Privacy Policy

2.1 Website Visit / Server Logs

Data: IP address, date/time of request, time zone, request/URL, referrer, user agent, status code, amount of data transferred.

Purpose: Ensuring technical operations, analysis for defense against attacks and error diagnosis.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable, secure provision).

Retention period: Server log files are automatically deleted on a regular basis; typically after 7–30 days.

2.2 Consent Management (Cookie Banner)

Data: Your cookie/tracking preferences (consent status), timestamp, possibly anonymous device/session ID.

Purpose: Documentation and management of your consents.

Legal basis: Art. 6(1)(c) GDPR (legal documentation obligations) in conjunction with Art. 7 GDPR and Art. 6(1)(f) GDPR.

Note: Analytical cookies/tools are only set after your consent.

2.3 Google Analytics (GA4) – Only with Consent

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Data: Page views, interactions, approximate location data, device/browser information, referrer; IP anonymization enabled.

Purpose: Audience measurement and improvement of our website.

Legal basis: Art. 6(1)(a) GDPR (consent).

Retention period: Event/user data typically 2–14 months (configurable); cookies until withdrawal/deletion.

Third country transfer: Transfer to the USA is possible. Google uses Standard Contractual Clauses (SCC).

Opt-out: You can withdraw your consent at any time by clicking the cookie icon (e.g., bottom left/right of the website) and deactivating the tracking option. Data already collected remains unaffected by withdrawal; future data collection will be stopped. You can also delete cookies in your browser.

2.4 Appointment Booking ("Book a meeting") via Microsoft Bookings

Provider/Data Processor: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

Data: Name, email, phone (optional), selected appointment/time zone, information about your inquiry.

Purpose: Planning, conducting, and follow-up of appointments (initial consultation/advisory).

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures/contract performance); alternatively Art. 6(1)(f) GDPR (communication/organization).

Retention period: Appointment data is deleted 30 days after appointment completion, unless statutory retention periods apply (particularly § 147 AO, § 257 HGB: 6–10 years for business-relevant documents).

Note: We use Microsoft 365 in the EEA version (data processing in the European Economic Area). We use Microsoft Exchange Online and Microsoft Bookings. Data transfer to third countries (e.g., USA) may occur in the context of support operations; Microsoft relies on EU Standard Contractual Clauses (SCC).

2.5 Communication via Email/Phone/Contact Forms (Voluntary)

Data: Communication content, contact details, metadata.

Purpose: Processing inquiries, preparing offers, customer communication. If you contact us via social networks (e.g., LinkedIn), the privacy policies of the respective provider also apply.

Legal basis: Art. 6(1)(b) GDPR; alternatively (f) GDPR (legitimate interest in efficient communication).

Retention period: According to statutory retention periods (§ 147 AO, § 257 HGB: 6–10 years) or until completion of the inquiry if no retention obligation exists.