Privacy Policy

This is a convenience translation. The legally binding version is the German privacy policy.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Herzberg Consulting Services
Uta Herzberg
Bahnhofstraße 11b
85604 Zorneding, Germany
Phone: +49 8106 3480162
Email: info@herzberg-consulting-services.de

2. Hosting

This website is hosted on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Hetzner operates the servers exclusively in Germany. A data processing agreement (DPA) in accordance with Art. 28 GDPR is in place with Hetzner.

3. Server log files

Each time this website is accessed, the server automatically records the following data:

• IP address (anonymised)
• Date and time of access
• Requested URL
• Browser and operating system
• Referrer URL

This data is collected exclusively to ensure error-free operation and is automatically deleted after 7 days. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the technically error-free provision of the website).

4. Cookies and tracking

This website does not use cookies.

We do not use tracking pixels, advertising networks or retargeting services. No data is transmitted to Google, Meta or comparable providers. A cookie banner is therefore not required.

5. Web analytics: Plausible Analytics (self-hosted)

For reach measurement we use Plausible Analytics, a privacy-friendly analytics software. Plausible is operated on our own infrastructure at Hetzner in Germany (self-hosted).

Plausible does not set cookies, does not store IP addresses and does not use local storage. Only aggregated, non-personal statistics are collected (page views, time on page, referrer, browser, operating system, approximate country). The browser's Do Not Track signal is respected.

Since no access to terminal equipment takes place, no consent under Section 25 TDDDG is required. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in reach statistics).

6. Contact form

If you use our contact form, the following data is processed:

Required fields: salutation, first name, last name, email address, phone number.

Optional information: details about your request (type of enquiry, desired services, information about your housing search), free-text message.

The data is stored in an encrypted database on our server at Hetzner in Germany and used exclusively to process your enquiry. It is not passed on to third parties.

The legal basis is Art. 6 (1) (b) GDPR (implementation of pre-contractual measures) and our legitimate interest in processing your enquiry (Art. 6 (1) (f) GDPR). You can object to the processing at any time by email to info@herzberg-consulting-services.de.

Your enquiry data is deleted as soon as the purpose of storage no longer applies, at the latest after 12 months, unless statutory retention obligations exist.

7. Online appointment booking and calendar management

On our website you can book a consultation appointment directly via our own slot picker. We would like to explain transparently how your data is handled in the process.

Processed data: name, email address, phone number (if provided), request or message (if provided), chosen appointment (date and time).

This data is received via our own backend (Herzberg API), which is operated on our server at Hetzner in Germany.

Transfer to Google. To manage the appointment calendars we currently use Google Calendar, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). With every appointment booking, our backend writes the appointment including the above data into a Google calendar. Google is therefore also a recipient of this data.

We openly point out that Google also processes data on servers in the USA as part of its services. A transfer to the USA therefore takes place. Google is certified under the EU-US Data Privacy Framework; nevertheless, under current case law residual risks remain when transferring personal data to the USA.

Planned migration. We currently use Google Calendar without a concluded data processing agreement under Art. 28 GDPR. We are aware of this and are working on migrating to a self-hosted calendar solution (Nextcloud) on our server in Germany. Once the migration is complete, no appointment data will be transmitted to Google any more.

The legal basis for processing your data to carry out the appointment booking is Art. 6 (1) (b) GDPR (implementation of pre-contractual measures). The legal basis for the transfer to Google is Art. 6 (1) (f) GDPR (legitimate interest in functioning calendar management).

Appointment data remains in the calendar for as long as it is required for the preparation and follow-up of the consultation appointment. At the latest after the end of the engagement or after three years, the entries are deleted, unless statutory retention obligations prevent this.

Alternative without Google. If you do not wish any transfer to Google, you are welcome to arrange your appointment informally by email to info@herzberg-consulting-services.de or by phone on +49 8106 348 01 62. In this case, appointment management takes place exclusively in our own system.

Further information on how Google handles data can be found in Google's privacy policy: policies.google.com/privacy.

8. Email contact

If you contact us by email, your details including the contact data you provide will be stored by us to process the enquiry and in case of follow-up questions. This data is not passed on. The legal basis is Art. 6 (1) (b) GDPR.

9. Your rights

You have the right at any time to:

• Access to your data stored by us (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given (Art. 7 (3) GDPR)

To exercise your rights, please contact: info@herzberg-consulting-services.de.

10. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
lda.bayern.de

11. Changes to this privacy policy

We reserve the right to adapt this privacy policy as required, for example in the event of changes to our website or new legal requirements. The current version published on this page applies.