Privacy Policy

This policy explains how euconvest GmbH processes personal data when you visit euconvest.com, contact us, or book and pay for an advisory session. It is based on the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

euconvest GmbH Clemens-Schöps-Straße 7, 85521 Ottobrunn, Germany Represented by the Managing Director, Markus Walter Häuser Phone: +49 89 62146838 · Email: info@euconvest.com

We are not legally required to appoint a data protection officer. For any privacy question, write to info@euconvest.com.

2. Hosting and server log files

This website is hosted by [Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany], with servers in Germany. The host processes data on our behalf under a data processing agreement (Art. 28 GDPR).

Each time you open a page, your browser automatically sends data that is stored in server log files: IP address, date and time of the request, page requested, referrer URL, browser type and version, and operating system. We need this data to deliver the website and to keep it stable and secure. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted after 7 days, unless a security incident requires keeping them longer.

3. Encryption

This website uses TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser’s address bar.

4. Contacting us

If you contact us by email or phone, we process the data you provide (such as name, email address, company and the content of your message) to answer your enquiry. If your enquiry relates to a possible engagement, the legal basis is Art. 6(1)(b) GDPR (steps prior to a contract); otherwise it is our legitimate interest in responding (Art. 6(1)(f) GDPR). We delete this data once your enquiry is fully handled, unless statutory retention periods apply (section 9).

Please note that unencrypted email is not fully confidential.

5. Booking advisory sessions (Zeeg)

You can book paid advisory sessions through the scheduling service Zeeg, operated by [Zeeg operator’s legal name and address], a provider based in the EU. When you book, we process your name, email address, chosen date and time, time zone, your company stage, the topics you want to discuss, and your acceptance of our Terms & Conditions. We use this data to schedule, prepare and carry out the session. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). Zeeg acts as our processor under a data processing agreement. Zeeg’s privacy policy: https://zeeg.me/en/privacy

6. Payment (Stripe)

Payments for advisory sessions are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe receives your name, email address, payment details and the amount, and uses them to carry out the payment and to prevent fraud. We do not receive or store your full card details. The legal basis is Art. 6(1)(b) GDPR, and for fraud prevention our and Stripe’s legitimate interest (Art. 6(1)(f) GDPR). Stripe processes some data as an independent controller and may transfer data to Stripe, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework. Stripe’s privacy policy: https://stripe.com/privacy

7. Video calls

Advisory sessions take place by video call using [Zoom / Microsoft Teams / Google Meet], provided by [provider name and address]. The provider processes your name, email address, IP address, device data and the audio and video of the call while it takes place. We do not record sessions. The legal basis is Art. 6(1)(b) GDPR. [If the provider is based in the USA: data may be transferred to the USA; the provider is certified under the EU-U.S. Data Privacy Framework.]

8. Web analytics (Google Analytics) – only with your consent

If you consent via our cookie banner, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors use the website. Google Analytics sets cookies and processes usage data, such as pages viewed, time on page, approximate location and device information; IP addresses are not stored. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Data is deleted after 14 months. You can withdraw your consent at any time via the cookie settings link in the footer.

9. Clients, contracts and retention periods

We process the data of clients and business partners to perform contracts and manage the business relationship (Art. 6(1)(b) GDPR) and to meet legal obligations (Art. 6(1)(c) GDPR). Under German commercial and tax law (§ 257 HGB, § 147 AO), we keep books and annual accounts for 10 years, accounting vouchers such as invoices for 8 years, and business correspondence for 6 years. Other personal data is deleted as soon as it is no longer needed for its purpose.

10. Cookies

Without your consent, this website uses only technically necessary cookies, which are required to deliver the website and remember your consent choice (§ 25(2) TDDDG, Art. 6(1)(f) GDPR). Any other cookies are set only with your consent (section 8).

11. Fonts and LinkedIn

Fonts are hosted on our own server; no connection to Google or other font providers is made. Our homepage can show a feed of our latest LinkedIn posts, provided through the widget service Elfsight ([Elfsight legal name and address]). When the homepage loads, your IP address, browser data and the page address are sent to Elfsight’s servers, and post images may load from LinkedIn. The legal basis is our legitimate interest in presenting our current activities on LinkedIn (Art. 6(1)(f) GDPR). Elfsight’s privacy policy: https://elfsight.com/privacy-policy/. The LinkedIn icon in our footer is a plain link: no data is sent to LinkedIn until you click it. After that, LinkedIn’s privacy policy applies: https://www.linkedin.com/legal/privacy-policy

12. Recipients and transfers outside the EU

We share personal data only with the service providers named above, with tax advisers and auditors bound to confidentiality, or where we are legally obliged to. Transfers to countries outside the EU or EEA take place only where the provider is covered by an adequacy decision (such as the EU-U.S. Data Privacy Framework) or by the EU Standard Contractual Clauses (Art. 44 et seq. GDPR).

13. Your rights

You have the right to:

  • access your personal data (Art. 15 GDPR)
  • have inaccurate data corrected (Art. 16 GDPR)
  • have your data erased (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • receive your data in a portable format (Art. 20 GDPR)
  • withdraw your consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise these rights, email info@euconvest.com.

Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds, or the processing serves to establish, exercise or defend legal claims. You may object to direct marketing at any time, without giving reasons.

14. Right to lodge a complaint

You may complain to a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement occurred (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18, 91522 Ansbach, Germany Phone: +49 981 180093-0 · Email: poststelle@lda.bayern.de · www.lda.bayern.de

15. Automated decisions and obligation to provide data

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. You are not obliged to provide personal data; however, without the data marked as required in the booking form, we cannot schedule or carry out an advisory session.

16. Changes

We update this policy when our services or the law change. The current version is always available on this page.

Last updated: October 2026