Privacy policy
1. General information
Protecting your personal data is important to us. This Privacy Policy explains what personal data we collect when you visit our website, how we process it, and your rights under the General Data Protection Regulation (GDPR).
This Privacy Policy applies to the website bamberg-reputation.de.
Data Controller
Florian Bamberg
Bettinaplatz 4
60325 Frankfurt am Main
E-Mail: mail@bamberg-reputation.de
Telefon: +49 163 480 63 45
2. Data collection on our website
2.1 Hosting and server log files
Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (hereinafter "Vercel"). When you visit our website, Vercel automatically collects and stores information in server log files. This information includes:
• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referring URL
• Name and URL of the requested file
This data is processed on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest is to ensure the technical delivery, stability and security of our website.
Vercel processes this data on our behalf as a processor. We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR which incorporates the European Commission's Standard Contractual Clauses. In this context, personal data may be transferred to the United States. Vercel is also certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR).
Further information:
https://vercel.com/legal/privacy-policy
2.2 Contact form and request form
If you contact us via our contact form, the information you provide (name, company, email address, phone number and message) will be processed solely for the purpose of handling your inquiry.
Via the "18 questions" request form you can request a document as a PDF. For this purpose we process your email address solely in order to send you the requested document once. Your email address will not be used for any other purpose, in particular not for a newsletter or other advertising.
The processing is carried out pursuant to Art. 6 (1) (b) GDPR or based on our legitimate interest under Art. 6 (1) (f) GDPR.
The data entered in the forms is transmitted to us by email. To dispatch these emails we use the email delivery service Resend provided by Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA (hereinafter "Resend"). Resend processes the data on our behalf as a processor. We have concluded a data processing agreement with Resend pursuant to Art. 28 GDPR which incorporates the European Commission's Standard Contractual Clauses. The data is used exclusively to transmit your inquiry to us or to send you the requested PDF.
To protect the forms against automated submissions we use ALTCHA (see section 2.3). If you have consented to the use of marketing cookies, the successful submission of a form is recorded via Google Ads conversion tracking (see section 3.3).
Your data will be deleted once your request has been fully processed, unless statutory retention obligations apply.
2.3 Spam protection (ALTCHA)
To protect our forms against automated submissions (spam) we use ALTCHA, an open-source proof-of-work mechanism. Before a form is submitted, your browser locally solves a small computational task, the result of which is then verified on our server.
ALTCHA runs exclusively in your browser and on our own server. No data is transmitted to third parties, no cookies are set and no user behavior is analyzed or tracked. Unlike services such as Google reCAPTCHA, no data is transferred to a third-party provider.
The processing is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR in protecting our website against abuse and spam.
2.4 Cookie consent
We use our own cookie banner, which does not rely on any external provider, to manage your consents.
Your choice is stored only in your browser's local storage (entry “br_consent”) for 12 months so that it can be applied during future visits, and is passed on to Google Consent Mode. It is not transmitted to third parties. You can change or withdraw your choice at any time via “Cookie settings” in the footer.
The legal basis is Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR.
The current cookie declaration, including an overview of the cookies used on this website, can be viewed on the page Cookie policy.
2.5 Fonts
For the uniform presentation of our website we use the typeface "Inter". The font files are stored on our own web server and are delivered from there (self-hosting).
No connection to servers of Google or any other third party is established when the fonts are loaded. Accordingly, no personal data is transmitted to third parties in this context.
2.6 LinkedIn
Our website contains links to our LinkedIn company profile.
Only after clicking one of these links will you be redirected to LinkedIn. From that point on, LinkedIn is solely responsible for processing your personal data.
For further information, please refer to LinkedIn's Privacy Policy: https://www.linkedin.com/legal/privacy-policy
3. Analytics and Marketing Services
3.1 Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is used solely to manage website tags. It does not itself store cookies or process personal data but enables other services to be loaded.
The processing is based on your consent pursuant to Art. 6 (1) (a) GDPR.
3.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.
Google Analytics uses cookies to analyze how visitors use our website. The following information may be processed:
• Anonymized IP address
• Device information
• Browser information
• Page views
• Session duration
• Click behavior
• Traffic source
IP anonymization has been enabled.
The processing is carried out exclusively on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG.
Collected data may be transferred to servers operated by Google LLC in the United States. Google relies on the European Commission's Standard Contractual Clauses for such transfers.
Further information: https://policies.google.com/privacy
3.3 Google Ads and Conversion Tracking
We use Google Ads, including Google Ads Conversion Tracking.
If you access our website through a Google advertisement and have provided your consent, Google may store cookies on your device. These cookies enable us to measure and optimize the effectiveness of our advertising campaigns.
The following information may be processed:
• IP address
• Browser information
• Device information
• Conversion data
• Pages visited
Processing takes place solely on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.
Further information: https://policies.google.com/privacy
3.4 Google Ads Remarketing
Where you have provided your consent, we also use Google Ads Remarketing.
This allows us to display personalized advertisements to previous visitors of our website across Google's advertising network.
Processing takes place solely on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.
3.5 Calendly
We use Calendly LLC, 271 17th Street NW, Atlanta, GA 30363, USA, to facilitate online appointment scheduling.
When booking an appointment, the information you provide (such as your name, email address, phone number, and preferred appointment time) is transmitted to Calendly and processed there.
Processing is based on your consent pursuant to Art. 6 (1) (a) GDPR or, where applicable, on Art. 6 (1) (b) GDPR for pre-contractual measures.
Calendly may process data on servers located in the United States. Data transfers are safeguarded by the European Commission's Standard Contractual Clauses.
Further information: https://calendly.com/privacy
4. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable legal retention obligations.
5. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" prefix in your browser's address bar.
6. Your Rights
Under the GDPR, you have the following rights:
• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time with future effect
• Right to lodge a complaint with a competent supervisory authority
7. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time to ensure compliance with current legal requirements or to reflect changes to our services. The version published on this website shall apply to your future visits.
Last updated: September 2026