Information on the processing of personal data pursuant to Art. 13 and 14 GDPR.
The party responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
For questions about data protection and to exercise your rights, please contact:
A statutory data protection officer is not currently required. This assessment will be reviewed when the processing of sensitive business data through app services begins.
In the course of operating this website, we process the following categories of personal data:
We do not collect any special categories of personal data within the meaning of Art. 9 GDPR.
When this website is accessed, our hosting provider automatically stores information in what are known as server log files. These are technically necessary data without which proper operation of the website would not be possible:
These data are processed exclusively to ensure trouble-free operation and to defend against attacks. They are not combined with other data sources.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Retention period: typically 7–30 days, depending on the hosting provider's configuration.
If you contact us via the contact form, by email or by phone, we will process the data you provide (name, email address, phone number, message content) exclusively for the purpose of handling your enquiry.
When you submit the contact form, the data you enter are immediately forwarded to us by email. The content is not stored on the server. Server logs contain only metadata (timestamp, IP address, response code), not the content of the enquiry. The server infrastructure is hosted with Hetzner Online GmbH; a data processing agreement (DPA) is in place.
These data are not passed on to third parties unless this is necessary to process your enquiry or you have expressly consented to it.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or contract performance) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
This website loads the Inter font via the Bunny Fonts service (BunnyCDN, Bunny Way d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia). Bunny Fonts is an EU-compliant service and does not transmit IP addresses to third countries outside the EU/EEA. No cookies are set and no user profiles are created.
Further information: fonts.bunny.net/about
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent presentation of the website).
This website uses the Google Material Symbols service for symbols and icons, provided via the content delivery network of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
When the icons are loaded, your IP address is transmitted to Google's servers and thereby transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF), so an adequate level of data protection is in place.
If you do not wish data to be transmitted to Google, you can block the display of the icons in your browser using suitable extensions (e.g. a content blocker). The functionality of the website is preserved.
Google Privacy Policy: policies.google.com/privacy
Legal basis: Art. 6(1)(f) GDPR; for transfers to the USA: adequacy decision of the EU Commission on the EU-US Data Privacy Framework (Art. 45 GDPR).
This website uses no first-party cookies and employs no remarketing or profiling. No user profiles are created, no session data are stored permanently, and no data are processed for advertising purposes. A cookieless, data-minimising reach measurement is carried out via the service Plausible Analytics — for further information please see the Web analytics section.
Only external services (cf. section 6) may give rise to technically necessary connection data, which are required exclusively for delivering the resources.
For statistical analysis of the usage of this website we use the web analytics tool Plausible Analytics. The provider is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia.
Plausible collects aggregated usage data such as the number of visitors, pages visited, referral sources and approximate geographical region as well as aggregated event counters (in particular form submissions, file downloads, outbound clicks and requests to non-existent pages). For this purpose, your device’s IP address and User-Agent are temporarily processed and combined with a daily rotating salt into a non-reversible hash value, which is used solely for same-day identification of returning visitors. The IP address and User-Agent are not stored persistently; no cookies are set and no information is stored on or read from your device (§ 25 TDDDG, the German Digital Services Data Protection Act, remains unaffected). No profile is created and no cross-site recognition takes place.
The sole recipient of the data is Plausible Insights OÜ as our data processor within the meaning of Art. 28 GDPR; a data processing agreement is in place. The servers are located exclusively within the European Union (Estonia and Germany); no transfer to third countries takes place.
Legal basis: Art. 6 (1) (f) GDPR; our legitimate interest lies in the demand-oriented optimisation of our online offering based on aggregated usage figures. You may object to this processing at any time pursuant to Art. 21 GDPR; a simple way to do so is the „Do Not Track“ setting of your browser, which Plausible respects.
Further information on data processing by Plausible is available at plausible.io/data-policy.
Where we obtain consent for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis. Where processing is necessary for the performance of a contract or for pre-contractual measures, Art. 6(1)(b) GDPR serves as the legal basis. Where processing is necessary to comply with a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis. Where vital interests require processing, Art. 6(1)(d) GDPR serves as the legal basis. Where processing is necessary to safeguard a legitimate interest and the fundamental rights and freedoms of the data subject do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis.
Personal data are deleted or blocked as soon as the purpose of storage no longer applies. Storage beyond that point may occur if required by statutory provisions. In such cases, deletion takes place after expiry of the respective retention period.
You have the following rights with regard to the personal data relating to you:
To exercise your rights, please contact: datenschutz@haedge.consulting
If you believe that the processing of personal data relating to you violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority responsible for us is: