Privacy Policy

1. Controller

SCRM Consulting GmbH
Daimlerstraße 3
73469 Riesbürg

Email: kontakt@scrm-consulting.de
Phone: +49 1520 7550995

2. How we process your data

We process personal data only to the extent necessary to provide this website, handle enquiries or fulfil legal obligations. We have not integrated any additional analytics or marketing scripts. The hosting platform Sites provides automatic traffic statistics; see section 3 for details. We provide a contact form for enquiries; the associated processing is explained in section 8.

3. Hosting, access data and Sites statistics

This website is provided through Sites by OpenAI. The hosting platform uses Cloudflare to deliver the website and protect it against automated attacks.

When you visit the website, technically necessary data may be processed. This includes, in particular, your IP address, the date and time of access, the page visited, the volume of data transferred, the referrer, browser type and operating system. Processing is necessary to deliver the website and ensure stability and security.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website. Technical service providers may process this data as processors.

Automatic traffic statistics of the hosting platform

Sites automatically records traffic on published websites. The statistics include page views and the number of unique visitors, as well as changes over time. They provide an overview of the use of this website. We have not integrated an additional analytics script for this purpose.

This data collection is a function of the hosting platform. Closing our privacy notice does not give consent to these statistics and does not disable them. Storage of the notice's display preference is separate and is described in section 9.

4. Contacting us

If you contact us by email or phone, we process the information you provide to handle your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR.

The data is deleted once the enquiry has been fully handled, unless statutory retention obligations require otherwise.

5. External links

This website may contain links to external services. Merely visiting our pages does not transfer data to these providers. The relevant provider's privacy policy applies only when you follow an external link.

6. Who receives your data

Personal data is received only by parties that need it to fulfil the stated purposes. Where service providers process data in third countries, this occurs only in compliance with the legal requirements for international data transfers.

7. Your rights

Subject to the applicable legal requirements, you have the right of access, rectification, erasure, restriction of processing, data portability and objection to certain processing. You may withdraw any consent at any time with effect for the future.

You may also lodge a complaint with a data protection supervisory authority, in particular the authority for your place of residence, place of work or the place of the alleged infringement.

8. Contact form and FormSubmit

If you use our contact form, we process the information you enter to handle your enquiry. In the general contact form, your name, email address, message and acknowledgement of the Privacy Policy are required. For a whitepaper request, your name, email address and this acknowledgement are required; the purpose of the request is sent automatically. Other information is voluntary. Whitepaper requests are processed to send the requested document personally and do not result in a newsletter subscription.

For technical transmission, we use FormSubmit, a service provided by Devro LABS. Form data is transmitted to FormSubmit and then forwarded to us by email. Further information is available in the FormSubmit privacy notice. The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR. Our legitimate interest is the efficient handling of enquiries.

We delete the information submitted once your enquiry has been fully handled, unless statutory retention obligations require otherwise.

9. Cookies and local storage

We have not integrated any additional analytics or marketing scripts. Automatic Sites traffic statistics are described in section 3. The privacy notice provides information about hosting, statistics and technical functions; closing it does not give consent. All content is accessible without acknowledgement. The notice is not displayed automatically on the Privacy Policy or Legal Notice pages.

Technical protection through Cloudflare

The hosting platform uses Cloudflare to protect the website against automated access. This uses the security cookie __cf_bm . It contains information for detecting automated access and, according to the provider, expires after 30 minutes of inactivity. Storage serves the secure operation of the website and is based on Section 25(2), point 2, TDDDG; the associated processing of personal data is based on Article 6(1)(f) GDPR. Our legitimate interest is protection against misuse and attacks. The cookie is set by the hosting platform and cannot be disabled through this notice.

Display preference for the privacy notice

When you close the notice using "Close" or the Escape key, we store your preference to hide it in your browser for 180 days. This applies to all pages under the same website address. Simply opening the website or the information does not create this preference. Closing the notice does not give consent to analytics, advertising or other optional services.

Under the key scrm_cookie_consent_v1 we store a version number, the time of your selection and the expiry time in local storage. The preference is not transmitted to us, contains no individual user identifier and is used solely to respect your choice to hide the notice when changing pages or visiting again. Storage and retrieval serve the expressly requested display preference under Section 25(2), point 2, TDDDG. Where personal data is processed in this context, Article 6(1)(f) GDPR is the legal basis; our legitimate interest is implementing your chosen display preference.

Further page views or reopening the information do not extend the duration. After expiry, the preference is removed on the next access. Earlier valid preferences remain in place until their original expiry. If your browser blocks local storage, we try to store the preference in the same tab's session storage instead; it then ends at the latest when the tab is closed. If this is also unavailable, or if you delete website data, the notice may appear again.

All information remains accessible at any time through "Cookie & privacy information" in the footer. There, you can use "Delete preference" to remove the saved choice to hide the notice. The notice will then appear again on the next regular page view. The website remains usable at all times without acknowledgement.

10. Changes to this Privacy Policy

We update this Privacy Policy when the website, the services used or legal requirements change. Last updated: September 2026.