Legal

Privacy Policy

Hinweis (Entwurf – bitte vor Livegang entfernen): Dieser Text beschreibt den tatsächlichen Stack (Cloudflare Pages, Turnstile, Brevo, Cloudflare Web Analytics). Verantwortlicher ist noch offen (siehe Legal Notice / TODO). Nicht genutzte Abschnitte wurden bereits entfernt (kein Cal.com, kein GA4). Kein Rechtsrat – vor Livegang anwaltlich prüfen lassen.

1. Controller

Operandi Consultancy, TODO: vertretungsberechtigte Person, TODO: Straße Hausnr., TODO: PLZ Ort, Belgien. E-mail: info@operandiconsultancy.com.

2. Hosting (Cloudflare)

This website is hosted and delivered by Cloudflare (Cloudflare, Inc., USA). When you visit the site, technically necessary server log data (including IP address, time of access and requested resource) is processed. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare; transfers to the USA are safeguarded by the EU-US Data Privacy Framework (Cloudflare is certified) and standard contractual clauses.

3. Contact form & spam protection

When you use our contact form, we process the details you provide (name, contact details, message) solely to handle your request (Art. 6(1)(b) GDPR). Your data is not stored in a database – it is delivered to us by email. We use Brevo (Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) as our processor for email delivery.

To protect the form against abuse we use Cloudflare Turnstile, a privacy-friendly alternative to traditional captchas. Turnstile is technically required for the secure operation of the form (Art. 6(1)(f) GDPR) and does not set tracking cookies.

4. WhatsApp

If you choose to contact us via WhatsApp (WhatsApp Ireland Ltd.), the conversation is processed under WhatsApp's own terms and privacy policy. We use the content of your message solely to handle your request (Art. 6(1)(b) GDPR). Using WhatsApp is optional – you can always reach us by email or the contact form instead.

5. Web analytics (Cloudflare Web Analytics)

For reach measurement we use Cloudflare Web Analytics. The service works without cookies and without cross-device tracking; no individual visitors are identified. The legal basis is our legitimate interest in statistical analysis of website usage (Art. 6(1)(f) GDPR).

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a data protection supervisory authority – in Belgium, the Gegevensbeschermingsautoriteit / Autorité de protection des données (www.dataprotectionauthority.be).