1. Controller

The controller responsible for the processing of personal data in connection with this website is:

Huber & Lipsker Consultancy GbR
represented by Alina Huber and Uri Lipsker

Heckerdamm 269
13627 Berlin
Germany

Email: contact@huberlipskerconsultancy.com

Telephone:
Alina Huber: +49 152 23512748
Uri Lipsker: +49 151 61204506

2. General Information on Data Processing

Protecting your personal data is important to us. We process personal data confidentially and in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR), as well as this Privacy Policy.

Personal data means any information relating to an identified or identifiable natural person.

When you use this website, different types of personal data may be processed. The following sections explain what information we process, why we process it and the legal basis for doing so.

3. Hosting

This website is hosted by:

Bluehost Inc.
5335 Gate Pkwy, 2nd Floor
Jacksonville, Florida 32256
USA

Bluehost provides the technical infrastructure required to operate this website. In connection with hosting the website, technical data may be processed, including IP addresses, browser and device information, access times and information contained in server log files.

This processing is necessary to provide the website securely and reliably.

The legal basis for this processing is Art. 6(1)(f) GDPR, based on our legitimate interest in the secure, stable and efficient operation of our website.

As Bluehost is based in the United States, processing may involve the transfer of personal data outside the European Economic Area. Such transfers are subject to the requirements of Chapter V of the GDPR and the applicable contractual and data-protection safeguards provided by the service provider.

4. Contact Form

You can contact us through the contact form available on this website.

When you submit the form, we process the information you provide in order to respond to your enquiry and, where appropriate, to communicate with you regarding subsequent questions.

The information processed may include:

• full name
• email address
• telephone number
• message
• any other information you voluntarily include in your message

Submissions are forwarded to our business email account, which is operated using Google Workspace.

Where your enquiry relates to our services or a potential contractual relationship, the legal basis for processing is Art. 6(1)(b) GDPR, concerning contractual or pre-contractual measures.

For other enquiries, processing is based on Art. 6(1)(f) GDPR, based on our legitimate interest in responding to people who contact us and maintaining business communications.

Your personal data will not be disclosed to third parties except where this is necessary to provide the services used for our communication, where we are legally required to do so, or where another lawful basis applies.

5. Resource Requests

Our website allows you to let us know if you are looking for a particular resource or would like us to contact you about resources that may be relevant to you.

For this purpose, we process:

• your full name
• your email address

We use this information solely to respond to your request or contact you regarding the resource you expressed an interest in. Submission of this form does not subscribe you to a general marketing newsletter.

The legal basis for processing is Art. 6(1)(f) GDPR, based on our legitimate interest in responding to requests from website visitors and providing relevant information and resources.

Where the communication relates directly to a potential contractual relationship or our professional services, processing may instead be based on Art. 6(1)(b) GDPR.

6. Appointment Booking via Google Calendar

Our website provides a link that allows you to arrange an introductory meeting with us using a Google Calendar booking page.

The booking page is operated by Google and is separate from this website. Personal data is transferred to Google in connection with the booking service only when you follow the booking link and interact with Google’s booking page.

When booking an appointment, the following information may be processed:

• your full name
• your email address
• your selected appointment date and time
• any information you voluntarily provide in the optional message field

This information is used to arrange, manage and conduct the requested meeting. Once a booking is made, the appointment is added to our Google Calendar and relevant booking notifications may be sent by Google.

We use Google Workspace and Google Calendar services provided by Google.

The legal basis for our processing of the information you provide when arranging a meeting is Art. 6(1)(b) GDPR, insofar as the appointment concerns potential services or pre-contractual communication. In other cases, processing is based on Art. 6(1)(f) GDPR, based on our legitimate interest in organising and conducting requested meetings.

Google may process data on servers outside the European Economic Area, including in the United States. Google states that it uses recognised mechanisms for international transfers, including applicable adequacy decisions, the EU-US Data Privacy Framework and Standard Contractual Clauses where required.

7. Google Workspace and Email Communication

We use Google Workspace for business email, calendar and related communication services.

If you contact us by email, submit a contact or resource request that is forwarded to our email account, or arrange a meeting through Google Calendar, relevant personal data may therefore be processed using Google Workspace.

This may include:

• your name
• your email address
• telephone number, where provided
• the content of your communication
• appointment and calendar information
• associated technical and communication data

The legal basis depends on the purpose of the communication and is generally Art. 6(1)(b) GDPR for contractual or pre-contractual communications or Art. 6(1)(f) GDPR for other business communications.

Google may process personal data outside the European Economic Area. Google states that it participates in the EU-US Data Privacy Framework and also uses Standard Contractual Clauses where required for international transfers.

8. Google Maps

Our website may use Google Maps to display geographical information and locations.

Google Maps is a service provided by Google. When Google Maps content is loaded, technical information such as your IP address and device or browser information may be transmitted to Google. Depending on your settings and whether you are signed into a Google account, Google may also associate information with your Google account.

Where Google Maps requires the transfer of data or the use of non-essential technologies on your device, the service will only be activated where the applicable data-protection and consent requirements have been met.

Google may process data outside the European Economic Area, including in the United States, subject to the international transfer safeguards described above.

9. Storage Period

We retain personal data only for as long as necessary for the purpose for which it was collected.

Information submitted through contact forms, resource requests or other enquiries will generally be retained for as long as necessary to respond to the request and manage any subsequent communication.

Appointment and business communication data may be retained for longer where this is necessary in connection with an ongoing or potential business relationship.

Longer retention periods may also apply where required by statutory retention obligations or where data is necessary for the establishment, exercise or defence of legal claims.

Once the relevant purpose no longer applies and no legal retention requirement exists, the data will be deleted.

10. Your Rights

Under the GDPR, you have various rights in relation to your personal data. Subject to the applicable legal requirements, these include:

• the right of access under Art. 15 GDPR
• the right to rectification under Art. 16 GDPR
• the right to erasure under Art. 17 GDPR
• the right to restriction of processing under Art. 18 GDPR
• the right to data portability under Art. 20 GDPR
• the right to object to processing under Art. 21 GDPR

Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

11. Right to Object

Where we process your personal data on the basis of our legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation in accordance with Art. 21 GDPR.

If you wish to exercise this or any other data-protection right, you can contact us at:

contact@huberlipskerconsultancy.com

12. SSL/TLS Encryption

This website uses SSL/TLS encryption to protect the transmission of confidential information.

You can recognise an encrypted connection by the use of “https://” in your browser’s address bar.

13. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to our website, the services we use or applicable legal requirements.

Last updated: September 2026