Controller
Overview
This website is operated as a personal advisory practice. I take the protection of your personal data seriously. This policy explains what data is collected when you visit robertdaniel.consulting and how it is used.
Hosting
This website is hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). When you visit this site, Netlify may collect server log data including your IP address, browser type, referring page, and time of access. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in secure and efficient website operation). Netlify's privacy policy: netlify.com/privacy
As Netlify is based in the USA, data may be transferred to the United States. Netlify participates in the EU-U.S. Data Privacy Framework.
Analytics
This website uses Umami, a privacy-focused web analytics service, to understand aggregate visitor trends (such as page views and referring sources). Umami is configured to operate without cookies and does not collect or store any personal data. IP addresses are not retained, no cross-site tracking takes place, and no information is shared with advertising networks. Because no personal data is processed and no cookies are set, no consent banner is required. This analytics use is based on Art. 6(1)(f) GDPR (legitimate interest in understanding and improving website performance). More information: umami.is/privacy
What this website does not do
- No cookies are set (no cookie banner required)
- No invasive tracking tools are used — only privacy-respecting, cookieless analytics (Umami), with no Google Analytics or comparable cross-site trackers
- No contact forms collect data
- No newsletter signups are offered
- No user accounts exist
- No advertising networks are connected
Contact by email
If you contact me by email, your message, email address, and any information you provide will be stored for the purpose of processing your inquiry. This data is processed on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Your data will not be shared with third parties. Emails are retained for the duration of the business relationship and deleted thereafter, unless legal retention obligations apply.
This website contains a link to my LinkedIn profile. Clicking this link takes you to linkedin.com, which is operated by LinkedIn Ireland Unlimited Company. I have no control over the data LinkedIn collects. Please refer to LinkedIn's privacy policy: linkedin.com/legal/privacy-policy
Your rights
Under the GDPR, you have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectify inaccurate data (Art. 16 GDPR)
- Erase your data (Art. 17 GDPR)
- Restrict processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR)
The competent supervisory authority is:
Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg, Germany
datenschutz-hamburg.de
Technical and organisational measures (TOMs)
A summary of the technical and organisational measures I maintain to protect personal data in accordance with Art. 32 GDPR is available on request and as a downloadable document:
Changes to this policy
This policy may be updated to reflect changes in the legal framework or website functionality. The current version is always available at this URL.