Privacy Policy

1. Controller

The controller responsible for this website is:

Graycliff Consulting GmbH

Contact: via the contact form on this website. A public email address will be added once it is live and tested.

2. Hosting and access data

This website is hosted using Cloudflare Pages and related Cloudflare services.

When visitors access this website, technical access data may be processed automatically. This may include IP address, date and time of access, requested page or file, browser type and version, operating system, referrer URL, and security and performance-related log data.

This processing is necessary to provide, secure and operate the website.

3. Contact form

If a visitor uses the contact form, the following data may be processed: name, company, email address, message content, time of submission, and technical metadata necessary for security and delivery.

This data is used only to review and respond to the inquiry. The public contact form is not active until an approved delivery mailbox is configured.

4. Cookies and tracking

This website does not use analytics cookies, advertising cookies or tracking pixels.

Cloudflare may use technically necessary cookies or security-related mechanisms to operate and protect the website.

5. Legal bases

The processing of technical access data is based on the legitimate interest in providing a secure and functional website.

The processing of contact form data is based on responding to the inquiry and, where applicable, pre-contractual communication or legitimate interest.

6. Recipients and processors

Personal data may be processed by technical service providers used to operate the website, especially Cloudflare.

7. International data transfers

Cloudflare may process technical data on infrastructure outside the European Economic Area. Where that occurs, it is a consequence of using Cloudflare to host and protect this website. No additional overseas processors are used at present.

8. Retention

Technical logs are retained only as long as necessary for security, operation and troubleshooting.

Contact inquiries are retained only as long as necessary to process the inquiry and any resulting business communication, unless legal retention obligations apply.

9. Rights of data subjects

Visitors may have the right to access their personal data, request correction, request deletion, request restriction of processing, object to processing, request data portability where applicable, and withdraw consent where processing is based on consent.

10. Complaint

Visitors have the right to lodge a complaint with a competent data protection supervisory authority.

11. Changes

This Privacy Policy may be updated when the website, service providers or data processing activities change.