Privacy Policy

Protecting your personal data matters to us. This website processes personal data only to the extent described below and in accordance with the General Data Protection Regulation (GDPR).

Controller

Processing via the contact form

When you send us an inquiry through the contact form, we process the data you provide - name, email address, optionally your company, and your message - solely to handle and answer your inquiry. The submission is delivered by email to our mailbox; we do not share this data with third parties.

Legal basis

The legal basis is your consent (Art. 6(1)(a) GDPR), which you actively give by submitting the form, and - where your inquiry concerns a contract - Art. 6(1)(b) GDPR, otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

Appointment booking

When you schedule a call through our appointment booking, we process the data required for it: your name, your email address, the time slot you choose (date and time), and the meeting type you request (Video-Call or phone call). Optionally, you may provide a phone number - required for a phone call -, your company, and a short topic. Optional fields are marked as such; we do not add you to any newsletter or mailing list.

The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR) and your consent, which you actively give by submitting the booking (Art. 6(1)(a) GDPR). We use the data solely to schedule and hold the requested appointment.

The booking data is stored in a database on our hosting with servers located in Germany (ALL-INKL.COM - Neue Medien Münnich). We deliberately use no external scheduling service (such as Calendly or Cal.com); the confirmation email is sent via our own mail server on the domain, without any third-party marketing tool. We do not share this data with third parties.

Booking data is automatically deleted no later than 60 days after the appointment, or earlier on request. To change or cancel an appointment, a short reply to the confirmation email is enough; your other data-subject rights (see below) remain unaffected.

Hosting

This website is hosted by a provider with servers located in Germany (ALL-INKL.COM - Neue Medien Münnich). When the site is accessed, the server processes technically necessary log data (including IP address, timestamp, requested page) to deliver the site securely and reliably. The legal basis is Art. 6(1)(f) GDPR.

Web analytics (PostHog)

To improve our offering, we collect anonymous usage statistics with PostHog. We deliberately run PostHog in cookieless mode: no cookies are set and no information is stored on or read from your device. No cross-device profile and no persistent identifier is created - only anonymous data such as the pages viewed, approximate origin, and device/browser type is processed. Your IP address is used only for processing and is not stored permanently.

The provider is PostHog Inc. (USA). Collection runs exclusively via PostHog's EU infrastructure with servers located in Frankfurt am Main; a data processing agreement under Art. 28 GDPR is in place. The legal basis is our legitimate interest in privacy-friendly audience measurement (Art. 6(1)(f) GDPR). Because no cookies are set and no data is stored on or read from your device, no consent under Section 25 TDDDG is required for this.

You may object to web analytics at any time with effect for the future. Your choice is stored locally in your browser; on your next visit, analytics is then not loaded at all.

Fonts

Fonts are served locally from our own server (no Google Fonts CDN), so no data is transferred to third parties in the process.

Retention

We store your inquiry only for as long as needed to handle it or as required by statutory retention periods, after which the data is deleted.

Your rights

You have the right to:

• access the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw a given consent with effect for the future (Art. 7(3) GDPR),
• object to processing (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). An informal message to the email address above is enough to exercise your rights.