Privacy Policy

1. Data Controller

Stefan Riemeyer

Kaiserin-Augusta-Allee 88a

10589 Berlin, Germany

Email: stefan.riemeyer96@gmail.com

2. Server Log Files

When you visit this website, the hosting provider automatically records the following data in server log files:

• IP address
• Date and time of the request
• Requested page / URL
• Browser and operating system used (user agent)
• Referrer URL

This data is collected solely to ensure the technical operation and security of the website. It is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security and technical operation of the website). The hosting provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, processing exclusively within Germany. Server log files are automatically deleted after 14 days.

3. Contact form and email contact

When you contact me via email, your details (name, email address, message content) are processed to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Data from email inquiries is deleted after the inquiry has been processed, unless statutory retention obligations apply.

If you submit a request via the contact or audit form on this website, we process the data you provide (name, email address and, if provided, company) solely to handle your request. The data is transmitted to our own server (hosted by Hetzner Online GmbH, Germany); it is not shared with third parties. The legal basis is Art. 6(1)(b) GDPR as well as Art. 6(1)(f) GDPR (interest in responding to inquiries). The data is deleted as soon as it is no longer required for processing and no statutory retention obligations apply.

4. Cookies

This website sets one strictly functional cookie to remember your language preference (lang, lifetime 1 year). This cookie is essential for the website's function and does not require consent under Section 25(2)(2) TDDDG (the German implementation of the ePrivacy Directive). No tracking or analytics cookies are set; reach measurement is cookieless (see Section 5).

5. Reach measurement (cookieless, self-hosted)

To analyse website usage I operate my own, self-hosted reach measurement. It sets no cookies and uses no local storage; there is no cross-device recognition. Consent under Section 25 TDDDG is therefore not required.

The data collected is aggregated usage information such as pages viewed, time on page, scroll depth, referrer, language, approximate device type and browser, and country of origin. To count repeat visits within a single day, an anonymous, daily-rotating hash is derived from the IP address and browser signature. The IP address itself is not stored; it is used only transiently to derive that hash and to determine the country, and is discarded afterwards. No data is shared with third parties or external services; processing takes place exclusively on my server in Germany.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly, cookieless reach measurement).

6. Processing of Google Ads Data within Client Engagements

In the course of consulting and management engagements, Stefan Riemeyer is granted access to clients' Google Ads accounts and processes that data exclusively to perform the agreed services, confidentially and in compliance with the Google Ads API Terms of Service and the Google API Services User Data Policy.

7. Contacting companies for marketing purposes (direct marketing)

I approach companies for which my services are professionally relevant, by email, via professional networks, or by letter to the business address.

Categories of data: company name, business address, name and role of the authorised representative or responsible person, business contact details, and publicly visible company attributes (such as industry, shop system, approximate size).

Source of the data (Art. 14(2)(f) GDPR): the data does not come from you but exclusively from publicly accessible sources, in particular imprint details and public pages of the company website, the commercial register and open datasets derived from it, public industry and shop directories, and public profiles on professional networks.

Purpose and legal basis: initiating a business relationship in a B2B context. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is direct marketing towards businesses (Recital 47 GDPR). Only companies are contacted, never consumers.

Retention: the data is deleted once the marketing purpose no longer applies. If you object, your address is added to a suppression list and retained solely for that purpose, so that you are not contacted again.

Objection: you may object to processing for marketing purposes at any time, informally and at no cost, by email to stefan.riemeyer96@gmail.com. No further marketing contact will follow.

8. Disclosure to Third Parties

Personal data is not disclosed to third parties unless this is necessary for the performance of a contract or there is a legal obligation to do so.

9. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to object (Art. 21 GDPR), specific notice: Where data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interests), in particular server log files and email communication, you have the right to object to that processing at any time. Please address your objection to stefan.riemeyer96@gmail.com.

To exercise your rights, please contact: stefan.riemeyer96@gmail.com.

Competent supervisory authority: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, Germany.