Privacy Policy
Last updated: October 2026
We take the protection of your personal data seriously. Below we inform you, pursuant to Art. 13 GDPR, which data is processed when you visit this website. In short: this website uses no tracking or marketing cookies, and therefore requires no cookie banner. For audience measurement we use only a cookieless, anonymous method (see section 8). The German version is authoritative.
1. Controller
The controller for the data processing on this website is:
DAWIconsulting, owner: Ralph Daniel Wirtz, Zum Kalkofen 1-3, 53844 Troisdorf, Germany.
Email: kontakt@dawi.consulting. Further details can be found in the imprint.
2. Data protection officer
We are not legally required to appoint a data protection officer (Art. 37 GDPR). For data-protection enquiries, please contact the address above.
3. General information and legal bases
We process personal data only where necessary. The legal bases are in particular Art. 6 (1) (b) GDPR (contract or pre-contractual enquiry) and Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). The principle of data minimisation applies.
4. Hosting and server log files (Vercel)
This website is delivered via the Edge Network of Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA), which acts as our processor (Art. 28 GDPR). Server-side processing (including the contact form) is pinned to the Frankfurt am Main region, so data is processed primarily within the European Union.
When the website is accessed, server log files transmitted by your browser are automatically collected: IP address, date and time of access, the requested address (URL), the previously visited page (referrer) and browser and operating-system information (user agent). The purpose is the technical operation, security and stability of the website. The legal basis is Art. 6 (1) (f) GDPR.
As the provider Vercel Inc. is based in the USA, access from the USA can nonetheless not be entirely ruled out. Any such transfer to the USA is safeguarded by the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR) and additionally by EU standard contractual clauses (Art. 46 (2) (c) GDPR).
5. Contact form
If you contact us via the contact/enquiry form, we process the data you provide: name, email address, phone number (optional, if provided), company and your details about the project (including type of project, budget, time frame, free text) and the chosen language.
The purpose is to process your enquiry and to initiate a possible collaboration. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (interest in communicating with prospective clients).
To send the enquiry as an email we use the service Resend (Resend, Inc., USA) as a processor. The transfer to the USA is safeguarded by the EU-US Data Privacy Framework and additional EU standard contractual clauses.
If you write to us via the WhatsApp link instead, WhatsApp opens (WhatsApp Ireland Ltd. / Meta Platforms, USA). Nothing is transmitted from this website at that moment. Only when you open the chat and send the message does WhatsApp process your phone number and the message text. The legal basis is Art. 6 (1) (b) GDPR.
6. Fonts (self-hosted)
We embed fonts (including “Inter”, “Bricolage Grotesque”, “Instrument Serif”) locally. They are downloaded at build time and served exclusively from our own server. When the page is loaded there is no connection to Google servers; in particular, your IP address is not transmitted to Google.
7. Local storage, no cookies
This website uses no cookies. Only a technically necessary entry in your browser’s session storage (“dawi_preloaded”) controls the one-time intro animation per session. This entry contains no personal data and is not used for analysis or tracking.
Access to it is strictly necessary under § 25 (2) no. 2 TDDDG and requires no consent. A cookie or consent banner is therefore not required.
8. Audience measurement (cookieless)
For statistical analysis of website usage we use Vercel Web Analytics and Vercel Speed Insights (Vercel Inc., USA). These services work without cookies and without recognition identifiers: no cookies are set and no data is permanently stored on or read from your device. Only anonymous/aggregated usage data is collected (e.g. pages viewed, referrer, anonymised device category, approximate region, performance metrics). No cross-device tracking or identification of individuals takes place.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in privacy-friendly audience measurement). As no access to information on your device within the meaning of § 25 TDDDG takes place, no consent and no cookie banner is required. The transfer to Vercel (USA) is safeguarded by the EU-US Data Privacy Framework and EU standard contractual clauses (see section 10).
Otherwise we deliberately do without classic tracking, advertising networks, social-media plugins, embedded maps or videos and reCAPTCHA.
9. Recipients / processors
- Vercel Inc. (USA) — hosting, delivery of the website and cookieless audience measurement (Web Analytics / Speed Insights)
- Resend, Inc. (USA) — sending the emails triggered by the contact form
10. Transfer to third countries (USA)
The service providers named above are based in the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 GDPR); both providers are certified under the framework. In addition, EU standard contractual clauses apply (Art. 46 (2) (c) GDPR). Despite these safeguards, a residual risk of access by US authorities cannot be entirely ruled out for transfers to the USA.
11. Storage period
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. Server log files are stored only briefly and deleted automatically once they are no longer needed for the security and stability of operations. Enquiries sent via the contact form are deleted once they have been conclusively processed and no statutory retention obligations apply.
12. Your rights
You have the following rights regarding your personal data:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interest (Art. 21 GDPR)
13. Right to lodge a complaint
You have the right to lodge a complaint with a data-protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
14. No automated decision-making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.