Privacy Policy
As of April 2025
1. Scope
This Privacy Policy applies to the website www.btf-consulting.com and all subpages.
2. General
This policy describes what personal data is collected when you visit our website and how it is used. Personal data includes information such as name, address, email address, and usage behavior.
3. Controller
The controller for data processing pursuant to the GDPR and national data protection laws is BTF Consulting GmbH, Grete-Zabe-Weg 19, 22081 Hamburg.
Phone: +49 (0)162 / 532 6907
Email: info@btf-consulting.com
4. Definitions
- Browser data: Automatically transmitted data such as IP address, date and time of visit, pages visited, access status, referrer URL, operating system, browser type and version.
- Cookie: A text file stored on your device that saves certain information.
- Third country: A state outside the EU or EEA.
- Voluntary data: Non-mandatory data that facilitates processing.
- Contact and inquiry data: Data provided when contacting us by email or otherwise.
- Log file: A file on a web server that records browser data.
- Usage data: Automatically collected data about how our website is used.
5. Hosting
Our website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit our website, information (browser data, IP address, time of access) is automatically collected by Vercel as our hosting provider. This processing is based on Art. 6(1)(f) GDPR, as the use of a reliable hosting provider is in our legitimate interest for the secure and efficient provision of our website.
Vercel may process data outside the EU/EEA. The transfer is based on standard contractual clauses (Art. 46(2)(c) GDPR) and the EU-U.S. Data Privacy Framework. More information: vercel.com/legal/privacy-policy
6. Contact and Inquiry Data
6.1 Processing: We process your contact and inquiry data to respond to your inquiries pursuant to Art. 6(1)(a) and (b) GDPR, to the extent necessary.
6.2 Deletion: Your contact and inquiry data will be deleted after your inquiry has been fully processed, unless legal requirements mandate further retention or you have explicitly consented to longer storage.
7. Collection, Processing, and Use of Personal Data
7.1 Browser Data
7.1.1 Collection: Each time you visit our website, browser data is collected and not linked to other personal data.
7.1.2 Use: This data is used to display the website and ensure stability and security pursuant to Art. 6(1)(f) GDPR, including detection and defense against disruptions and attacks.
7.1.3 Storage: The IP address is stored only during the use of the website and subsequently anonymized or deleted. Personal data is stored only as long as necessary for the respective processing purposes or as required by statutory retention periods.
7.2 Contact
When you contact us, we store your information to process the inquiry and for any follow-up questions. This processing is based on Art. 6(1)(b) GDPR.
8. Use of Cookies
Our website uses cookies to analyze and personalize usage. Specifically, we use session cookies to enable website functionality, and tracking cookies to analyze your usage behavior and improve our offering.
Cookies are small text files stored on your device. You can prevent the installation of cookies through appropriate browser settings. Please note that disabling cookies may prevent some features of our website from functioning fully. Processing is based on Art. 6(1)(f) GDPR.
9. Analytics
We use Vercel Web Analytics to analyze website usage. Vercel Web Analytics collects anonymized usage data without cookies and without storing personal data. No individual visitors are identified. Processing is based on Art. 6(1)(f) GDPR.
10. Disclosure to Third Parties
Your personal data is only shared with service providers who support us in providing our services, or when you have explicitly consented. We currently use the following service providers:
- Vercel Inc. (Hosting and analytics, USA) — Data processing based on standard contractual clauses and the EU-U.S. Data Privacy Framework.
No disclosure for other purposes takes place.
11. Data Subject Rights
You have the right to obtain information about the personal data we store. You may also request rectification, deletion, or restriction of processing of your personal data, as well as data portability. You may withdraw your consent to the processing of personal data at any time. To exercise your rights, please contact us at the address above.
12. Data Security
We implement technical and organizational measures to protect your data against accidental or unlawful deletion, alteration, loss, unauthorized access, or unauthorized disclosure. Data is transmitted via an SSL/TLS-encrypted connection.
13. Updates to this Privacy Policy
This Privacy Policy is valid from April 2025. We reserve the right to update it as needed to improve data protection or comply with changed legal requirements.
14. Data Transfers to Third Countries
Your personal data may be transferred to countries outside the EU/EEA as part of hosting by Vercel Inc. (USA) or when necessary for the provision of our services or with your consent. We comply with the legal requirements of Art. 44 et seq. GDPR.
For transfers of personal data to third countries, we ensure adequate protection through appropriate measures such as standard contractual clauses or adequacy decisions.
15. Contact
For questions or concerns about data protection or the processing of your personal data, please contact:
BTF Consulting GmbH
Grete-Zabe-Weg 19
22081 Hamburg
Germany
Email: info@btf-consulting.com
If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with the competent supervisory authority:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
Email: mailbox@datenschutz.hamburg.de
16. Your Rights
16.1 Withdrawal: You may withdraw your consent to the processing of your personal data at any time with effect for the future.
16.2 Right to Object: You have the right, on grounds relating to your particular situation, to object to the processing of your personal data where it is based on Art. 6(1)(e) or (f) GDPR. An objection to direct marketing is possible at any time.
16.3 Right to Contest: In the case of automated decisions, you have the right to human intervention and to contest the decision.
16.4 Right to Complain: You may lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.