Privacy Policy

Last updated: July 2026

This Privacy Policy explains how I, Jan Richter, collect, use, and protect your personal data when you visit my website or use my services.

I am committed to protecting your privacy and handling your data responsibly, in accordance with applicable EU data protection regulations (GDPR).

1. Data Controller

2. What Data I Collect

I may collect the following types of personal data:

• Email address (when you contact me)
• Name (when voluntarily provided)
• Company name and inquiry type (from the contact form)
• Message content (when you submit an inquiry)

I do not collect sensitive personal data. With your consent, I use Google Analytics 4 to collect anonymised usage statistics; analytics data is only processed after you accept it in the cookie banner. Google Analytics receives only pseudonymous, aggregate usage data — never your name, email address, or any other directly identifying information.

3. Legal Basis for Processing

I process your personal data on the following legal bases (Article 6 GDPR):

• Contract performance (Art. 6(1)(b)): When you contact me via the contact form or request a service.
• Legitimate interest (Art. 6(1)(f)): For website security and operation.
• Legal obligation (Art. 6(1)(c)): When I am legally required to retain data (e.g., tax obligations).

4. How I Collect Your Data

• When you contact me via email or the contact form
• When you submit an inquiry or booking request

5. Why I Collect Your Data

I collect and process your data to:

• Respond to inquiries and booking requests
• Provide requested audit and consulting services
• Fulfill legal obligations (e.g., invoicing)

I do not sell or rent your data to third parties.

6. Recipients and Third Parties

I only disclose your data to third parties when necessary for providing my services or when legally required. Currently, I use the following service:

• Netlify (Netlify Inc., USA): Hosting provider and processing of contact form submissions (name, email, company, message). Netlify is based in the United States.

7. International Data Transfers

Netlify, the hosting and form-processing provider, is based in the USA. Data transfers to the USA are based on the EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs) pursuant to Article 46 GDPR. If you consent to analytics, Google Analytics (Google Ireland Ltd., EU) processes usage data; Google may transfer this data to the USA under the EU-US DPF. Without consent, no analytics data is transferred.

8. Cookies

This website uses strictly necessary cookies (e.g., for your language preference) at all times. With your consent, Google Analytics 4 is additionally loaded and sets analytics cookies; if you decline, no analytics cookies are set. For more information, see my Cookie Policy.

9. Data Retention

I retain your personal data only as long as necessary for the respective purpose:

• Contact inquiries: Until the inquiry is resolved, maximum 12 months after last contact.
• Contract data: For the duration of the contract and thereafter according to legal retention periods (up to 10 years for tax documents).

10. Data Storage and Security

Your data is stored securely with the hosting provider (Netlify).

I implement appropriate technical and organizational measures to prevent unauthorized access, disclosure, or modification.

11. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate personal data (Art. 16)
• Erasure of your personal data (Art. 17)
• Restriction of processing of your personal data (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)

If processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

12. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

13. Contact

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about my data practices, please contact me: