Privacy policy

This English translation is provided for convenience only. The German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Overcut Consulting
Owner: Luca Gierse
Am Wiehenbrink 34
37671 Höxter
Phone: +49 160 7951266
Email: gierse@overcut-consulting.de

We have not appointed a data protection officer, as there is no legal obligation to do so.

2. General information on data processing

We process personal data only to the extent necessary to provide a functional website, to respond to your enquiries or to take steps prior to entering into a contract, or where you have given your consent. The legal bases derive in particular from Art. 6 (1) GDPR:

• lit. a: your consent;
• lit. b: performance of a contract or steps taken at your request prior to entering into a contract;
• lit. c: compliance with a legal obligation, such as retention obligations under commercial and tax law;
• lit. f: the pursuit of our legitimate interests, provided that your interests do not override them.

Data are erased as soon as the purpose of storage no longer applies and no statutory retention obligations prevent erasure. Documents relevant under tax and commercial law are subject to retention periods of up to ten years (§ 147 AO [German Fiscal Code], § 257 HGB [German Commercial Code]).

3. Hosting and server log files

This website is hosted by Netlify, Inc., San Francisco, USA. When you access the website, Netlify automatically processes information transmitted by your browser (server log files). This includes your IP address, the date and time of access, the page requested, the referrer URL, and the browser and operating system used.

This processing is necessary to deliver the website and to ensure its security and stability. The legal basis is Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with Netlify pursuant to Art. 28 GDPR. Data are transferred to the USA on the basis of the EU-US Data Privacy Framework (Art. 45 GDPR) and, in addition, the EU Standard Contractual Clauses (Art. 46 (2) lit. c GDPR).

The connection to this website is encrypted using TLS. You can recognise this by the “https://” in your browser’s address bar.

4. Consent management

When you visit the website, we ask whether external media (Google Maps) may be loaded. We store your choice exclusively in your browser’s session storage (sessionStorage). It is deleted automatically when you close the browser or tab and is not transmitted to us. The legal basis is § 25 (2) no. 2 TDDDG [German Telecommunications Digital Services Data Protection Act] in conjunction with Art. 6 (1) lit. c GDPR. We do not set any cookies. Fonts are loaded from our own server; no connection to Google is established in the process.

You can change your choice at any time via the “Cookie settings” link in the footer of every page.

5. Contact form

If you send us an enquiry via the contact form, we process the data you provide: name, company, email address, phone number, selected consulting area and your message. We use these data exclusively to handle your enquiry and to get in touch with you.

For the technical transmission of the form, we use the Formspree service provided by Formspree, Inc., USA. Formspree receives the form data and forwards them to us by email. Data are transferred to the USA on the basis of the EU Standard Contractual Clauses (Art. 46 (2) lit. c GDPR).

The legal basis is Art. 6 (1) lit. b GDPR where your enquiry is aimed at concluding a contract, and otherwise Art. 6 (1) lit. f GDPR; our legitimate interest lies in responding to enquiries. We erase your data as soon as your enquiry has been fully dealt with and no statutory retention obligations apply.

6. Contact by email, phone or WhatsApp

If you contact us by email or phone, we process the information you provide in order to deal with your request. The legal basis is Art. 6 (1) lit. b or lit. f GDPR, as applicable.

Our website contains links to WhatsApp. A connection to WhatsApp is established only when you click such a link. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp processes data as an independent controller, including your phone number and communication metadata; data may be transferred to Meta Platforms, Inc., USA, in the process. If you do not wish to communicate with us via WhatsApp, please use phone, email or the contact form. Further information: whatsapp.com/legal/privacy-policy-eea.

7. Google Maps

To show our location, we embed maps from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is loaded only after you have given your consent in the cookie notice or directly on the map. In this case, your IP address and information about the page visited, in particular, are transmitted to Google; a transfer to Google LLC, USA, is possible. Any such transfer takes place on the basis of the EU-US Data Privacy Framework (Art. 45 GDPR).

The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the “Cookie settings”. Further information: policies.google.com/privacy.

8. Links to LinkedIn and Google

Our website contains simple links to our company profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) and to Google reviews. These are plain links, not embedded plug-ins. Data are transmitted only when you click a link and visit the respective page. The privacy policy of the respective provider applies there: linkedin.com/legal/privacy-policy and policies.google.com/privacy.

9. Your rights

As a data subject, you have the following rights vis-à-vis us with regard to personal data concerning you:

• right of access (Art. 15 GDPR);
• right to rectification (Art. 16 GDPR);
• right to erasure (Art. 17 GDPR);
• right to restriction of processing (Art. 18 GDPR);
• right to data portability (Art. 20 GDPR);
• right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).

Right to object: Where we process your data on the basis of Art. 6 (1) lit. f GDPR, you may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal notice to gierse@overcut-consulting.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, ldi.nrw.de.

10. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. We do not use any analytics or tracking tools on this website.

11. Currency of this policy

This privacy policy was last updated in October 2026. We will amend it as soon as the data processing on this website changes.