Skip to content

Growth, executed.

Get in touch

Beck Consulting

Privacy

1. At a glance

We take the protection of your personal data seriously and have built this website to process as little data as possible:

  • We use the web analytics service Google Analytics only with your consent: until you click “Accept” in the cookie banner, nothing is measured, no analytics cookie is set and no connection to Google is established (section 5). The website uses no advertising services.
  • Fonts, images, scripts and stylesheets are delivered from our own web space. Without your consent, simply viewing the pages does not establish a connection to any other provider.
  • We receive personal data only if you send it to us yourself, via the contact form or by e-mail (sections 9 and 10). A message sent via the contact form is delivered to us as an e-mail and additionally kept in the website’s database for at most 180 days, so that no enquiry is lost; after that it is deleted automatically.
  • Technical data that arises automatically (server log files) is used exclusively for the security and operation of the website.
  • Without your consent, the website stores only technical information: your choice in the cookie banner, kept in your own browser (section 6), and a preview cookie that exists only while the website is in maintenance mode and only for visitors who open a personal preview link (section 7).

The following sections explain what this means in detail. The legal basis for everything described here is the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Controller

The controller responsible for data processing on this website is:

Beck Consulting GmbH
represented by the managing director Marco Beck
Am Brand 41
55116 Mainz
Germany
E-mail: marco@beckconsulting.eu

If you have questions about data protection or wish to exercise one of your rights, the easiest way is to send us an e-mail. No particular form is required.

Beck Consulting GmbH is not required to appoint a data protection officer (§ 38 BDSG).

3. Your rights

With regard to your personal data you have the following rights against us:

  • Access (Art. 15 GDPR): you can find out which data we have stored about you, where it comes from, what we use it for and to whom we may have passed it on.
  • Rectification (Art. 16 GDPR): we correct inaccurate data and complete incomplete data.
  • Erasure (Art. 17 GDPR): you can ask us to delete your data unless a statutory retention obligation prevents this.
  • Restriction of processing (Art. 18 GDPR): in certain cases, for example while we verify the accuracy of your data, you can ask us to store your data but not to use it further.
  • Data portability (Art. 20 GDPR): data that you have provided to us on the basis of a contract or of your consent will be given to you on request in a common, machine-readable format.
  • Objection (Art. 21 GDPR): where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing.
  • Withdrawal of consent (Art. 7 (3) GDPR): where processing is based on your consent, you may withdraw it at any time with effect for the future. Processing carried out before the withdrawal remains lawful.

An informal message to the contact details given in section 2 is sufficient to exercise your rights.

Right to lodge a complaint with a supervisory authority

If you believe that we are not processing your data lawfully, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz
Germany
Telephone: +49 6131 8920-0
E-mail: poststelle@datenschutz.rlp.de
Website: www.datenschutz.rlp.de

4. Hosting and server log files

This website is hosted by webhoster.de AG, Zum Haunert 22, 59519 Möhnesee, Germany, on servers located in Germany. All data that arises on this website is processed on those servers. We have concluded a data processing agreement with the hosting provider pursuant to Art. 28 GDPR; the provider may process the data only on our instructions and only for the operation of the website. The hosting provider does not transfer any data to countries outside the European Union or the European Economic Area.

Each time a page is requested, the web server automatically records technical information in so-called log files:

  • the IP address of the requesting device,
  • date and time of the request,
  • the page or file requested (URL) and the HTTP status code,
  • the amount of data transferred,
  • the referring page, if your browser transmits it,
  • browser type and operating system (user agent).

This data is not merged with other data and is not used to identify you personally. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR), for example to detect attacks or malfunctions. The log files are deleted automatically after 14 days at the latest, unless an incident requires us to retain individual entries for a longer period as evidence.

5. Web analytics with Google Analytics (only with your consent)

If you consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to understand how visitors use this website and to improve it. Without your consent, Google Analytics is not loaded: no request is sent to Google and no analytics cookie is set.

What is processed: the pages you view and how long you stay, the website you came from, interactions such as scrolling and clicks on links to other websites, the type of device, operating system and browser, screen size, language settings and your approximate location (country, region, city). Google assigns your browser a random identifier for this purpose. We receive only statistics and cannot identify you from them; we do not use a user ID and do not merge the data with other data. Google uses your IP address only to determine your approximate location; according to Google, IP addresses are not logged or stored in Google Analytics 4.

Cookies: after your consent, Google Analytics stores two cookies in your browser for our domain: _ga (distinguishes visitors) and _ga_<ID> (keeps the state of the current visit). Both are valid for up to two years unless you withdraw your consent or delete them earlier.

No advertising: Google signals, advertising features and the personalisation of advertising are switched off. The data is not used for advertising and is not linked to Google Ads.

Legal basis: your consent for storing and reading the cookies on your device (§ 25 (1) TDDDG) and for the processing of the data (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer of every page or via the link in section 6; the measurement then stops and the analytics cookies are deleted from your browser. Processing carried out before the withdrawal remains lawful.

Processor and transfer to third countries: Google processes the data on our behalf; we have concluded a data processing agreement with Google (Art. 28 GDPR). Data may also be processed by Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR); in addition, Google has agreed to the EU standard contractual clauses.

Storage period: Google Analytics keeps data linked to the identifier for two months and then deletes it automatically; statistics without any identifier may be kept longer.

Further information can be found in Google’s privacy policy at policies.google.com/privacy and at policies.google.com/technologies/partner-sites.

Apart from Google Analytics, we do not use any other audience measurement tools, advertising networks, social media plug-ins, newsletters, chat widgets or comparable services. No automated decision-making within the meaning of Art. 22 GDPR takes place.

6. Cookie banner

Before Google Analytics is loaded, the website asks for your consent in a banner at the bottom of the page. “Accept” and “Decline” are equally available. The banner is part of this website itself; it loads nothing from third parties.

Your choice is stored in the local storage of your browser under the name bc_einwilligung. The entry contains only your decision, the version of the consent text and the time of your choice. It is not transmitted to our server or to anyone else, and we do not keep a consent log. After 180 days the banner asks again. If your browser sends a Global Privacy Control signal, we treat it as a refusal and do not show the banner; you can still give your consent via “Cookie settings”.

Storing your choice is strictly necessary to provide the consent function that the law requires of us (§ 25 (2) no. 2 TDDDG). The legal basis for processing the data it contains is our legal obligation to be able to demonstrate consent (Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR) and our legitimate interest in operating the website in compliance with the law (Art. 6 (1) (f) GDPR). You can change your choice at any time via the link below or via “Cookie settings” in the footer of every page; deleting the website data in your browser has the same effect as not having chosen yet.

Cookie settings

7. Technical preview cookie during maintenance mode

While the website is in maintenance mode, visitors see a short maintenance notice instead of the full page. Selected persons, for example the client and the agency during the development of the website, receive a personal preview link. Opening that link stores a cookie named bc_vorschau in the browser. The cookie contains a random character string that unlocks the preview; it does not contain any personal data and is not used for any other purpose. It is valid for 30 days, is transmitted only to our own server (HttpOnly, SameSite) and can be deleted at any time via the browser settings.

The cookie is strictly necessary to provide the preview that the visitor has expressly requested by opening the link (§ 25 (2) no. 2 TDDDG). The legal basis for the associated processing is our legitimate interest in reviewing the website before publication (Art. 6 (1) (f) GDPR). Visitors who do not open a preview link do not receive this cookie. Once the website is live, no preview links are in circulation and the cookie is no longer set.

8. Fonts, images and scripts from our own server

All fonts (Outfit, licensed under the SIL Open Font License), images, stylesheets and program files of this website are delivered from our own web space. We do not embed content from Google Fonts, YouTube, Vimeo, content delivery networks or any other external servers. The only exception is Google Analytics, which is loaded from Google’s servers only after your consent (section 5). Without that consent, no data is transmitted to third parties when you view the pages.

9. Contact form

You can send us a message via the contact form on the start page. We process the data you enter there – your name, your e-mail address and the text of your message – together with the date and time of sending, in order to handle your enquiry and any follow-up questions. The message is delivered to us as an e-mail; your e-mail address is set as the reply address. The form is provided by the WordPress plugins Contact Form 7 and Flamingo, which run on our own web space – no data is passed to the providers of these plugins. The form does not set any cookies.

Legal basis: Art. 6 (1) (b) GDPR where your enquiry concerns a possible mandate, an existing engagement or another contractual relationship; in all other cases our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR).

Storage period: in addition to the e-mail, the message – your name, your e-mail address, the text, the date and time of sending and the page it was sent from – is stored in the database of the website, so that no enquiry is lost if an e-mail does not arrive. Your IP address and browser details are not stored with it. The record is deleted automatically after 180 days at the latest. The e-mail itself is handled as described in section 10.

Protection against misuse: the form uses no external service and no CAPTCHA. It contains a hidden field that only automated programs fill in and limits the number of messages that can be sent from one internet connection within a short period. For this limit the website stores, for at most ten minutes, a cryptographic hash (checksum) of the IP address of the sending connection together with a counter – not the IP address itself, and not linked to your message. Messages recognised as spam are kept in the same way as other messages and deleted after 180 days at the latest. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6 (1) (f) GDPR).

Recipients: the e-mail generated by the form is sent by our web server to our mailbox; see section 10 for the e-mail provider.

10. Contact by e-mail

If you send us an e-mail, or once a message from the contact form has reached our mailbox, we process the data you provide (for example your name, your e-mail address, your organisation and the content of your message) in order to handle your enquiry and any follow-up questions.

Legal basis: Art. 6 (1) (b) GDPR where your enquiry concerns a possible mandate, an existing engagement or another contractual relationship; in all other cases our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR).

Storage period: we store the data until your enquiry has been dealt with and no further follow-up is to be expected. E-mails that are business correspondence within the meaning of commercial and tax law are retained for the statutory periods (six to ten years depending on the type of document, § 257 HGB and § 147 AO) and are then deleted.

Recipients: your e-mail is received and stored on the mail server of our e-mail provider on our behalf. We do not pass the data on to other third parties unless we are legally obliged to do so.

E-mails are usually encrypted in transit (transport encryption). We cannot guarantee end-to-end encryption of the content. Please do not send us particularly sensitive information by e-mail unless it has been agreed with us beforehand.

11. Link to LinkedIn

This website contains a link to the profile of Marco Beck on LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It is a plain link: we do not embed any LinkedIn plug-in, button or script, and no data is transmitted to LinkedIn merely by viewing our website.

Only when you click the link does your browser open LinkedIn in a new window. From that moment on, LinkedIn is responsible for the processing of your data; LinkedIn receives, among other things, your IP address and, if you are logged in, can assign the visit to your LinkedIn account. LinkedIn may transfer data to servers in the United States; LinkedIn Corporation is certified under the EU-US Data Privacy Framework. Details can be found in LinkedIn’s privacy policy at linkedin.com/legal/privacy-policy.

12. Encrypted transmission

This website uses TLS encryption (https). Everything that your browser exchanges with our server, including the pages you request, is transmitted in encrypted form and cannot be read by third parties in transit. You can recognise the encrypted connection by the lock symbol in the address bar of your browser and by the address beginning with “https://”.

13. No obligation to provide data

You are neither legally nor contractually obliged to provide us with personal data, and you can use this website without providing any. If you do not send us your contact details, we simply cannot answer an enquiry.

14. Changes to this privacy policy

We will update this privacy policy whenever the website, the legal situation or our procedures change. The version published here applies. Should we add further services or embedded content in the future, you will be asked for your consent via the cookie banner first, and this policy will be revised before the change goes live.

Last updated: 9 October 2026