Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR):

ARTORIUS Consulting
Thomas Scislowski
Bussardweg 18
41468 Neuss
Germany

Phone:
Email:

2. Overview of Processing

Types of Data Processed

• Contact data (e.g., name, email, phone number)
• Content data (e.g., form entries, messages)
• Usage data (e.g., pages visited, access times)
• Meta/communication data (e.g., IP addresses, browser type)

Purposes of Processing

• Provision of the website and its functions
• Responding to contact inquiries and appointment bookings
• Security measures and abuse prevention

3. Legal Basis

We only process personal data when a legal basis permits it:

• Contract performance and pre-contractual measures (Art. 6 para. 1 lit. b GDPR): Processing is necessary for the performance of pre-contractual measures or contract fulfilment.
• Legitimate interests (Art. 6 para. 1 lit. f GDPR): Processing serves our legitimate interests, e.g., the operation and security of the website.
• Legal obligation (Art. 6 para. 1 lit. c GDPR): We are legally obligated to process data, e.g., tax retention requirements.

4. Hosting and Content Delivery

Netlify

This website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA. When accessing this website, information is automatically stored in server log files (IP address, date/time, page accessed, browser, operating system). This data is automatically deleted after a maximum of 30 days.

Legal basis: Legitimate interest in a secure and efficient website operation (Art. 6 para. 1 lit. f GDPR).

Third country transfer: Netlify processes data in the USA. The transfer is based on EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR).

More information: netlify.com/privacy

Cloudflare

We use Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA for DNS services and content delivery. Cloudflare processes technically necessary connection data (IP address, access data). This data is automatically deleted after a maximum of 4 days.

Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR).

Third country transfer: Cloudflare processes data in the USA. The transfer is based on EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR).

More information: cloudflare.com/privacypolicy

5. Cookies

This website uses only technically necessary cookies that are required for the operation of the website. No tracking, analytics, or marketing cookies are used. Separate consent is therefore not required.

6. Contact Form

When you use our contact form, the following data is processed:

• Name
• Email address
• Company (optional)
• Phone number (optional)
• Your message

Legal basis: Performance of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Storage period: Your inquiry will be deleted after processing is complete, unless legal retention periods (e.g., 6 years per § 257 HGB, 10 years per § 147 AO) require longer storage.

7. Appointment Booking (Cal.com)

For appointment bookings, we use Cal.com, Cal.com Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. The following data is processed:

• Name
• Email address
• Selected appointment
• Optional notes

Legal basis: Performance of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Third country transfer: Cal.com processes data in the USA. The transfer is based on EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR).

More information: cal.com/privacy

8. External Links (LinkedIn)

Our website contains links to LinkedIn profiles. When clicked, you will be redirected to linkedin.com. Data is only transmitted to LinkedIn when you actively click the link. LinkedIn's privacy policy (Microsoft Corporation) applies on the destination page.

More information: linkedin.com/legal/privacy-policy

9. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Information about your stored data
• Right to rectification (Art. 16 GDPR): Correction of inaccurate data
• Right to erasure (Art. 17 GDPR): Deletion of your data
• Right to restriction (Art. 18 GDPR): Restriction of processing
• Right to data portability (Art. 20 GDPR): Receive your data in machine-readable format
• Right to object (Art. 21 GDPR): Objection to processing based on legitimate interests

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44, 40102 Düsseldorf, Germany
www.ldi.nrw.de

10. Data Security

We use technical and organisational security measures in accordance with Art. 32 GDPR to protect your data. These include SSL/TLS encryption (HTTPS) for the entire website, regular security updates, and access restrictions on personal data.

11. Changes

We reserve the right to adapt this privacy policy as necessary, in particular in the event of changes to the legal situation or changes to our data processing procedures. The current version can always be found on this page.