Privacy policy

We take the protection of your personal data seriously. Below we inform you about the processing of personal data when you visit this website.

The German version of this privacy policy is legally binding. This English text is provided for convenience only.

1. Controller

2. Hosting

This website is hosted by an external provider acting as a processor:

The servers are located in Germany. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). A data processing agreement (Art. 28 GDPR) is in place with the host.

3. Server log files

When you access the website, information transmitted by your browser is collected automatically: browser type and version, operating system used, referrer URL, host name of the accessing device, time of the server request and the IP address. This data is not merged with other data sources and serves technical operation and security. Legal basis: Art. 6(1)(f) GDPR.

4. SSL/TLS encryption

For security reasons, this site uses TLS encryption. You can recognise an encrypted connection by the „https://“ in your browser’s address bar.

5. Contact (form and email)

If you contact us via the contact form or by email, we process the data you provide (in particular name, company, email address and your message) to handle your request. The legal basis is Art. 6(1)(b) GDPR (initiation or performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to your request). The data is deleted as soon as it is no longer required for this purpose and no statutory retention obligations apply. Emails are processed via Microsoft 365 (Microsoft Ireland Operations Ltd., EU).

If you use the Access Governance Self-Check, we process the data you provide (name, company, email) and your answers to evaluate the self-assessment and to contact you. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

When you schedule an appointment via the “Book a call” button, you are directed to Microsoft Bookings. The data you enter there (including name, email and preferred time) is processed by Microsoft (Microsoft Ireland Operations Ltd., EU) under our Microsoft 365 agreement. The legal basis is Art. 6(1)(b) or (f) GDPR.

6. Fonts

The font used (Manrope) is served locally from this server. No external font servers are called and no data is transmitted to third parties.

7. External links (LinkedIn)

This website links to our company profile on LinkedIn. No LinkedIn plugins are embedded; data is transmitted to LinkedIn only when you actively click the link. The privacy policy of LinkedIn Ireland Unlimited Company then applies.

8. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). An informal message to the contact details above is sufficient to exercise these rights.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

10. Withdrawal of consent

Where processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

Last updated: September 2026