Privacy Policy
1. Controller
Repertadata, Owner: Michael Frey
Maxburgstraße 17
76877 Offenbach an der Queich
Germany
Email: mail@repertadata.de
Phone: +49 6348 919226
2. Hosting and server logs
This website is hosted by DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 München, Germany. The web hosting is located in the European Union. We have a data processing agreement with DomainFactory under Art. 28 GDPR.
When you visit this website, the server processes technically necessary data: your IP address, the date and time of access, the URL requested, the referrer URL, the user agent and the volume of data transferred. This serves to deliver the website and maintain its stability and security. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure operation of the website.
Access logs are deleted after 14 days. They are not kept beyond this period.
No in-browser analytics
We do not analyse your behaviour in the browser. We use neither Google Analytics nor a comparable tool. This website does not set cookies.
Server-side access statistics
The hosting provider generates access statistics from the server logs using AWStats and Webalizer. This analysis takes place on the server, does not set cookies and does not access your device. It records IP addresses, pages visited, access times, referring websites and information about browsers and countries of origin.
We use these data to analyse how our website is used and improve its content. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to design our website to meet users’ needs.
Personal data used for statistics are deleted after no more than 35 days. This period allows for monthly analysis with a few additional days for completion. For longer-term use, we retain only aggregated, anonymous figures that cannot be linked to individual visitors.
3. Arranging an appointment
You can arrange a Discovery call using the contact form or by email. We do not use an external booking service. The information about contacting us in section 4 and providing your data in section 6 applies.
4. Contact form and email enquiries
When you contact us, we process the data you provide, such as your name, email address and enquiry, to deal with your request.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract. For general enquiries, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to respond to your enquiry.
We delete correspondence 12 months after the conversation has ended, unless statutory retention obligations require otherwise.
Contact form and protection against misuse
Form submissions are transmitted using TLS encryption. They are delivered to our mailbox through the hosting and email infrastructure provided by DomainFactory. We do not use an additional external form service.
An invisible control field and a limit on requests are in place to prevent misuse. For this limit, a cryptographic verification value is generated from your IP address. The protection files contain this value, a time value and a request counter; they contain neither the IP address in plain text nor the content of your enquiry. These protection data are deleted no later than one hour after collection. The server logs described in section 2 are separate from these data.
The form application does not log the content of your enquiry. The legal basis for protection against misuse is Art. 6(1)(f) GDPR; our legitimate interest is to protect the form against automated use and misuse.
5. Your rights
Subject to the statutory conditions, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing before you withdrew consent (Art. 7(3) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (State Commissioner for Data Protection and Freedom of Information, Rhineland-Palatinate)
Hintere Bleiche 34
55116 Mainz
Phone: +49 6131 8920-0
Email: poststelle@datenschutz.rlp.de
6. Automated decision-making and provision of your data
We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
You are not required by law or contract to provide your data. However, we cannot respond to your enquiry without the information needed to process it.
7. Updates
Last updated: 26 September 2026. We will amend this policy if the services or the legal situation change.