You agree to the privacy policy below, and the Privacy Policy for Substack, the technology provider.

Privacy Policy

Last updated: 27 September 2026

This Privacy Policy explains how personal data is processed in connection with the Creative Leadership Forum, hosted on Substack.

1. Data Controller

The controller responsible for the processing described in this policy is:

Ingenious Thinking GmbH
Hauptstraße 151
10827 Berlin
Germany

Managing Director: Akin Duyar
Commercial Register: Amtsgericht Charlottenburg, HRB 156356
VAT ID: DE342978326
Email: contact@ingenious-thinking.com

2. Substack as Technology Provider

The Creative Leadership Forum is hosted on Substack.

Substack generally acts as a data processor when processing subscriber data on our behalf. For certain platform-related activities, Substack may also act as an independent data controller under its own Privacy Policy. Substack’s Publisher Agreement includes a Data Processing Addendum and Standard Contractual Clauses for transfers of personal data from the European Economic Area to third countries. Substack Unterstützung

3. Personal Data We Process

Depending on how you interact with the Creative Leadership Forum, we may process:

  • your email address

  • your name or profile information, where provided

  • your subscription status

  • information about your interaction with our publications, such as email opens, link clicks and article views

  • comments, replies or other information you choose to submit

  • correspondence when you contact us directly

Substack may collect additional technical and usage information for operating its platform under its own Privacy Policy. Substack

4. Purposes and Legal Bases

We process personal data for the following purposes:

Subscriptions and newsletter delivery
To manage your subscription and send you Creative Leadership Forum publications and updates. The legal basis is your consent under Article 6(1)(a) GDPR and, where applicable, processing necessary to provide a service you have requested under Article 6(1)(b) GDPR.

Communication
To respond to inquiries, comments or other communications. The legal basis is Article 6(1)(b) GDPR where the communication relates to a requested service, or Article 6(1)(f) GDPR based on our legitimate interest in communicating with readers, contributors and interested parties.

Analytics and improvement
We may use information made available through Substack, such as readership and engagement data, to understand how the publication is used and improve our content. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in operating and improving the Creative Leadership Forum.

5. Data Recipients and International Transfers

Personal data may be processed by Substack, Inc. and service providers used by Substack to operate the platform.

Substack is based in the United States. Where Substack processes personal data on our behalf, its Publisher Agreement provides contractual safeguards, including EU Standard Contractual Clauses, for relevant international data transfers. Substack

6. Retention

We retain personal data only for as long as necessary for the purposes described above or as required by law.

Subscriber data is generally retained for the duration of the subscription. If you unsubscribe, we may retain limited information where necessary to document your unsubscribe request or comply with legal obligations.

7. Your Rights

Under the GDPR, you may have the right to:

  • access your personal data

  • correct inaccurate personal data

  • request deletion of your personal data

  • restrict processing

  • object to certain processing

  • receive your personal data in a portable format

  • withdraw consent at any time with effect for the future

You may unsubscribe from Creative Leadership Forum emails at any time using the unsubscribe link contained in each email.

To exercise your rights, contact us at:

contact@ingenious-thinking.com

8. Right to Lodge a Complaint

You also have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for companies based in Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit. Datenschutz Berlin

9. Changes to This Privacy Policy

We may update this Privacy Policy if our services, technical setup or legal requirements change.