Last updated: October 5, 2026
1. Who is responsible
Johann Furmann · CleanForceHertzbergstr. 30
12055 Berlin, Germany
Email: johann@cloudjohann.com
CleanForce is the trading name of Johann Furmann, a sole trader in Germany. We have not appointed a data protection officer because we are not legally required to. For anything privacy-related, email us and you will get an answer from Johann directly.
2. The short version
- This website sets no cookies and uses no analytics or tracking tools. There is no LinkedIn Insight Tag, no Google Analytics, no Meta Pixel.
- If you fill in one of our LinkedIn Lead Gen Forms, we receive the details you submit and use them only to follow up on your request, usually the free Tech Debt Audit.
- We never sell your personal data and we do not share it with anyone for their own marketing.
- You can ask us to show, correct or delete your data at any time with one email.
3. LinkedIn Lead Gen Forms
We run ads on LinkedIn that use LinkedIn Lead Gen Forms. When you open such a form, LinkedIn pre-fills it with information from your LinkedIn profile. You can review and edit everything before you submit. Nothing is sent to us unless you click submit.
What we receive
Only the fields shown in the form, typically:
- First and last name
- Email address
- Company name and job title
- Country or region, and where shown, company size or phone number
- Your answers to any questions in the form (for example about your Salesforce Org) and any consent checkbox you tick
- Information about the ad and form you responded to and the time of submission
Why we use it
- To contact you about the request you made, for example to schedule your free Tech Debt Audit or send you the information or resource you asked for.
- To check whether the audit is a good fit for your Org and to prepare the session.
- If you have ticked a box agreeing to receive further updates from CleanForce, to occasionally email you about Salesforce cleanup topics and our services. You can unsubscribe at any time.
Legal basis
Following up on your request is necessary to take steps at your request before a possible contract (Art. 6(1)(b) GDPR). Further marketing emails are based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. Basic analysis of how our campaigns perform (for example how many people responded to an ad) is based on our legitimate interest in running effective, proportionate advertising (Art. 6(1)(f) GDPR).
Role of LinkedIn
The forms are provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (for users outside the EU/EEA and Switzerland: LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA). LinkedIn processes your data on its platform under its own responsibility, including showing you ads and pre-filling the form. Please see LinkedIn's Privacy Policy for details. Once you submit the form, the data is made available to us in LinkedIn Campaign Manager, and from there we store it in our own contact records.
How long we keep it
If we start working together, we keep your data for as long as the business relationship lasts and as required by statutory retention periods (for example under German commercial and tax law). If we do not, we delete your data no later than 12 months after our last contact, or earlier if you ask us to. If you withdraw consent to marketing emails, we stop sending them immediately and keep only what is needed to respect your opt-out.
4. Who else processes your data
We only use service providers that we need to run CleanForce and that are bound by data processing agreements (Art. 28 GDPR), for example for email, calendar and contact management, and website hosting. We do not pass your data to third parties for their own purposes, and we do not sell it.
Some providers are based in the USA. Transfers take place on the basis of the EU-U.S. Data Privacy Framework (Art. 45 GDPR) where the provider is certified, and otherwise on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
5. Hosting (Cloudflare)
This website is delivered via Cloudflare Workers (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data such as your IP address, date and time of access, requested URL, referrer URL, browser type and operating system, in order to deliver the website and protect it, for example against DDoS attacks. Legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). A data processing agreement is in place. More information: cloudflare.com/privacypolicy.
6. Booking via Calendly
The booking calendar on the Free Tech Debt Audit page is provided by Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. It only loads after you click "Show available times" (consent, Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Calendly then receives your IP address and browser data and may use cookies. If you tick "Remember my choice", we store that choice only in your browser (localStorage key "cf-calendly-consent"). Revoke stored consent.
The details you enter when booking (for example name, email, company, answers to the booking questions, chosen time) are used to schedule and hold the meeting (Art. 6(1)(b) GDPR). If we send you a booking link after you submitted a LinkedIn Lead Gen Form, the same applies. Calendly processes data in the USA on the basis of Standard Contractual Clauses. More information: calendly.com/privacy.
7. Email contact
If you email us, we process your details (for example name, email address and message) to answer you (Art. 6(1)(b) GDPR where your request relates to a possible contract, otherwise Art. 6(1)(f) GDPR). We delete them once they are no longer needed, subject to statutory retention periods.
8. Video calls and your Salesforce Org
The audit is held online via screen share. The invitation contains the link of the video conferencing service used. Communication data (for example name, email address, IP address, audio and video) is processed to hold the meeting (Art. 6(1)(b) GDPR). We only see your Salesforce Org through the screen you choose to share, and we only keep the findings needed for your report. We do not copy or store data records from your Org.
9. Links to LinkedIn
Links to our LinkedIn profiles on this website are plain links without plugins. No data is sent to LinkedIn when you visit this website. LinkedIn's privacy policy applies once you click a link.
10. Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to withdraw any consent with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): where we process data on the basis of legitimate interest, you can object at any time for reasons arising from your particular situation. You can object to the use of your data for direct marketing at any time, without giving reasons.
To use any of these rights, just email johann@cloudjohann.com.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, datenschutz-berlin.de.
11. Visitors from the USA and Canada
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We only use the information you submit to respond to your request and, if you agreed, to send you occasional updates. You can ask us at any time what we hold about you or to delete it, and we will not treat you differently for doing so.
12. Security and automated decisions
This website uses TLS encryption (you can see "https://" in your browser's address bar). We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
13. Changes
We update this policy when our services or the law change. The current version is always available at cleanforcehq.com/privacy. The German version is available as Datenschutzerklärung.