_{Privacy Policy}

1. Introduction
‍We are pleased that you are visiting our website and are interested in our consulting services. Protecting your personal data is important to us. In this privacy policy, we inform you about the type, scope, and purpose of the processing of personal data on our website.The responsible party in terms of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Oliver Graf, Graf Media GmbH
Veltheimstr. 46, 13467 Berlin
grafmedia11@gmail.com
+49 (0) 151 528 444 56

‍2. Collection and Storage of Personal Data as well as the Type and Purpose of Their Use
‍When you access our website, information is automatically sent by the browser on your device to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which the access was made (referrer URL),
- Browser used, possibly the operating system of your computer, and the name of your access provider.

The mentioned data is processed by us for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring comfortable use of our website,
- Evaluation of system security and stability,
- and for other administrative purposes.

The legal basis for data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest arises from the above-listed purposes for data collection. Under no circumstances do we use the collected data to draw conclusions about your identity.
‍
‍b) Contact Form
‍
‍If you have any questions, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid email address so that we know who the inquiry is from and can respond. Further information can be provided voluntarily. The data processing for the purpose of contacting us is based on your voluntarily granted consent in accordance with Art. 6(1) sentence 1 lit. a GDPR.

c) Data storage at other companies
‍
We store data with paid access at the companies Microsoft, Google, Dropbox, Calendly, LinkedIn and Webflow. In addition to the emails themselves, “data” also includes email attachments and all paper documents.
‍
‍3. Data Sharing
‍We do not transfer your personal data to third parties for purposes other than those listed below. We will only share your personal data with third parties if:
- You have given your explicit consent in accordance with Art. 6(1) sentence 1 lit. a GDPR,
- the disclosure is necessary for the assertion, exercise, or defense of legal claims in accordance with Art. 6(1) sentence 1 lit. f GDPR, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- there is a legal obligation for disclosure in accordance with Art. 6(1) sentence 1 lit. c GDPR, or
- it is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6(1) sentence 1 lit. b GDPR.

‍4. Cookies
‍We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Information related to the specific device being used is stored in the cookie. However, this does not mean that we gain direct knowledge of your identity through cookies.

The use of cookies is intended to make the use of our services more pleasant for you.

‍5. Rights of Data Subjects
‍You have the right to:
- request information about the personal data we process about you in accordance with Art. 15 GDPR,
- request the immediate correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR,
- request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, provided the processing is not necessary for the fulfillment of a legal obligation or the assertion, exercise, or defense of legal claims,
- request the restriction of processing your personal data in accordance with Art. 18 GDPR,
- receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or request its transmission to another controller in accordance with Art. 20 GDPR,
- revoke your consent at any time in accordance with Art. 7(3) GDPR, and
- lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.

‍6. Right to Object
‍If your personal data is processed based on legitimate interests in accordance with Art. 6(1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons arising from your particular situation.

‍7. Data Security
‍We use the widespread SSL (Secure Socket Layer) procedure during website visits in conjunction with the highest encryption level supported by your browser.

8. Deletion of data
We only delete data once the mandate has ended and been processed and all statutory retention periods have expired. If we store data about third parties, we store this data on behalf of our customers. The reason for this is usually a legitimate interest of the client.

‍9. Validity and Changes to This Privacy Policy
‍This privacy policy is currently valid as of [September 10, 2024]. Due to further development of our website and services or due to changes in legal or regulatory requirements, it may become necessary to modify this privacy policy.