so the EU General Data Protection Regulation (GDPR) applies to this processing regardless of where you are. Our general website privacy notice, in German, is at hgconnect.de/datenschutz. Where the two differ, this notice governs the tools and intake described here.
2. The short version
- Both tools record your answers without your email attached as you go, each time you press Continue, not only at the end. If you abandon partway through, what you entered up to that point has been recorded.
- Your email is recorded separately, is entirely optional, and is only offered after your result is already on the screen. If you give one, the two records are linked by an ID. Neither tool asks for anything before showing you your figures.
- The Inquiry Diagnostic intake is different: it records your name, email, agency details, and answers only when you submit the form. It is used to review your request, contact you to confirm fit, and, if a session is arranged, prepare and conduct it. A copy is sent to our business email so the request can be reviewed.
- We do not ask for information about clients, patients, care recipients, caregivers, or named referral contacts. The intake repeatedly tells you not to include it.
- No cookies, and nothing stored on your device at all.
- We count page views with Plausible, which sets nothing on your device and keeps no personal data. Your IP address is not stored. See section 5.1.
- No advertising. No tag manager. No session recording. No profile of you anywhere.
3. What the tools and intake record
Two self-service tools on this site record what you enter: the documentation cost calculator and the agency assessment. They behave identically in privacy terms — same timing, same lawful basis, same retention, separate storage — so everything below applies to both unless it names one. The Inquiry Diagnostic intake is described separately in section 3.4 because it collects identified information for a different purpose.
3.1 Your answers — recorded as you go, each time you press "Continue"
The calculator has four steps and the assessment has five. Each time you press Continue we record what you have entered so far, replacing the previous record rather than adding to it, so there is one record per visit and not four or five. This happens before you are offered the chance to leave an email address, and it happens whether or not you finish: if you leave at step two, what you entered by step two has been recorded and is marked as incomplete.
From the calculator we record: number of caregivers, shifts per caregiver per week, average shift length, working weeks per year, your bill rate, caregiver rate and admin rate, minutes spent per note, who writes the note, how notes are kept, and your estimate of how often a logged shift does not match what was billed.
From the assessment we record the same kind of operational figures across five steps: roster size, shifts per caregiver per week, average and shortest shift length, office headcount, your bill, caregiver and admin rates, minutes per note and who writes it, how often a logged shift does not match what was billed, how many call-outs you get in a month and how long covering one takes, how many caregivers you hired in the last year and how many left in the first month, roughly what it costs you to get one caregiver to a first shift, whether you track how your office's time divides, and roughly how much of your work is Medicaid or waiver funded.
Where you answered "I do not know", we record that you did not know. We do not substitute an average, and the tools do not fill the gap in for you.
In both cases we also record the figures the page calculated from those inputs, and for the assessment the resulting order of the ranked list.
This record contains no name, no email address and no company name. On its own it does not identify you. We may still treat it as personal data, because in principle it could be linked back to you if you later submit your email.
| Purpose | To learn how documentation effort and billing accuracy vary across home care agencies of different sizes and shapes. This is research that informs our product and our published writing. Results are only ever reported in aggregate, never per agency. |
|---|---|
| Lawful basis | Art. 6(1)(f) GDPR, our legitimate interest in understanding the market we build for. You can object at any time under Art. 21 GDPR. |
3.2 Your email — optional, and only offered after you have your result
Neither tool asks for an address before showing you anything. The calculator shows your figures and the assessment shows your ranked list first; underneath the result, both offer you the chance to leave an email address. If you do, we record that address, the time you submitted it, and the ID of the answers described in 3.1. If you do not, there is nothing to record and your result is unchanged.
| Purpose | To know which agency worked out a figure, and so that we can contact you about it. We do not send the figures to that address; they are shown on the screen. The site does not send an automated email to that address. |
|---|---|
| Lawful basis | Art. 6(1)(f) GDPR, our legitimate interest in following up with agencies that use the calculator or the assessment. You can object at any time under Art. 21 GDPR. |
We do not buy, sell, rent or share your address with anyone. You can ask us to erase it at any time under section 8.
Because we rely on legitimate interest rather than your consent, we carried out a balancing test weighing that interest against your rights before we started. You can ask us for a copy of it at henrik@gokogsy.com, and we will send it.
3.3 Technical data
With the record in 3.1 we also store the page that referred you, any campaign parameters in the link you followed (utm_source, utm_medium, utm_campaign), your browser's user agent string, and your browser window width. Purpose: to know where visitors come from and whether the page works on their device. Lawful basis: Art. 6(1)(f) GDPR.
Our host also processes standard server access data, including your IP address, as described in section 6.
3.4 Inquiry Diagnostic intake
The intake records information only when you press Send intake. If the submission fails, the answers remain in your browser so you can try again, but they are not stored permanently on your device. We record:
- your name, email address, agency name, optional agency website, opening month, and service area;
- your description of the agency's ideal client, without any real client's identity;
- current numbers of active clients and caregivers;
- the client-acquisition activities you tried, how long you tried them, and a spending range;
- numbers of inquiries, assessments or consultations, and new paying clients for the period stated on the form;
- the types and status of referral relationships, without individual names; and
- anything you optionally tell us you are unsure about.
Do not include client names, patient information, caregiver names, named referral contacts, or other confidential information. The form asks about categories and approximate figures, not identifiable care information.
| Purpose | To review your request for the Inquiry Diagnostic, contact you to confirm fit, and, if a session is arranged, prepare and conduct it and complete directly related follow-up. |
|---|---|
| Lawful basis | Art. 6(1)(b) GDPR, processing necessary to take steps at your request and, if a session is arranged, to deliver it. |
| Where it goes | Netlify stores the submission in the site's Forms area. Netlify sends
a notification copy to henrik@gokogsy.com, which is hosted in Google Workspace,
so the request can be reviewed before a session is arranged. It is not added to a CRM, newsletter, or
marketing list. |
4. What we never collect
We do not ask for information about clients, patients, care recipients, caregivers, or individual referral contacts. Do not enter their names, addresses, diagnoses, care notes, health data, or other confidential information.
The calculator and assessment use numbers and fixed choices. The intake contains free-text fields because the working session needs context, but every relevant field tells you not to identify a real person. If you include such information by mistake, contact henrik@gokogsy.com so we can delete it.
5. Cookies, tracking and third parties
These pages set no cookies. They use no localStorage, no sessionStorage and no other browser storage; before submission, what you type is held in memory and is gone when you close the tab. There is no advertising, no tag manager, no session recording, no chat widget and no social embed. Fonts on this page are the ones already on your device.
5.1 Analytics
We count page views using Plausible, which we chose because it is the only kind of analytics compatible with the paragraph above: it sets nothing on your device and stores no personal data about you.
What is measured: the page you viewed, the site that referred you, and coarse information derived from your request such as country, browser and whether you are on a phone or a desktop. Your IP address is used momentarily to work out the country and to generate a daily, salted hash so that two views in one day are not counted as two visitors. The IP address itself is not stored, the salt is discarded every day, and the hash cannot be traced back to you or followed to another site. There is no cross-site tracking and no profile.
The script is served from this domain, not from Plausible's. Both the script and
the events it sends are proxied through gokogsy.com, so your browser never connects to
plausible.io. That is a technical detail, not a legal one: Plausible still receives the
measurements, and it is named as a processor in section 6.
| Lawful basis | Art. 6(1)(f) GDPR, our legitimate interest in knowing which pages are read and whether the site works. We rely on legitimate interest rather than consent because § 25 TDDDG requires consent for storing or accessing information on your device, and this stores and accesses nothing on your device. You can object at any time under Art. 21 GDPR. |
|---|
If you prefer not to be counted at all, any tracker blocker will stop it, and we do not attempt to work around one.
Apart from these measurements, the only outbound request the page makes is sending the records described in section 3.
6. Who processes the data for us
Three service providers process data for us:
- Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Netlify hosts the pages, receives and stores the records described in section 3, filters form spam, and sends the Inquiry Diagnostic notification. As host it processes technically necessary access data including IP address, date and time, page requested and browser type, on the basis of Art. 6(1)(f) GDPR (secure and stable operation). A data processing agreement under Art. 28 GDPR is in place.
- Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Receives the analytics measurements described in section 5.1. Plausible is established in the European Union and stores the data in the EU, so this involves no transfer to a third country. A data processing agreement under Art. 28 GDPR is in place.
- Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland.
Google Workspace hosts
henrik@gokogsy.comand receives the notification copy of a Inquiry Diagnostic intake. Google's Cloud Data Processing Addendum governs its processing of Workspace customer data, including Standard Contractual Clauses where required.
We do not send submission contents to an advertising network, CRM, newsletter, or marketing automation service. Netlify and Google may use subprocessors under their respective data processing terms. The answers and email addresses described in section 3 are never sent to Plausible: analytics and submissions are separate paths that share nothing.
Netlify is in the United States, so the hosting and the section 3 records involve a transfer outside the EU. That transfer takes place on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Google Workspace may also use global infrastructure and subprocessors; transfers outside the EU are governed by Google's data processing terms and the safeguards described above.
7. How long we keep it
- Your answers (3.1): kept as an individual record for 24 months from the date you submitted them. At the end of that period we aggregate them into summary statistics and delete the individual record, including the technical data in 3.3 and the link to any email address. The same rule and the same automated job cover both the calculator and the assessment, which are stored separately but pruned identically.
- Your email (3.2): kept until you unsubscribe or ask us to delete it. If you do neither, we review the list every 24 months and remove addresses we have had no contact with. Addresses from the calculator and from the assessment are stored separately and treated the same way.
- Inquiry Diagnostic intake (3.4): kept while we prepare and conduct the session and complete directly related follow-up, then deleted from Netlify Forms and Google Workspace. In every case, both copies are deleted no later than 12 months after submission, unless a legal obligation requires a specific record to be kept longer. You may ask us to delete it sooner.
- Server access data: deleted automatically after a short period by our host.
Aggregated statistics that can no longer be traced to any individual or agency are not personal data and may be kept and published indefinitely.
8. Your rights
Under the GDPR you have the right to access your data (Art. 15), to have it corrected (Art. 16), to have it deleted (Art. 17), to restrict how we process it (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing rests on your consent, you may withdraw that consent at any time.
A message to henrik@gokogsy.com is enough. To find the record described in 3.1 we will normally need the email address you submitted; if you never submitted one, we may be unable to identify your record, in which case Art. 11(2) GDPR applies. We can locate a Inquiry Diagnostic intake using the email address or agency name entered on the form.
9. Complaints
You may complain to a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 27, 91522 Ansbach, Germany.
10. If you are in the United States
We are a German company and apply the GDPR standard above to everyone, which in practice meets or exceeds most US state privacy requirements. We do not sell or share personal information as those terms are used in the California Consumer Privacy Act, and we do not engage in targeted advertising. To exercise any right available to you under your state's law, write to henrik@gokogsy.com and we will treat it the same way as a GDPR request.
11. Changes
If we change what any tool or intake records, how it is used, or who processes it, we will update this notice and change the date below before the change takes effect.