Skip to content

Rights-led growth.

Beck Consulting

Privacy

1. At a glance

We take the protection of your personal data seriously and have built this website to process as little data as possible:

  • The website uses no analytics, tracking or advertising services and sets no cookies for such purposes. There is no cookie banner because there is nothing to consent to.
  • Fonts, images, scripts and stylesheets are delivered from our own web space. Simply viewing the pages does not establish a connection to any other provider.
  • We receive personal data only if you send it to us yourself, by e-mail.
  • Technical data that arises automatically (server log files) is used exclusively for the security and operation of the website.
  • The only exception is a technical preview cookie that is set while the website is in maintenance mode and only for visitors who open a personal preview link (see section 6).

The following sections explain what this means in detail. The legal basis for everything described here is the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Controller

The controller responsible for data processing on this website is:

Beck Consulting GmbH
represented by the managing director [MANAGING DIRECTOR – assumed: Marco Beck]
[COMPANY ADDRESS]
Germany
E-mail: marco@beckconsulting.eu

If you have questions about data protection or wish to exercise one of your rights, the easiest way is to send us an e-mail. No particular form is required.

Beck Consulting GmbH is not required to appoint a data protection officer (§ 38 BDSG).

3. Your rights

With regard to your personal data you have the following rights against us:

  • Access (Art. 15 GDPR): you can find out which data we have stored about you, where it comes from, what we use it for and to whom we may have passed it on.
  • Rectification (Art. 16 GDPR): we correct inaccurate data and complete incomplete data.
  • Erasure (Art. 17 GDPR): you can ask us to delete your data unless a statutory retention obligation prevents this.
  • Restriction of processing (Art. 18 GDPR): in certain cases, for example while we verify the accuracy of your data, you can ask us to store your data but not to use it further.
  • Data portability (Art. 20 GDPR): data that you have provided to us on the basis of a contract or of your consent will be given to you on request in a common, machine-readable format.
  • Objection (Art. 21 GDPR): where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing.
  • Withdrawal of consent (Art. 7 (3) GDPR): where processing is based on your consent, you may withdraw it at any time with effect for the future. Processing carried out before the withdrawal remains lawful.

An informal message to the contact details given in section 2 is sufficient to exercise your rights.

Right to lodge a complaint with a supervisory authority

If you believe that we are not processing your data lawfully, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

[SUPERVISORY AUTHORITY]

4. Hosting and server log files

This website is hosted by [HOSTING PROVIDER] on servers located in Germany. All data that arises on this website is processed on those servers. We have concluded a data processing agreement with the hosting provider pursuant to Art. 28 GDPR; the provider may process the data only on our instructions and only for the operation of the website. No data is transferred to countries outside the European Union or the European Economic Area.

Each time a page is requested, the web server automatically records technical information in so-called log files:

  • the IP address of the requesting device,
  • date and time of the request,
  • the page or file requested (URL) and the HTTP status code,
  • the amount of data transferred,
  • the referring page, if your browser transmits it,
  • browser type and operating system (user agent).

This data is not merged with other data and is not used to identify you personally. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR), for example to detect attacks or malfunctions. The log files are deleted automatically after 14 days at the latest, unless an incident requires us to retain individual entries for a longer period as evidence.

5. No cookies, no analytics, no advertising

This website does not set any cookies for analysis, tracking or advertising purposes, neither its own nor those of third parties. We do not use any audience measurement tools (such as Google Analytics or Matomo), advertising networks, social media plug-ins, newsletters, chat widgets or comparable services. No profiling and no automated decision-making within the meaning of Art. 22 GDPR take place. Access to information stored on your device that would require consent under § 25 (1) TDDDG does not take place.

6. Technical preview cookie during maintenance mode

While the website is in maintenance mode, visitors see a short maintenance notice instead of the full page. Selected persons, for example the client and the agency during the development of the website, receive a personal preview link. Opening that link stores a cookie named bc_vorschau in the browser. The cookie contains a random character string that unlocks the preview; it does not contain any personal data and is not used for any other purpose. It is valid for 30 days, is transmitted only to our own server (HttpOnly, SameSite) and can be deleted at any time via the browser settings.

The cookie is strictly necessary to provide the preview that the visitor has expressly requested by opening the link (§ 25 (2) no. 2 TDDDG). The legal basis for the associated processing is our legitimate interest in reviewing the website before publication (Art. 6 (1) (f) GDPR). Visitors who do not open a preview link do not receive this cookie. Once the website is live, no preview links are in circulation and the cookie is no longer set.

7. Fonts, images and scripts from our own server

All fonts (Outfit, licensed under the SIL Open Font License), images, stylesheets and program files of this website are delivered from our own web space. We do not embed content from Google Fonts, YouTube, Vimeo, content delivery networks or any other external servers. When you view the pages, no data is transmitted to third parties.

8. Contact by e-mail

This website does not have a contact form. If you send us an e-mail, we process the data you provide (for example your name, your e-mail address, your organisation and the content of your message) in order to handle your enquiry and any follow-up questions.

Legal basis: Art. 6 (1) (b) GDPR where your enquiry concerns a possible mandate, an existing engagement or another contractual relationship; in all other cases our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR).

Storage period: we store the data until your enquiry has been dealt with and no further follow-up is to be expected. E-mails that are business correspondence within the meaning of commercial and tax law are retained for the statutory periods (six to ten years depending on the type of document, § 257 HGB and § 147 AO) and are then deleted.

Recipients: your e-mail is received and stored on the mail server of our e-mail provider on our behalf. We do not pass the data on to other third parties unless we are legally obliged to do so.

E-mails are usually encrypted in transit (transport encryption). We cannot guarantee end-to-end encryption of the content. Please do not send us particularly sensitive information by e-mail unless it has been agreed with us beforehand.

9. Link to LinkedIn

This website contains a link to the profile of Marco Beck on LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It is a plain link: we do not embed any LinkedIn plug-in, button or script, and no data is transmitted to LinkedIn merely by viewing our website.

Only when you click the link does your browser open LinkedIn in a new window. From that moment on, LinkedIn is responsible for the processing of your data; LinkedIn receives, among other things, your IP address and, if you are logged in, can assign the visit to your LinkedIn account. LinkedIn may transfer data to servers in the United States; LinkedIn Corporation is certified under the EU-US Data Privacy Framework. Details can be found in LinkedIn’s privacy policy at linkedin.com/legal/privacy-policy.

10. Encrypted transmission

This website uses TLS encryption (https). Everything that your browser exchanges with our server, including the pages you request, is transmitted in encrypted form and cannot be read by third parties in transit. You can recognise the encrypted connection by the lock symbol in the address bar of your browser and by the address beginning with “https://”.

11. No obligation to provide data

You are neither legally nor contractually obliged to provide us with personal data, and you can use this website without providing any. If you do not send us your contact details, we simply cannot answer an enquiry.

12. Changes to this privacy policy

We will update this privacy policy whenever the website, the legal situation or our procedures change. The version published here applies. Should we add a contact form, analytics or embedded content in the future, this policy will be revised before the change goes live.

Last updated: [DATE]