Graf Business Consulting Graf Business ConsultingSalesforce & AI

Privacy policy

Last updated: September 2026

1. Controller

Tilmann Graf, Graf Business Consulting
Reckenbergstraße 4, 79252 Stegen, Germany
Email: info@graf-business-consulting.com

2. What this website does not do

This website sets no cookies, embeds no analytics or tracking services, loads no fonts, scripts or images from third-party servers and uses no content delivery network. No data about you is therefore transferred to third parties or to countries outside the EU, and no cookie banner is required. Everything is served from this website's own server.

Your language choice is simply a matter of which version of the page you open; nothing about it is stored.

3. Server log files

When you visit this website, the hosting provider automatically records information your browser transmits: the page requested, date and time, the volume of data transferred, browser type and version, operating system, referrer URL and IP address.

The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in the technically error-free and secure operation of the website. This data is not combined with other sources. The retention period is up to six weeks, after which the log files are deleted.

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place.

4. Contact form

If you send me a message through the contact form, I process the details you enter in order to answer your enquiry: first and last name and email address (required), company, phone number and subject of your enquiry (optional), and the content of your message.

The data is processed on this website's own server and delivered by email to the address above. No external form service is involved. You also receive a confirmation of your enquiry at the email address you provided.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into a contract, otherwise Art. 6 (1) (f) GDPR based on my legitimate interest in answering enquiries, together with Art. 6 (1) (a) GDPR based on the consent you give when submitting the form. You may withdraw that consent at any time.

I keep your enquiry until it has been dealt with and no further questions are expected. Enquiries that lead to an engagement are subject to statutory retention periods of up to ten years.

The form contains a field invisible to you which serves to block automated spam submissions. It processes no personal data.

5. Encryption

This website uses TLS encryption, shown by the padlock in your browser's address bar. Content you send me cannot be read by third parties in transit.

6. Your rights

You have the right to obtain information about the data stored about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16), to have your data erased (Art. 17), to restrict processing (Art. 18), to receive your data in a portable format (Art. 20) and to object to processing (Art. 21). An informal message to the email address above is sufficient.

7. Right to lodge a complaint

If you believe the processing of your data infringes the GDPR, you may lodge a complaint with a supervisory authority. The competent authority here is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

The German version of this privacy policy is the legally binding one. Zur deutschen Datenschutzerklärung

← Back to the start page