Privacy policy

This notice explains which personal data we process when you visit this website or send us a request, for what purpose, on which legal basis and for how long. We have not appointed a data protection officer as we are not required to do so.

1. Hosting and server log files

This website is hosted by ALL-INKL.COM, Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place. Data is processed exclusively in Germany.

When you visit the website, your browser automatically transmits information that is stored in server log files: IP address, date and time of access, requested address, referring website, browser and operating system. This serves the secure and stable operation of the website. The legal basis is Art. 6 (1)(f) GDPR. Log files are deleted after 30 days at the latest.

2. Cookies and browser storage

The public pages of this website do not set cookies and do not store any data in your browser. Fonts are loaded from our own server; there is no connection to Google Fonts or any other font provider.

If you arrive via a search engine, a link or a campaign, we pass on the origin (for example "google", "organic") and the entry page as parameters in the links of this website. This lets us see through which channel a request was made. Nothing is stored on your device.

3. Request for a business check

When you send us a request via the form, we process your details: company name, contact person, number of employees, your biggest challenge, the desired improvement, business email address and, voluntarily, your phone number. We also store the time of the request, the language, the page you used, the offer you are interested in, the origin (see section 2) and your confirmation that you have read this notice.

The purpose is to review and handle your request and to prepare a consultation and, if applicable, a quote. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures) and Art. 6 (1)(f) GDPR (legitimate interest in answering and evaluating requests).

Pre-assessment: A simple rule-based score is calculated from your details (for example number of employees, industry and how specifically your request is described). It only determines whether you are offered a link to book the business check immediately. Every request is also read and answered personally. No automated decision with legal effect within the meaning of Art. 22 GDPR takes place. No AI is used for this assessment.

After submitting, you receive a confirmation email and we receive an internal notification. If you commission the business check via your personal booking link, we store the time of this order (Art. 6 (1)(b) GDPR). The data is stored in a database on our web server in Germany (see section 1).

Abuse protection: To fend off automated requests, we process your IP address only in hashed form to limit the number of requests. This value is deleted after 24 hours at the latest. The legal basis is Art. 6 (1)(f) GDPR.

Retention: Requests that do not result in a contract are deleted automatically no later than 15 months after the last contact. If a contract is concluded, statutory retention periods apply (up to 10 years for tax-relevant documents).

4. Appointment booking with Calendly

For booking the business check we use Calendly, a service of Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. The booking calendar is only accessible via your personal booking link and is only loaded after you have confirmed the order and clicked the button. No data is transferred to Calendly before that.

When loading the calendar and booking, Calendly processes your IP address, browser information and the data you enter or that is prefilled (name, email address, description of your request, chosen time). To match the booking to your request we pass on a random reference number and the origin data from section 2. After a booking, the calendar reports the appointment's identifier to our website so we can match it to your request.

The legal basis is your consent given by clicking (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG) and, for holding the appointment, Art. 6 (1)(b) GDPR. You can withdraw your consent at any time with effect for the future. A data processing agreement with Calendly is in place. The transfer to the USA is based on Calendly's certification under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR). More information: calendly.com/legal/privacy-notice.

Alternatively, you can always contact us by email or phone to arrange an appointment without Calendly.

5. Web analytics

We currently do not use any web analytics services. We only count anonymously how often a request form was started and the booking calendar was opened. This count contains no personal data. Should we use web analytics (for example Matomo) in the future, we will update this notice beforehand.

6. Contact by email or phone

If you contact us by email or phone, we process the data you provide (name, contact details, content of the request) to handle your enquiry. The legal basis is Art. 6 (1)(b) GDPR or Art. 6 (1)(f) GDPR. Emails are processed on the servers of ALL-INKL.COM in Germany (see section 1).

7. Disclosure of data

Your data is only passed on to third parties as described in this notice (hosting, Calendly), if you have consented, if it is necessary to perform a contract or if there is a legal obligation. Data is only transferred to countries outside the EU when you use Calendly (see section 4).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the Independent Centre for Privacy Protection Schleswig-Holstein (ULD).

Right to object: Where we process your data on the basis of Art. 6 (1)(f) GDPR, you may object at any time on grounds relating to your particular situation. An informal email to h.schulz@media-and-it.de is sufficient.

9. Data security

This website is delivered exclusively via encrypted HTTPS. The database containing requests is not publicly accessible and access to the administration area is password protected. We use further technical and organisational measures to protect your data against loss and unauthorised access.

10. Version

This privacy policy was last updated on 11.10.2026. We will adapt it if our website or the legal requirements change. In case of doubt, the German version applies.