Privacy Policy
1. Controller
TLM Advisory UG (haftungsbeschränkt) i. G., represented by its Managing Director Nino Boender, Im Forst 48, 51105 Köln, Germany, phone +49 221 99992410, email kontakt@tlm-advisory.de. No data protection officer has been appointed, as there is no legal obligation to do so.
2. Hosting via Cloudflare
This website is provided via the hosting platform Cloudflare Workers, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare operates a globally distributed server network (content delivery network) and serves the site from a location near you. When you access the site, Cloudflare processes technically necessary connection data for this purpose, in particular your IP address, the date and time of access, the page accessed, the referrer as well as browser type and operating system. The processing serves the fast, secure and stable delivery of the website, including the defence against attacks, and is based on Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. In this context, data may also be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; the transfer is therefore based on the adequacy decision of the EU Commission (Art. 45 GDPR). Further information can be found in Cloudflare's privacy policy.
3. Contact form, email and telephone
If you contact us via the form, by email or by telephone, we process the data you provide (name, company, email address, telephone number where applicable, and your message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries, and otherwise Art. 6(1)(f) GDPR. Name and email address are required; all other details are voluntary. Details submitted through the contact form are not stored on the website; they are delivered directly by email via Cloudflare Email Routing (see section 2). Our mailbox is operated by Google (Gmail, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the content of your message and your contact details in order to deliver and store the message for us; this may involve a transfer to the USA. Google is certified under the EU-U.S. Data Privacy Framework, so the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR). The data is deleted as soon as the enquiry has been conclusively handled and no retention periods under commercial or tax law (up to 10 years) prevent deletion.
4. Cookies and web analytics
This website does not set any cookies and does not otherwise store information on your device (for example in local storage). We do not use any analytics, tracking or marketing services. The quick assessment ("Three questions") is evaluated entirely in your browser; your answers are neither stored nor transmitted to us. Should services requiring consent be added in the future, we will only use them after your explicit consent (Section 25 (1) TDDDG, German Telecommunications Digital Services Data Protection Act).
5. Fonts and external content
The fonts used on this website are part of this website and are delivered together with it via our hosting provider (see section 2). When the page is accessed, no connection is established to third-party servers (such as Google Fonts), and no external content is embedded.
6. Use of AI systems in projects
Language models and automation services may be used in the context of consulting and automation projects. This takes place exclusively on the basis of a separate contract and, where personal data is involved, a data processing agreement with the client. We prefer providers that process data within the EU and, as far as possible, exclude the use of client data for training models. No data is transmitted to AI services via the website itself.
7. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). An email to kontakt@tlm-advisory.de is sufficient for all of this. Automated decision-making, including profiling (Art. 22 GDPR), does not take place.
8. Right to lodge a complaint and data security
You can lodge a complaint with a data protection supervisory authority; the competent authority is the North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. This website uses TLS encryption, recognisable by "https" in the address bar.
Binding language
This English version is provided for information purposes only. Only the German version is legally binding.