1. Controllers
The controllers for the processing of personal data on this website are:
You&Company Consulting GmbH, Kurfürstendamm 66, 10707 Berlin, Germany
YOU & COMPANY GmbH, Kurfürstendamm 66, 10707 Berlin, Germany
You can reach us via our contact form or the contact details stated in our Legal Notice.
2. Hosting and server log data
Our hosting provider for youandcompany.de is Alfahosting GmbH, Edmund-von-Lippmann-Strasse 13-15, 06112 Halle (Saale), Germany. The preview website on vercel.app is hosted by Vercel Inc., United States. On this preview, contact-form requests are processed by a Vercel server function configured for Frankfurt, Germany.
When you visit this website, technical access data are processed automatically: your IP address, the pages accessed, the time of access and browser information. The purpose is the provision, security and stability of the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the secure and uninterrupted operation of the website. Log data are deleted as soon as they are no longer required for these purposes.
To protect contact forms against automated misuse, we temporarily process cryptographically hashed IP addresses and technical form tokens. Application-level abuse-prevention counters expire after one hour. They are not used for analytics or marketing.
3. Cookies and content
This website uses only cookies that are technically necessary for its operation. The legal basis for storing information on your device or accessing information already stored there is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG); where personal data are processed, the legal basis is Article 6(1)(f) GDPR. We do not use analytics, tracking or marketing cookies.
Images and videos shown on this website are delivered from our own web space. We do not embed third-party video players or advertising content. Our hosting providers process the technical access data described in Section 2.
4. Contact form and email
When you contact us through the contact form or by email, we process the information you provide, including your name, email address and the content of your message. We use this information solely to handle your inquiry and any follow-up questions.
The legal basis is Art. 6 (1) (b) GDPR where your inquiry relates to a contract or its preparation. In all other cases, the legal basis is Art. 6 (1) (f) GDPR, based on our legitimate interest in responding to inquiries.
Providing your information is voluntary. However, without the information required to process your inquiry, we may not be able to respond to you.
We delete inquiries once they have been fully dealt with, unless statutory retention obligations or a legitimate interest require us to retain the information for a longer period.
Your rights are set out in Section 7.
5. Recipients and transfers outside the EEA
Personal data are disclosed only where this is necessary for the purposes described above or where disclosure is required by law. Recipients are Alfahosting GmbH as our hosting provider, Vercel Inc. (United States) for hosting and processing contact-form requests on this website, Microsoft Ireland Operations Limited (Ireland) as the provider of our email infrastructure and contact-form delivery, and public authorities where disclosure is required by law.
Alfahosting hosting takes place in Germany. This website uses Vercel's global delivery network; contact-form server processing is configured for Germany. Processing by our providers may involve transfers outside the European Economic Area. Microsoft's transfers are based on the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. Vercel's Data Processing Addendum includes Standard Contractual Clauses for applicable international transfers. Further information on the safeguards applied is available on request via the contact details stated in our Legal Notice.
6. Retention
We retain personal data for as long as necessary for the purpose concerned, and thereafter for as long as statutory retention obligations under German commercial and tax law apply or the data are required to establish, exercise or defend legal claims.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you may withdraw any consent you have given with effect for the future. Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.
You may also lodge a complaint with a data protection supervisory authority; for us this is the Berlin Commissioner for Data Protection and Freedom of Information. Please address any such request to us via the contact details stated in our Legal Notice.