Privacy Policy

1. General Information

Schleier Consulting LLC places great importance on the protection of personal data. We process personal data exclusively in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for data subjects in the European Economic Area (EEA) as well as the relevant U.S. data protection laws.

Data Controller:

2. Collection and Storage of Personal Data

We process personal data that arises when visiting our website or when contacting us. This includes in particular:

Server log data (IP address, date, time, browser type, operating system)
Data from contact forms or email inquiries
Newsletter registrations (if offered)
Cookies and similar technologies (see below)

3. Purposes and Legal Bases of Processing

We process personal data for the following purposes on the basis of the specified legal grounds:

Operation and security of the website

Purpose: Technical operation, IT security, prevention of misuse
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interests)

Handling of inquiries

Purpose: Communication with prospects and customers
Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract / steps prior to entering into a contract)

Analytics and statistics (Google Analytics, only with consent)

Purpose: Measurement of reach, optimization of the website
Legal basis: Art. 6 (1) lit. a GDPR (consent)

Compliance with legal obligations

Purpose: Fulfillment of tax and commercial law retention requirements
Legal basis: Art. 6 (1) lit. c GDPR (legal obligation)

4. Web Hosting

Our website is hosted by netcup GmbH, Karlsruhe, Germany.
In this context, server log files are automatically stored.

Data processed: IP address, access time, browser information, operating system
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure operation)
Retention period: maximum of 7 days, after which the data is automatically deleted

5. Use of Cloudflare

We use Cloudflare (Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA) for the prevention of attacks and to optimize loading times.

Data processed: IP address, system configuration, access statistics
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in security and performance)
Third-country transfer: USA, safeguarded by Standard Contractual Clauses (Art. 46 (2) lit. c GDPR)

6. Google Analytics

We use Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Google Analytics uses cookies that enable an analysis of the use of the website. IP addresses are anonymized (IP masking).

Legal basis: Art. 6 (1) lit. a GDPR (consent via cookie banner)
Retention period: generally 14 months (may vary)
Third-country transfer: USA, safeguarded by Standard Contractual Clauses (Art. 46 (2) lit. c GDPR)
Withdrawal: Consent may be withdrawn at any time via the cookie banner

7. Use of Google Mail

Our business email communication is carried out via Google Mail (Google LLC, USA).

Data processed: email content, sender and recipient addresses, metadata
Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract / steps prior to entering into a contract) or Art. 6 (1) lit. a GDPR (consent)
Third-country transfer: USA, safeguarded by Standard Contractual Clauses (Art. 46 (2) lit. c GDPR)

8. Cookies

Our website uses cookies.

Necessary cookies (technically required) → Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest)
Analytics/marketing cookies (e.g., Google Analytics) → Legal basis: Art. 6 (1) lit. a GDPR (consent)

Your cookie settings can be changed at any time via the banner.

9. Retention Period

We retain personal data only for as long as it is necessary for the purposes stated or as long as statutory retention periods apply. After this period, the data will be deleted.

10. Rights of Data Subjects (Art. 15–21 GDPR)

Data subjects in the EEA have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, please contact: info@schleierconsulting.com

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

12. Data Security

We implement technical and organizational measures in accordance with Art. 32 GDPR (SSL/TLS encryption, access restrictions, firewalls) to protect personal data against loss, misuse, and unauthorized access.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy in order to adapt it to changes in the legal framework or to new services on our website. The current version is available on our website at all times.