Privacy

Christian Baumgertel
Kyffhäuserstr. 22, 10781 Berlin, Germany
Email: hello@baumgertel-consulting.com
Phone: +49 30-34761322

As a sole proprietor I am not required to appoint a data protection officer. Please contact me directly with any privacy questions.

No third-party scripts or fonts are loaded.

Which data: whenever a page is requested, your browser transmits technically necessary data: IP address, date and time, requested address, referrer and user agent. Google processes it to deliver the page and to protect against abuse.

Legal basis: legitimate interest in a secure and available website (Art. 6(1)(f) GDPR).

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as processor (Art. 28 GDPR). Access by Google LLC in the US cannot be ruled out. Google is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses also apply.

Retention: I do not store these log data myself. Google deletes them according to its own retention periods.

Email and phone: I process your contact details and the content of your message to reply to your request (Art. 6(1)(b) GDPR, or (f) for general enquiries). Emails are stored in my Microsoft 365 mailbox (Microsoft Ireland Operations Limited, Dublin) as processor.

Booking a call: the “book a 15-min call” button leads to Microsoft Bookings. Data is only sent to Microsoft once you open that link; Microsoft’s privacy notice also applies to the booking.

Retention: as long as needed to handle your request, and afterwards only where statutory retention obligations apply (e.g. six years for business correspondence under German law).

Which data: name, email address, optionally your shop or website, your message and the page you sent the request from.

Purpose and legal basis: replying to your request and, where applicable, preparing a contract (Art. 6(1)(b) GDPR). Spam protection is based on my legitimate interest (Art. 6(1)(f) GDPR).

How the data travels: the form sends to an endpoint on this domain, running on Google Cloud in Frankfurt. From there your request is sent as an email to my Microsoft 365 mailbox. There is no database of form submissions.

Retention: I keep the email as long as needed to handle your request, and afterwards only where statutory retention obligations apply.

Which data: the page viewed (without URL parameters), language, the domain of the page you came from, campaign parameters (utm_…) from the link, clicks on contact options, starting to fill in the form and opened FAQ questions.

What not: no cookies, nothing stored in your browser, no identifiers that could link visits. IP address and user agent are transmitted technically but not stored. No data is shared with ad platforms.

Opt-out: if “Global Privacy Control” or “Do Not Track” is enabled in your browser, nothing is measured.

Legal basis and retention: legitimate interest in improving this website (Art. 6(1)(f) GDPR). The events are stored on Google Cloud in the EU and deleted after 14 months.

I show how this works technically on the page How I measure this website.

Links, for example to LinkedIn or Microsoft Bookings, are plain links. Only when you click one does your browser open the other website, where its privacy notice applies.

access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and withdrawal of consent with effect for the future (Art. 7(3)).

Objection (Art. 21 GDPR): you may object at any time, on grounds relating to your particular situation, to processing based on my legitimate interest. An informal email is sufficient.

Complaint: you can lodge a complaint with a data protection supervisory authority, for example the authority responsible for me: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.

Providing your data is voluntary, but I cannot reply to your request without contact details. There is no automated decision-making or profiling.

Last updated: November 2026