Information about the processing of personal data on this website.
1. Privacy at a glance
Personal data is processed only where necessary for secure website operation, handling your request or – after your consent – statistics or marketing. Google tags are not loaded before the relevant consent is given.
ControllerStemann Consulting Prof. Dr. Dietmar Stemann
HostingIONOS SE · Deutschland
Optional trackingDisabled by default
WithdrawalAny time via Cookie Settings in the footer
The website runs on infrastructure provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When the website is requested, technically necessary connection and server data is processed, in particular the requested resource, referrer, browser/device information, time and IP address. The scope and retention of technical logs depend on the specific IONOS hosting product and its configuration.
Purpose / legal basis: Secure and stable delivery, error analysis and abuse prevention; Art. 6(1)(f) GDPR. The required processing arrangement under Art. 28 GDPR applies to the hosting provider.
IONOS SiteAnalytics: Where IONOS SiteAnalytics is enabled for the selected hosting product, IONOS states that measurement is performed via pixels or log files without cookies and IP addresses are anonymized immediately. Data includes referrer, requested page/file, browser, operating system, device type and access time and is used for statistical evaluation and technical optimization of the website.
4. Contact and training inquiries
When you use the contact form, we process the contact details you enter, the selected inquiry type, the requested training where applicable and your message. Required fields are necessary to handle your inquiry.
Legal basis: Art. 6(1)(b) GDPR for pre-contractual or contractual inquiries; otherwise Art. 6(1)(f) GDPR for handling business communications. Separate marketing consent is based exclusively on Art. 6(1)(a) GDPR.
Retention: Inquiries are deleted when the purpose no longer applies and no statutory retention obligation or legitimate evidentiary interest requires further storage.
To process website inquiries, a server-side copy of the submitted information may be stored in our protected data store. In the production configuration, this local lead record is stored in encrypted form and is accessible only to authorized administrators.
For technical delivery of form and administrative emails, we use Resend, a service of Plus Five Five, Inc., United States. Email addresses, metadata and message content may be processed. Resend’s Data Processing Addendum provides, among other safeguards, the EU Standard Contractual Clauses for international transfers and participation in the EU-US Data Privacy Framework where applicable.
5. Consent management and necessary storage
Your statistics and marketing choices are stored locally in your browser so the website can respect your decision. This storage is necessary to provide the privacy-preference management you explicitly request. Your choice is requested again after no more than 180 days.
Legal basis: § 25 Abs. 2 Nr. 2 TDDDG for the necessary preference storage; non-essential technologies only after consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
6. Google Analytics / Google Tag Manager
No valid Google Analytics or Google Tag Manager ID is currently configured in this deployment. If the service is activated later, it will load only after consent and this notice must be kept up to date accordingly.
7. External links and social media
Links to LinkedIn, X, partners or project pages connect to the respective third party only when you actively follow the link. No social media feeds or tracking pixels from these platforms are automatically embedded on this website.
8. Your rights
Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time for the future. You also have the right to lodge a complaint with a data-protection supervisory authority.
We apply appropriate technical and organizational measures to protect personal data, including HTTPS, restricted administrative access, secure session cookies, rate limiting and restrictive security settings. This privacy notice is updated when services or legal requirements change.