Privacy Policy

Last updated: July 2026. This page explains which personal data this website processes, on what legal basis under the GDPR (EU 2016/679), and which rights you have.

1. Controller

Responsible for data processing on this website:

GeistAnger - Consulting
Dr. Andrea Geistanger
Zeismeringerstr. 13
81477 Munich, Germany
Contact:

2. Hosting and server logs

This site is served by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit a page, Cloudflare processes technical connection data (IP address, date and time, requested URL, browser user agent) to deliver the site and to protect it against attacks. The legal basis is our legitimate interest in operating a secure and fast website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor under Art. 28 GDPR; transfers to the USA are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses. We do not combine these logs with any other data.

3. Cookies and analytics

This website is ad-free, sets no cookies, and runs no analytics or tracking scripts. Your visit leaves no advertising or cross-site tracking identifiers with us, and we do not profile you. Because the site sets no cookies and runs no tracking, no consent banner is required.

4. Contact form

When you send us a message through the contact form, we process the data you provide (name, email address, optional company, and the content of your message) to handle your enquiry and possible follow-up questions. Your submission is stored as a lead in our customer relationship management system, operated by Odoo S.A. (Chaussée de Namur 40, 1367 Ramillies, Belgium), which acts as our processor under Art. 28 GDPR and hosts the data within the EU. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep the data only as long as needed for this purpose and for any statutory retention duties.

5. Appointment booking via Microsoft Bookings

To book an appointment, we link to Microsoft Bookings (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA). The booking link opens a Microsoft-hosted page in a new tab. This loads no Microsoft scripts or cookies on our own site. Only once you follow the link and book an appointment there does Microsoft process the data you provide (such as name, email address and your request) so that we can keep the appointment. The legal basis is Art. 6(1)(b) GDPR for taking steps towards a contract, otherwise our legitimate interest in a simple way to schedule (Art. 6(1)(f) GDPR). Microsoft acts as a processor under Art. 28 GDPR. Processing takes place within Microsoft's EU Data Boundary; any transfers to the USA are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses. You are free to use the contact form instead.

6. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interest (Art. 21). To exercise any of these rights, contact us via the address in section 1; we will verify your identity before acting on a request. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

7. Changes to this page

We will update this page whenever the data processing on this site changes, and adjust the date at the top accordingly.