Privacy Policy

2.1 Access Data and Hosting

Every time you access our website, information is automatically collected that your browser transmits to our server (so-called server log files). This includes:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the retrieved file
• Amount of data transferred
• Notification of successful retrieval (HTTP status code)
• Browser type and version
• Operating system
• Referrer URL (previously visited page)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring system security and stability).

This data is stored for a maximum of 7 days and then deleted, unless security-relevant incidents require longer retention.

This website is hosted with Vercel Inc. (USA). Vercel processes the resulting access data as our data processor.

2.2 Contact

When you contact us via email, contact form, or other means, the data you provide (name, email address, message content, possibly phone number and company information) will be stored by us to process your inquiry and for possible follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

This data will be deleted after your inquiry has been completely processed and provided there are no legal retention obligations.

2.3 Consulting and Service Contracts

As part of our consulting and managed services activities, we process personal data of our clients and their employees that is necessary for contract fulfillment. This may include:

• Contact information (name, email, phone)
• Company data and organizational information
• Technical data for system configuration and management
• Project documentation and communication
• Billing-relevant data

Legal basis: Art. 6(1)(b) GDPR (contract fulfillment).

This data is stored for the duration of the business relationship and in accordance with legal retention periods (typically 6-10 years after contract termination).

5.1 Strictly Necessary Storage

We use cookies and local storage that are required to operate the website. These are exempt from consent under Section 25(2) TDDDG / Art. 6(1)(f) GDPR:

• language (cookie) - stores your language preference. When the language is auto-detected from your browser setting, the cookie is session-scoped and expires when you close your browser. When you actively switch the language, the cookie is stored for 12 months.
• opsora_consent (cookie, 12 months) - stores your cookie choice, including a refusal. The timestamp is refreshed every time you change your choice.
• theme (local storage) - stores your light/dark display preference.

5.2 Managing and Withdrawing Consent

You can change or withdraw your cookie consent at any time via the "Cookie settings" link in this website's footer. Withdrawal takes effect for the future (Art. 7(3) GDPR): non-essential content stops loading afterwards. When you withdraw the marketing category, we delete the first-party cookies set by the LinkedIn Insight Tag (see 5.4). Cookies LinkedIn sets directly on its own domain cannot be removed by us - use LinkedIn's own ad settings for that.

5.3 Plausible Analytics

For statistical evaluation of website usage we use Plausible Analytics, a cookieless, EU-hosted analytics service. Plausible sets no cookies, builds no user profiles, and uses no fingerprinting. Because no access to terminal equipment under Section 25 TDDDG takes place, no consent is required.

We additionally record cookieless, non-personal event counts (custom events): CTA clicks, LinkedIn share clicks, article views, and filter and language usage, each with non-identifying properties such as placement or article slug. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in usage measurement).

5.4 LinkedIn Insight Tag

Only after your explicit consent ("marketing") do we load the LinkedIn Insight Tag to measure the performance of our LinkedIn campaigns. Provider: LinkedIn Ireland Unlimited Company (Ireland); a transfer to LinkedIn Corporation (USA) may occur under appropriate safeguards (e.g. the EU-U.S. Data Privacy Framework). Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

The Insight Tag sets the first-party cookies li_fat_id, li_gc, and ln_or. We delete these cookies when you withdraw consent. Cookies on LinkedIn's own domains cannot be removed by us - use LinkedIn's own ad settings for that. Withdraw at any time via Cookie settings in the footer. More information: LinkedIn's Privacy Policy.

5.5 Hyvor Talk

Under Insights articles we offer a comment feature from provider HYVOR, 10 Rue de Penthièvre, 75008 Paris, France. The comment section does not load automatically: it activates only when you click "Load comments," or permanently once you enable external content in Cookie settings. Loading it transmits your IP address and the page URL to HYVOR. More information: HYVOR's Privacy Policy.

5.6 Cloudflare Turnstile

On the /contact and /careers form pages we use Cloudflare Turnstile to protect against abuse and automated access. The script loads as soon as you open one of these form pages - not on any other page. Because this is necessary to provide the form service you expressly requested, no consent is required (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). Provider: Cloudflare, Inc. More information: Cloudflare's Privacy Policy.

8.1 Right to Access (Art. 15 GDPR)

You have the right to obtain information about the personal data we process.

8.2 Right to Rectification (Art. 16 GDPR)

You have the right to request the correction of inaccurate data or completion of incomplete data.

8.3 Right to Erasure (Art. 17 GDPR)

You have the right to request the deletion of your data, provided there are no legal retention obligations.

8.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing of your data.

8.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used, and machine-readable format.

8.6 Right to Object (Art. 21 GDPR)

You have the right to object to the processing of your data for reasons arising from your particular situation.

8.7 Right to Withdraw Consent (Art. 7(3) GDPR)

If processing is based on your consent, you can withdraw it at any time with effect for the future.

8.8 Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates GDPR.