Privacy Policy

Last updated: October 2026.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Younes Gräbner — RelioMedia
Owner: Younes Gräbner
Heidestraße 20b
85386 Eching
Germany
Legal form: Sole proprietorship
E-Mail: [email protected]
Phone: +49 1590 5440499

The owner operates under the small-business regulation pursuant to § 19 (1) UStG (German VAT Act); no VAT identification number exists.

2. External hosting

This website is delivered via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When pages are accessed, technical access data (in particular IP address, date and time of request, user agent, transferred data volume) is processed on the server side to ensure content delivery and security of the service.

Legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure, performant and reliable provision of this website. To the extent data is transferred to the USA, Cloudflare relies on appropriate safeguards under the GDPR, in particular the European Commission's Standard Contractual Clauses.

3. Server logs

When accessing the site, technical logs are collected (IP, timestamp, user agent). These are stored for at most 7 days (Cloudflare edge logs) and not merged with other data. Legal basis: Art. 6(1)(f) GDPR (security, stability).

4. Plausible Analytics

We use Plausible Analytics, hosted in the EU (Plausible Insights OÜ, Estonia). Plausible sets no cookies, collects no personal data and no IP addresses. Legal basis: Art. 6(1)(f) GDPR.

5. Booking via Cal.com

For online booking we use the Cal.com service, offered by Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. Cal.com is embedded on the Mini-Audit, GEO Setup and Contact pages and is only loaded on interaction or when scrolled into view (lazy-load) to avoid unnecessary third-party connections.

When using the booking, the data entered in the booking form — in particular name, email address, chosen slot and, where applicable, additional fields requested by Cal.com — as well as technical connection data is transmitted to and processed by Cal.com. Legal basis is Art. 6(1)(a) GDPR (consent to the booking) and Art. 6(1)(b) GDPR (initiation and performance of pre-contractual measures).

As Cal.com is based in the USA, transfer of personal data to a third country may occur. Cal.com relies on appropriate safeguards under the GDPR for this transfer, in particular the European Commission's Standard Contractual Clauses. Details on the processing by Cal.com can be found in the Cal.com privacy policy at https://cal.com/privacy.

6. Mini-audit request via the form

If you request a mini-audit via the form on the Mini-Audit page, we process the information from the form: name, company, website, company email address, industry, your confirmation and the time of the request. We use it to review the request, prepare the mini-audit for your company, send you the result by email and, if you wish, arrange a call. The questions we enter into AI systems for the mini-audit contain no personal data from the form. There is no newsletter, and we do not pass the data on to third parties other than the service provider named below.

When you submit the form, your browser transmits the information directly to a Google service (Google Apps Script), which stores it in a Google Sheets spreadsheet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. For technical reasons, Google receives your IP address during the transmission. We send you the result from our email account, which is also hosted by Google. Transfer to the USA cannot be ruled out; Google relies on appropriate safeguards for such transfers, in particular the European Commission's Standard Contractual Clauses. Details: https://policies.google.com/privacy. The form sets no cookies. Plausible only counts anonymously that a form was submitted, without your details.

Legal basis is Art. 6(1)(b) GDPR: you request the mini-audit, and we handle this request prior to a possible contract. Requests we do not accept are deleted after 30 days at the latest. All other requests are deleted six months after receipt if no engagement has resulted. Where statutory retention obligations apply, we keep the data concerned for their duration. You can withdraw your request at any time; an informal email to [email protected] is sufficient, and we will then delete your details unless a retention obligation applies. Your further rights are set out in the section "Your rights".

7. Video calls / Google Meet

Calls scheduled through the booking tool are generally held as video conferences via Google Meet, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC. When participating in a video conference, connection and usage data (e.g. IP address, device and browser information, audio/video data during the call) is processed by Google.

Legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures and the call itself). Transfer to third countries (USA) cannot be ruled out; Google relies on appropriate safeguards for such transfers, in particular the European Commission's Standard Contractual Clauses. Details on processing by Google are described in the Google privacy policy at https://policies.google.com/privacy.

8. Contact

When contacting us by email, phone or LinkedIn, we process the information provided (in particular name, contact details, content of the message) to handle the request. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

9. Your rights

You have the right to information (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21) to processing. Requests to [email protected]. Right to lodge a complaint with the competent supervisory authority.

10. Cookies

This website does not set any cookies of its own. Your theme preference (light/dark mode) is stored exclusively locally in your browser (localStorage); this information is not transmitted to us. No tracking cookies. Plausible sets no cookies.

11. DPA on setup/retainer engagements

On setup and retainer engagements we sign a Data Processing Agreement (DPA) per Art. 28 GDPR. Technical and organisational measures (TOMs) are documented separately on request.