Privacy policy

This is a scaffold, not legally valid text. A privacy policy already exists at decorum-experience.com/privacy-policy — it should be ported and adjusted, not rewritten from scratch.

Three things must change in the process: the existing version is English only, it names Google Analytics rather than Ahrefs Web Analytics, which this site uses, and its retention periods describe the old hosting.

Recommendation: have Decorum Consulting GmbH review it — the group already has a certified data protection officer for exactly this.

Controller

Name, address and contact details of Decorum Experience GmbH and of the data protection officer.

Data collected

What the contact form collects (name, company, email, phone, message) and what the web server logs.

Purpose and legal basis

Handling enquiries under Art. 6(1)(b) and (f) GDPR.

Retention period

How long enquiry data is kept and when it is deleted.

Recipients and processors

Hosting provider, email provider, Ahrefs (Web Analytics, Ahrefs Pte. Ltd., Singapore) and any other processors, including their location.

Data subject rights

Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint.

Cookies and analytics

Whether cookies are set. Ahrefs Web Analytics measures traffic and sets no cookies. Still to settle: the legal basis, the transfer to Singapore (a third country) and whether that needs a consent banner.