This is a translation for convenience. The German version is authoritative.

1. Controller

The controller under the GDPR is Kilg Consulting GbR, Musterstraße 1, 80331 Munich, Germany, hallo@kilg.de. We are not required to appoint a data protection officer. Please address any privacy questions to the contact above.

2. Hosting and server log files

This site is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, in German data centres. A data processing agreement under Art. 28 GDPR is in place. When you open a page, access data is written to server log files: IP address, date and time, the file requested, volume transferred, browser type and version, operating system and, where applicable, the referring page.

Legal basis is Art. 6(1)(f) GDPR — our legitimate interest in secure, stable operation. Log files are deleted after 7 days at the latest, unless they are needed longer to investigate a specific security incident.

3. Contact form and email

If you write to us through the form, we process what you enter: name, email address, optionally organisation and topic, and your message. The data is sent to our server in Germany and delivered to our mailbox from there. No external form service is involved.

To block automated submissions we store a hashed value derived from your IP address for at most one hour. The IP address itself is not stored and cannot be reconstructed from that value.

Legal basis is Art. 6(1)(b) GDPR where the enquiry relates to entering into a contract, otherwise Art. 6(1)(f) GDPR. We delete your enquiry once it is settled and no statutory retention obligations apply. If it leads to an engagement, commercial and tax retention periods of 6 and 10 years apply. Your details are not passed to third parties and not used for advertising.

4. Cookies and tracking

This site sets no analytics, advertising or profiling cookies. There is no reach measurement, no tracking pixels, no advertising networks and no social media plugins. A consent banner is therefore not required.

5. Fonts and external content

All fonts are served from our own server. There is no connection to Google Fonts or any other font service. No data is transmitted to third parties when you open this site. External links, for example to LinkedIn or the ARD audio library, are only called once you actively click them.

6. Encryption

This site is served exclusively over an encrypted TLS connection.

7. No automated decision-making

There is no automated decision-making including profiling under Art. 22 GDPR. The content of this site is not processed by AI systems; enquiries through the form are read and answered by us personally.

8. Transfers to third countries

No personal data is transferred to countries outside the European Union or the European Economic Area in connection with this website.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR).

Right to object under Art. 21 GDPR: where we process data on the basis of a legitimate interest, you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

To exercise your rights, contact hallo@kilg.de.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, either in the German state where we are based or where you habitually reside.

Last updated: July 2026