Privacy Policy

This is a courtesy translation. The legally binding version is the German Datenschutzerklärung.

1. Controller

Eduard Fitz, FitzConsulting
Undinestraße 4, 12203 Berlin, Germany
Email: Show email address
Phone: +49 151 56932795

2. Principles

This website uses no cookies, no analytics or tracking services, no social media plugins and does not load any third-party content (e.g. fonts, maps or videos). I process personal data only as described below. No automated decision-making or profiling takes place.

3. Hosting

This website (fitzconsulting.de) is operated by Detalex GmbH and hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

When you visit the website, your IP address and technically necessary connection and request data are processed to deliver the requested pages. Access logs (server log files) are not stored. Processing serves to provide the website and to ensure its stability and security on the basis of Art. 6(1)(f) GDPR.

4. Contact and contact form

If you use the contact form or contact me by email or phone, I process your details to handle your enquiry. The form collects your name, email address, topic and message as well as, optionally, your organisation and phone number. I need the details marked with * to handle your enquiry; without them, an enquiry via the form is not possible.

The legal basis is Art. 6(1)(b) GDPR for contractual or pre-contractual enquiries and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering your enquiry).

Form enquiries are processed by a dedicated service on the Detalex/Hetzner infrastructure and delivered in encrypted form via the Detalex mail server to my email inbox. Form contents are not stored in website access logs or a website contact database.

Retention: I delete your enquiry once it has been fully dealt with and no further communication is expected. If your enquiry leads to an engagement, I retain the correspondence for the statutory retention periods (in particular under commercial and tax law).

To protect against automated requests, I use ALTCHA, a self-hosted proof-of-work check. The component and the verification endpoint are served by this website; no external captcha servers are contacted and no cookies are set. Challenges expire after ten minutes. Used challenge hashes are kept to prevent reuse and deleted no later than eleven minutes after issue. For rate limiting, a key that is not stored in plain text is derived from your IP address and held briefly in memory. These measures serve the secure operation of the website under Art. 6(1)(f) GDPR.

5. Email communication (Microsoft 365)

I run my email inbox on Microsoft 365, which I obtain via IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The service provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Emails you send me – including enquiries submitted via the contact form – are stored there.

Microsoft generally processes the data within the EU. However, access from the USA cannot be entirely ruled out. Microsoft is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR). A data processing agreement under Art. 28 GDPR is in place with IONOS.

6. External links

This website contains a link to my LinkedIn profile. This is a simple link; data is only transferred when you click it. LinkedIn is responsible for any data processing on its platform.

7. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

8. Your rights

Subject to the statutory provisions, you have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

An informal message to the contact details above is sufficient to exercise your rights.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

10. Last updated

Last updated: November 2026. I will update this privacy policy if the website or the legal framework changes.