Skip to content

Legal

Privacy policy

This is a translation for your convenience. The German version is legally binding.

1. Controller

Oliver Nord, on consultant, Südstraße 111a, 33647 Bielefeld, Germany
Phone: +49 1520 162 4227 · Email: on@on-consultant.de

2. Principle

This website is deliberately built to collect as little data as possible. It uses no cookies, no analytics or tracking tools and no embedded third-party content (such as videos, maps or social media plugins). The font is loaded from this website’s own server, not from Google or any other provider.

3. Hosting and server log files

This website is hosted by DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 München, Germany. The server is located in the European Union (France). When you visit the website, the server automatically processes data transmitted by your browser (server log files):

  • IP address
  • date and time of access
  • domain, page or file requested
  • status code and amount of data transferred
  • browser type and operating system (user agent)

This data is technically necessary to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). The log files are automatically deleted after 3 days.

From the log files, domainFactory generates daily aggregated access statistics (Webalizer), for example the number of requests per page and period and the browsers used. These statistics may also contain the IP addresses or host names of the most frequent visitors. They are only visible to me in the hosting provider's customer area, are not passed on to third parties and are not combined with other data. I use them to improve the website and detect faults. The legal basis is Art. 6(1)(f) GDPR. I keep the statistics for no longer than 12 months; older reports are deleted. You may object to this processing at any time (Art. 21 GDPR).

A data processing agreement is in place with domainFactory. domainFactory uses subcontractors, some of which are located outside the EU (e.g. in the USA and Ukraine). Data is only transferred there in accordance with Art. 44 et seq. GDPR.

4. Encryption

This website is delivered exclusively over an encrypted connection (HTTPS/TLS).

5. Contact by email or phone

If you contact me by email or phone, I process your details (e.g. name, contact details, content of your enquiry) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or steps prior to entering into one, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding). I delete the data as soon as it is no longer needed, unless statutory retention obligations apply. Emails are transmitted and stored via my email provider, also DomainFactory GmbH (address see section 3). A data processing agreement is in place for this as well. The email servers are operated on behalf of DomainFactory by its parent company GoDaddy (GoDaddy Operating Company, LLC, USA), including in data centres in the EU and the USA; for transfers outside the EU, see section 3.

6. Link to LinkedIn

This website contains a simple link to my LinkedIn profile. Merely visiting this website does not transfer any data to LinkedIn. Only when you click the link are you taken to LinkedIn’s website (LinkedIn Ireland Unlimited Company), where LinkedIn’s privacy policy applies.

7. Profile PDF

The profile PDF is downloaded directly from this website’s own server. Only the server log data listed in section 3 is processed.

8. Your rights

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)

Simply use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Düsseldorf.

9. Version

This privacy policy is dated 12 November 2026.