Privacy Policy

1. Responsible party

The responsible party within the meaning of the General Data Protection Regulation (GDPR) is:

Dr. Jan-Pierre Richter
Richter Kommunikation
Yorckstr. 52
10965 Berlin
Germany
Email:

2. General information

Protecting your personal data is important to us. We process your data exclusively on the basis of applicable law (GDPR). In this privacy policy, we inform you about the most important aspects of data processing on our website.

3. Data collected on this website

a) Server log files

The provider of this website automatically collects and stores information in server log files, which your browser transmits automatically. This includes:

• Browser type and version
• Operating system used
• Referrer URL (previously visited page)
• Hostname of the accessing computer
• Time of the server request

This data cannot be attributed to specific individuals and is not merged with other data sources.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).
Retention period: 7 days, then automatically deleted.

b) Contact form

If you send us a request via the contact form, your details from the form, including the contact information you provide, will be stored by us for the purpose of processing the request and in case of follow-up questions.

Data collected: Name, email address, optional company name, message content.
Purpose: Processing your contact request and communicating with you.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or contract performance).
Retention period: Until your request is fully resolved, maximum 6 months.

The contact form uses a technically necessary session cookie to protect against form abuse (CSRF protection). This cookie contains no personal data and is automatically deleted at the end of your browser session.

To prevent abuse, when you submit the form we also store a pseudonymized check value (salted SHA-256 hash) of your IP address for a maximum of 48 hours, as well as a log of rejected or suspicious submissions (timestamp, check result, shortened message excerpt) for a maximum of 3 months. We are not able to trace the check value back to your IP address. Legal basis: Art. 6(1)(f) GDPR (protection against spam and abuse).

c) Cloudflare Turnstile (spam protection)

To protect our contact form against automated requests (spam) and abuse, we use the Cloudflare Turnstile service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether an input was made by a human or by an automated program. In doing so, Cloudflare processes technical data, in particular your IP address, browser and device characteristics, and interaction data of the visited page. This data is used exclusively to verify the input and is not used for advertising purposes or cross-site tracking. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting our website against spam and abuse). Cloudflare is certified under the EU-US Data Privacy Framework; insofar as data is transferred to the USA, an adequacy decision of the EU Commission therefore applies. Further information: Cloudflare privacy policy.

4. Self-hosted fonts

The fonts used on this website (Inter, Space Grotesk) are stored locally on our server. No connections to Google servers or other external services are established. Your browser loads the fonts directly from our server — your IP address is not transmitted to any third party.

5. SSL encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection when the browser address bar changes from http:// to https:// and a padlock icon appears in your browser bar.

When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

6. Your rights

You have the following rights with respect to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise your rights, please contact us at:

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority for Berlin is:

Berlin Commissioner for Data Protection and Freedom of Information
(Berliner Beauftragte für Datenschutz und Informationsfreiheit)
Alt-Moabit 59–61
10555 Berlin, Germany
www.datenschutz-berlin.de

7. No cookies, no tracking