DeKaO Consult ← Back to Website 🇩🇪

Privacy Policy

Pursuant to GDPR & BDSG

Last updated: July 2026

1. Data Controller

DeKaO Consult GmbH
Kriegstraße 31
68794 Oberhausen-Rheinhausen, Germany
Germany

Managing Director: Karim-Oliver Darvich
Register Court: Mannheim Local Court, HRB 758451
Email: (email address is loading …)
Contact form: www.dekao-consult.de/anfrage.html

2. Hosting

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit our website, our hosting provider automatically processes information in what are known as server log files. These include, in particular:

This processing is carried out to ensure the secure, stable, and reliable operation of the website. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after 7 days at the latest, unless retention is required for security reasons. The data is not combined with other data sources. STRATO acts as a processor pursuant to Art. 28 GDPR.

3. Fonts

The fonts used on this website (Montserrat) are hosted locally on our server. No connection is made to external third-party servers, in particular not to Google servers. Your IP address is not transmitted to any third party in this context.

4. Contact Form

If you send us an inquiry via the contact form on our website, the data you enter (name, email address, company, message) is processed in order to handle your inquiry.

Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in processing inquiries).

The data is deleted once processing is complete and no statutory retention obligations apply, but no later than after 3 years, unless statutory retention obligations exist or the data is still needed to defend against or assert legal claims.

4.1 Transmission via WhatsApp

If you use our contact form and then select the "Contact via WhatsApp" button, the data you entered is passed to the WhatsApp application on your device as a pre-filled message.

The data is only transmitted to us once you actively send the message within WhatsApp.

WhatsApp is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When using WhatsApp, personal data may be processed by Meta Platforms Inc., USA. This may involve a transfer of data to the USA. Meta Platforms Inc. is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Further information: whatsapp.com/legal/privacy-policy.

Use of WhatsApp is voluntary and takes place solely on your own initiative. The legal basis is therefore your voluntary decision to make contact via this channel (Art. 6(1)(f) GDPR – legitimate interest in offering this low-threshold contact option, corresponding to your own active choice of this channel).

5. Cookies and Google Analytics

5.1 Technically Necessary Cookies

Some of the cookies we use are technically essential, in particular to store your cookie preference itself. No consent is required for this category. Legal basis: Art. 6(1)(f) GDPR in conjunction with Section 25(2) No. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG).

5.2 Google Analytics 4 (only with consent)

Beyond the technically necessary cookies, and only after you have given your explicit consent via our cookie banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to collect and evaluate information about the use of this website.

Until you give your consent, Google Analytics runs by default in "denied" state (Google Consent Mode), and no data processing usable for analytics purposes takes place. Only after clicking "Accept" in the cookie banner is the analytics script loaded. IP anonymization is additionally enabled.

The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. Google is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

Legal basis: Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG (consent).

Retention period: User- and event-related data stored by Google is automatically deleted in accordance with the retention period configured in our Google Analytics account.

You can withdraw your consent at any time with effect for the future: Change cookie settings.

Further information on data protection at Google can be found at: policies.google.com/privacy

6. Transfers to Third Countries

The use of certain services on this website may result in the transfer of personal data to third countries (in particular the USA):

Both providers are certified under the EU-U.S. Data Privacy Framework, so that the transfer takes place on the basis of an adequacy decision by the European Commission (Art. 45 GDPR).

7. Your Rights as a Data Subject

You have the following rights:

To exercise your rights, please contact us by email or via our Contact form.

8. Competent Supervisory Authority

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

9. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. Data transmission between your device and our server is encrypted using TLS.

10. Currency of this Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services. The current version can always be found on this website. Last updated: July 2026.