Privacy Policy

General Information
We take the protection of your personal data very seriously. We collect and process personal data only to the extent necessary to provide a functional website. Your data will be treated confidentially and in accordance with the applicable data protection regulations (in particular the EU General Data Protection Regulation (GDPR) and the German Telecommunications and Telemedia Data Protection Act (TTDSG)) as well as this privacy policy.
This privacy policy informs you about which data we collect when you visit our website, how we use it, and what rights you have as a data subject.
The use of our website is generally possible without providing personal data. Data is not shared with third parties unless required by law.

Data Controller
The data controller within the meaning of Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:
Mathias Nehm
indecon consulting GmbH
Kurfürstendamm 57
10707 Berlin, Germany
Phone: +49-30-817 2069 20
Email: info@indecon.de

Access Data and Server Log Files
When you visit our website, we automatically collect the following data transmitted by your browser to our server:

IP address (stored in anonymized, truncated form (e.g., by shortening the last octet) so that no personal reference is possible)
Date and time of request
Accessed page/file
Amount of data transferred
Referrer URL (previously visited page)
Message about successful retrieval
Browser type and version
Operating system

This data does not allow any conclusions about your identity. It is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) to ensure the stable operation of the website and for statistical purposes. This data is not combined with other data sources.

Hosting
Our website is hosted by an external service provider (hosting provider). The personal data processed in this context (e.g., log files) is stored on the provider’s servers. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.

Data Transfers to Third Countries
No personal data is transferred to countries outside the European Union (EU) or the European Economic Area (EEA).

SSL/TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the address line of the browser (‘https://’) and the lock symbol in your browser bar.

Cookies
Our website uses functional and marketing cookies. Functional cookies enable basic website functions, such as saving your cookie preferences. Marketing cookies are used solely to display embedded third-party content, such as Google Maps, which requires user consent under GDPR.

These cookies are managed using the ‘Complianz | GDPR/CCPA Cookie Consent’ plugin in accordance with its categorization.

We do not use analytics tools or other marketing technologies that process personal data (e.g., Google Analytics, social media plugins).

Legal Basis:
Processing is based on Section 25(2)(2) TTDSG in conjunction with Art. 6(1)(f) GDPR (legitimate interest in the secure provision of the website).Cookies used:

Cookie Name	Purpose	Duration	Provider
cmplz_banner-status	Stores the status of the cookie banner.	30 days	Complianz
cmplz_consented_services	Saves which services the user has consented to.	30 days	Complianz
cmplz_functional	Stores consent for functional cookies.	30 days	Complianz
cmplz_marketing	Stores consent for marketing cookies.	30 days	Complianz
cmplz_policy_id	Records the accepted cookie policy ID.	30 days	Complianz
cmplz_preferences	Stores consent for preference cookies.	30 days	Complianz
cmplz_statistics	Stores consent for statistical cookies.	30 days	Complianz
pll_language	Stores the user’s language preference.	30 days	Polylang

Google Maps
Our website uses the Google Maps service via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.To enable the functionality of Google Maps, it may be necessary to process your IP address. This information is typically transmitted to a Google server in the United States and stored there. The use of Google Maps serves to provide an attractive presentation of our online offerings and to make it easier to locate the places we have indicated on the website.The legal basis for processing your data is your consent in accordance with Art. 6 (1) lit. a GDPR, provided you have given it via our consent management tool. If personal data is transferred to the United States, this is done on the basis of the EU-U.S. Data Privacy Framework, or, where applicable, on the basis of your explicit consent pursuant to Art. 49 (1) lit. a GDPR.Google Maps will be loaded and displayed only after you have given explicit consent. Until then, no connection to Google’s servers will be established.Note on Data Linking by Google.Please note that when using Google Maps, Google may collect personal data such as your IP address and link it with other Google services, especially if you are logged into a Google account or have previously accepted Google cookies. Further information on how Google handles user data can be found in Google’s Privacy Policy:???? https://www.policies.google.com/privacy/

Contact
If you contact us via email, we will process the information you provide (name, email address, content of the message) to handle your inquiry (Art. 6(1)(b) GDPR). Data will not be shared without your consent. Your data will be deleted after your request has been fully processed, unless legal retention obligations apply (e.g., tax or commercial law).Please note that unencrypted emails may not be a secure form of communication.

Your Rights as a Data Subject
Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to object (Art. 21 GDPR)
Right to data portability (Art. 20 GDPR)

To exercise your rights, please contact the controller named above.

Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You may contact the authority at your place of residence or the authority responsible for our company:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
https://www.datenschutz-berlin.de
You may save or print this privacy policy at any time.

Amendments to this Privacy Policy
We reserve the right to modify this privacy policy occasionally so that it always complies with current legal requirements. The updated version will apply to your next visit.

Effective: July 2025