Data protection

This page sets no cookie, embeds no advertising or analytics and measures nothing about you — so there is no consent banner. One service sits in front: Cloudflare. Here is what actually happens when you open it.

Controller

AgilConsultants UG (haftungsbeschränkt), Höhestrasse 48, 61348 Bad Homburg, represented by Christian Wolfgang Honl. Contact: [email protected].

What is processed when you open this page

• The web server of this site writes no access log and sets no identifier. Connection data (IP address, requested address, browser data) is processed by Cloudflare, the service in front — see the next point.
• Cloudflare, Inc. (USA) sits in front: every request passes through it; it processes IP address, requested address and technical browser data. It protects the email address with a small script loaded from this domain and may ask your browser to report connection errors to Cloudflare. Legal basis Art. 6(1)(f) GDPR (secure, available operation); transfer to the USA based on the EU-US Data Privacy Framework (Cloudflare, Inc. is certified; source cloudflare.com/trust-hub/gdpr), alternatively standard contractual clauses. In doing so Cloudflare, Inc. acts as a processor under Art. 28 GDPR on the basis of Cloudflare's data processing addendum.
• Fonts, images and styles come from this domain. Apart from Cloudflare, no request of yours reaches a third party.
• The page makes one request to /data/state.json on this same domain, read-only, to refresh the figures with their date. It sends no data about you and sets no identifier.
• localStorage holds three interface preferences — reading depth and theme, and on the reference page the language. They stay in your browser, are never transmitted, and you can clear them at any time.
• There is no contact form. If you write to the e-mail address above, your message and address are processed to answer it, Art. 6 (1) (b) / (f) GDPR. The “Updates” field on the start page only opens your email program with a prepared subject and text; the site does not store the address. The mailbox runs on Microsoft 365 (Microsoft Ireland Operations Ltd.); a transfer to the USA is possible — the safeguards for it are set out in Microsoft's data processing agreement.

Your rights

Under Articles 15 to 21 GDPR you may request access, rectification, erasure, restriction, portability, and you may object to processing based on legitimate interests. You may also complain to a supervisory authority; the competent one for the address above is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.

What is not here

No tracking pixel, no advertising ID, no profiling, no automated decision. Data goes to a third country via Cloudflare, as above, and for email via the mailbox provider (see email). If any of that changes, this page changes with it.

If you engage me

In an engagement I process data as a processor under Art. 28 GDPR, governed by its own agreement. Case and client data sits in your environment — there is no customer installation yet, this is the design. When an external model is called, text leaves the machine — which providers is set in the agreement beforehand; redacted export versions exist as separate exports, a filter before every output path is not built. After the engagement data is deleted or returned, as agreed.