Privacy Policy.

1. Privacy at a glance

General information

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in the privacy policy set out below.

Data collection on this website

Who is responsible for data collection on this website?
Data on this website is processed by the website operator. Their contact details can be found in the section “Information on the controller” in this privacy policy.

How do we collect your data?
Some data is collected because you provide it to us — for example when contacting us by email. Other data is collected automatically, or with your consent, by our IT systems when you visit the website (mainly technical data such as your browser, operating system or the time of the page view).

What do we use your data for?
Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyse how you use the site.

What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have a right to request that this data be corrected or erased. You can contact us at any time about this and about any further questions on data protection.

2. Hosting

Processing on our behalf

This website is hosted with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. It is delivered through Vercel's edge network; requests from Germany are usually served from the Frankfurt am Main location. Processing in the USA cannot be ruled out.

When you open the website, Vercel processes technically necessary connection data, in particular IP address, time of the request, the URL called up, the volume of data transferred and details of your browser and operating system. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing this website securely, reliably and with good performance.

A data processing agreement under Art. 28 GDPR is in place with Vercel. Transfers of personal data to the USA are based on the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR. Further information: https://vercel.com/legal/privacy-policy.

3. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

Information on the controller

The controller for data processing on this website is:

Sebastian Kelka Management Consulting
c/o 26Punkt2 D&I UG (haftungsbeschränkt)
Türkenstr. 26
80333 München
Germany

Email: hello@s-kelka.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Retention period

Unless a more specific retention period is stated in this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it.

Withdrawing your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

Right to object to data collection in particular cases

Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. The relevant legal basis is stated in this privacy policy for each processing activity. We rely on Art. 6(1)(f) GDPR in particular for hosting, the server log files and handling enquiries.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims (objection under Art. 21(1) GDPR).

An objection requires no particular form; an email to hello@s-kelka.com is enough.

Right to lodge a complaint with the supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. In Bavaria the competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA).

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format.

Information, correction and erasure

Within the scope of the applicable statutory provisions you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing, and where applicable a right to have that data corrected or erased.

4. Data collection on this website

Server log files

The provider of these pages automatically collects and stores information in what are known as server log files, which your browser transmits to us automatically. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website — for which the server log files must be collected.

Enquiries by email

If you contact us by email, your enquiry including all personal data arising from it (name, enquiry) is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in handling enquiries addressed to us effectively (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).

5. Plugins and tools

Contact form (Web3Forms)

We use the service Web3Forms (web3forms.com) to transmit enquiries sent via our contact form. When you complete and submit the form, the data you enter (name, company, email address, telephone number, message) is transmitted to Web3Forms and forwarded from there to us by email. Web3Forms processes the data solely in order to deliver the enquiry.

The processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in the reliable transmission of contact enquiries). A data processing agreement has been concluded with Web3Forms. The transmitted data is deleted once your enquiry has been handled. Further information can be found in the Web3Forms privacy policy: https://web3forms.com/privacy.

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It records page views, time on site and the channel that brought visitors to the site. The „Enhanced measurement“ feature adds scroll depth, clicks on outbound links, file downloads and use of the site search. In addition we send our own generate_lead event when an enquiry has been submitted successfully through the contact form; this transmits only the fact of the submission, the language of the form and the page URL, not the content you entered.

Google Analytics sets the cookies _ga and _ga_<container ID> with a lifetime of two years. The IP address is truncated before any storage and is not combined with other data. Google Signals is disabled, so there is no cross-device linking with signed-in Google accounts. Personalised advertising features are disabled as well. Retention of event and user data is limited to 14 months.

The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. We use Google Consent Mode v2: before you agree, every consent signal is set to „denied“ and the Analytics script is not loaded at all. The advertising categories (ad_storage, ad_user_data, ad_personalization) remain permanently denied. You may withdraw your consent at any time with effect for the future, using the „Cookie settings“ link in the footer. On withdrawal, the Google Analytics cookies that have been set are deleted and further transmission is stopped.

The contracting party is Google Ireland Limited; a data processing agreement under Art. 28 GDPR is in place. Processing in the USA by Google LLC cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework. Further information: https://policies.google.com/privacy.

Session analysis with Microsoft Clarity

We use Microsoft Clarity, a service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA), to understand how this website is used. Clarity records pseudonymous sessions and evaluates clicks, mouse movement and scroll depth. The result is aggregated analysis, such as heatmaps, showing us which content is read and where visitors leave the site.

On this website, Clarity is configured in „Strict“ masking mode. That means all text is masked before a recording leaves our site. Neither the content you read nor anything you type into a form field is transmitted to Microsoft. Only page structure and interactions are recorded.

Clarity stores the cookies _clck (one year) and _clsk (one day), along with information on browser, operating system, screen resolution and a truncated IP address. We permanently signal to Microsoft that there is no consent for advertising storage (ad_Storage: denied), so no advertising cookies are set.

The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Clarity is loaded only after you have agreed in the consent dialogue. Without your consent the script is not executed and no cookie is set. You may withdraw your consent at any time with effect for the future, using the „Cookie settings“ link in the footer. On withdrawal, the Clarity cookies that have been set are deleted.

Processing also takes place in the USA. Microsoft is certified under the EU-US Data Privacy Framework. Further information is available in Microsoft's privacy statement: https://privacy.microsoft.com/en-us/privacystatement.

Fonts

This website uses the fonts Inter, IBM Plex Mono and Cormorant Garamond. The fonts are stored locally on our server. No connection to servers operated by Google or other third parties is established when the website is accessed.