Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data means all information that can be used to identify you personally.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Verena Schramm, Schmerbachstr. 39, 53804 Much, Germany, E-Mail: verena@schrammadvisory.com.
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When you visit our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
Website visited
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable, in anonymized form)
Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser bar.
3) Hosting & Content Delivery Network
To host our website and display its content, we use a provider that provides its services either directly or through selected subcontractors exclusively on servers located within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement (DPA) with the provider to ensure the protection of our visitors’ data and to prohibit unauthorized disclosure to third parties.
4) Contact
When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected in each case is evident from the respective contact form. This data is used solely for the purpose of responding to your inquiry and the related technical administration.
The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
Your data will be deleted once your inquiry has been fully processed, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided there are no legal retention obligations.
5) Data Subject Rights
5.1 Under applicable data protection law, you have the following rights regarding the processing of your personal data:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to notification (Art. 19 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
5.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS, YOU HAVE THE RIGHT, AT ANY TIME AND FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.
6) Duration of Storage of Personal Data
The duration of storage of personal data is determined based on the respective legal basis, processing purpose, and — if applicable — statutory retention periods (e.g., commercial or tax retention requirements).
When processing is based on your express consent under Art. 6(1)(a) GDPR, the data will be stored until you withdraw your consent.
If statutory retention periods apply to data processed under Art. 6(1)(b) GDPR (contractual or pre-contractual obligations), such data will be routinely deleted after the retention period expires, provided they are no longer required for contract fulfillment or initiation and there is no legitimate interest in continued storage.
For processing based on Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
For data processed for direct marketing purposes under Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(2) GDPR.
Unless otherwise stated in this Privacy Policy, personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.
Copyright Notice:
This Privacy Policy was created by the specialized attorneys of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de).
Status: November 17, 2025