Privacy Policy

Your data subject rights

You can exercise the following rights at any time using the contact details provided above:

• Information about your data stored by us and its processing,
• Rectification of inaccurate personal data,
• Erasure of your data stored by us,
• Restriction of data processing, if we are not yet allowed to delete your data due to legal obligations,
• Objection to the processing of your data by us, and
• Data portability, provided you have consented to the data processing or have concluded a contract with us.

Purposes of data processing by the controller and third parties

We process your personal data only for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those mentioned. We only pass on your personal data to third parties if:

• you have given your express consent to do so,
• the processing is necessary for the performance of a contract with you,
• the processing is necessary for compliance with a legal obligation,
• the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.

Erasure or blocking of data

We adhere to the principles of data avoidance and data minimisation. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various storage periods provided for by law. After the respective purpose ceases to apply or these periods expire, the corresponding data will be routinely blocked or erased in accordance with statutory provisions.

Collection of general information when visiting our website

When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar. This is exclusively information which does not allow any conclusions to be drawn about your person.

This information is technically necessary to correctly deliver the content of web pages requested by you and is mandatory when using the internet.

Hosting and Content Delivery Network (CDN)

This website is operated on the Lovable platform; the content is additionally delivered via the Content Delivery Network (CDN) of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you access our website, technically necessary connection data is processed, in particular your IP address, so that the requested content can be delivered to your browser. Cloudflare uses the technically necessary cookie __cf_bm, which serves to distinguish between human users and automated requests (bot protection) and expires after about 30 minutes. The legal basis for this processing is our legitimate interest in the secure, stable and efficient provision of our website in accordance with Art. 6 (1) (f) GDPR. A data transfer to the USA cannot be excluded; Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.

Reach measurement

For the statistical analysis of the use of our website, the hosting platform uses a session cookie (session-id) and a deployment identifier (__dpl). The analysis is carried out exclusively in an aggregated and anonymous form; no cross-page tracking and no use of advertising trackers takes place. It is not possible to draw conclusions about individual persons. The legal basis is our legitimate interest in the needs-based design and optimisation of our website in accordance with Art. 6 (1) (f) GDPR.

Contact form

If you send us an enquiry via the contact form on this website, we process the data you provide – name, email address, telephone number (voluntary information) and the content of your message – exclusively for the purpose of processing your enquiry and contacting you. The legal basis is Art. 6 (1) (b) GDPR (initiation or fulfilment of a contract). The form data is stored in a database of our processor Supabase, with whom a contract for commissioned processing in accordance with Art. 28 GDPR exists. In addition, we receive a notification by email to mail@plan-a-consulting.de. Your data will be erased as soon as your enquiry has been finally dealt with and there are no legal obligations to retain data. Your data will not be passed on to other third parties.