Privacy Policy
Last updated: 1 October 2026
1. Controller
Michel Gehrke, MG Assessment & Development
Klippe 82, 42555 Velbert, Germany
Email: [email protected]
Phone: +49 162 7319557
2. Hosting with Cloudflare Pages
This website is provided through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you access the website, Cloudflare processes technical connection and request data, in particular your IP address, the requested URL, the time of access, and transmitted browser, device, and referrer information. This is necessary to deliver the website, resolve errors, and protect it against attacks.
The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is to provide the website securely and reliably. Where Cloudflare processes data on our behalf, this is governed by the Cloudflare Data Processing Addendum. Cloudflare also processes network data to secure and operate its infrastructure in accordance with its own privacy policy.
Processing may take place within Cloudflare’s global network, including in the United States. For transfers requiring additional safeguards, the Cloudflare Data Processing Addendum provides for the European Commission’s Standard Contractual Clauses.
Further information: Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.
3. Fonts, images, and other features
Fonts and images are delivered together with the website. The website’s own code does not integrate external font providers, analytics tools, advertising services, social media widgets, or booking calendars. There is no contact form or document upload.
The website’s own code does not set cookies or use local browser storage. Cloudflare Web Analytics is not enabled for this website. Technical connection data is processed as described in the section on hosting.
4. Contacting us
If you contact us by email or phone, we process the information you provide, in particular your name, contact details, and the content of your enquiry, so that we can respond.
For enquiries about a potential engagement, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is to handle your message.
Providing this information is voluntary. If you do not provide sufficient contact details or information about your enquiry, we may be unable to respond. An email link opens your own email application; the website does not send a message merely because you click the link.
5. Email service and recipients
We use Proton Mail to handle email enquiries sent to [email protected]. The provider is Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland.
Proton processes the message data required to operate the mailbox, in particular sender and recipient addresses, message content, and technical delivery data. Processing by Proton on our behalf is governed by the Data Processing Agreement included in Proton’s terms for business use.
According to the Proton Mail Privacy Policy, data is stored in encrypted form on servers in Switzerland, Germany, or Norway. The European Commission has adopted an adequacy decision for transfers to Switzerland under Article 45 GDPR.
Further information: Proton Mail Privacy Policy and Proton Data Processing Agreement.
6. Retention periods
Contact enquiries are retained only for as long as necessary to handle them and, where applicable, to perform a subsequent contract. Where statutory retention obligations apply, or further storage is necessary to establish, exercise, or defend legal claims, the relevant data is retained for the applicable period and then deleted.
For hosting related processing, the retention period depends on what is necessary for website delivery, error resolution, and security, as well as on legal obligations. Cloudflare’s Data Processing Addendum provides for storage until the contract ends or until the data is no longer needed to perform the contract, whichever occurs first. Cloudflare describes the criteria for retaining data for its own purposes in its privacy policy.
We do not create any additional personal visitor logs.
7. Your rights
Subject to the applicable legal requirements, you have the right to access, rectify, and erase your personal data, to restrict its processing, and to data portability. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation.
To exercise your rights, please use the contact details above. You may lodge a complaint with a data protection supervisory authority, particularly in the place where you normally live, where you work, or where the alleged infringement occurred. The supervisory authority responsible for our registered location is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
8. Changes and automated decision making
This website does not carry out automated decision making, including profiling. If the website or the services it uses change, this policy will be updated accordingly.