Privacy policy

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):
blueanima Advisory GmbH i. Gr., represented by Mathias Übler
Ludwigstraße 8, 80539 Munich, Germany
Email: info@blueanima.de

2. Overview

This website deliberately uses no contact forms and no cookies. No tracking or analytics services are used. Fonts are served locally from the web server; no connections to Google Fonts or other font services are established. Personal data is processed only to the technically necessary extent described below.

3. Hosting

This website is delivered via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”). When you visit the website, Cloudflare processes technically necessary data (see section 4) on servers of a global network that may also be located outside the European Union. The legal basis is our legitimate interest in the secure and efficient provision of the website (Art. 6 (1) (f) GDPR).

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Where data is transferred to the United States, the transfer is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR); Cloudflare is certified under the EU-US Data Privacy Framework. Standard contractual clauses (Art. 46 (2) (c) GDPR) apply in addition.

4. Server log files

When you visit the website, information transmitted by your browser is recorded automatically: IP address, date and time of access, page accessed, browser type and version, operating system and referrer URL. This data is used to ensure operation, security and error analysis (Art. 6 (1) (f) GDPR) and is deleted automatically after a short period.

5. Contact and appointment booking

If you contact us by email, we process the data you provide (name, email address, content of the message) to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR. We delete the data once it is no longer required for its purpose and no statutory retention obligations apply.

Emails to us are processed via Microsoft 365 (Exchange Online); the provider for the European Economic Area is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft. The data is stored in data centres within the EU. Where data is transferred to the United States in individual cases, the transfer is based on the EU-US Data Privacy Framework (Art. 45 GDPR), under which Microsoft is certified, and in addition on standard contractual clauses (Art. 46 (2) (c) GDPR).

Information from your enquiry is transferred to our CRM system (Zoho CRM; provider for the European Economic Area: Zoho Corporation B.V., Beneluxlaan 4b, 3527 HT Utrecht, Netherlands) for further processing. Processing takes place on servers within the EU; no transfer to a third country occurs. A data processing agreement pursuant to Art. 28 GDPR is in place with Zoho. The legal basis is as above, Art. 6 (1) (b) or (f) GDPR.

To arrange an appointment, we link to a booking page hosted by Microsoft (Microsoft Bookings; provider for the European Economic Area: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). The link takes you to a page operated by Microsoft; Microsoft’s privacy notices apply there, and cookies can only be set there. None of it is embedded in this website. The data you enter when booking (name, email address and your notes on the appointment) arrives in our Microsoft 365 mailbox and is processed to prepare and hold the appointment. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR.

6. No cookies, no tracking

This website does not set cookies and does not use analytics, tracking or marketing services.

7. Links to external services

This website links to our profiles on LinkedIn. These are plain links, not embedded plugins: no data is transmitted to LinkedIn when you visit this website. LinkedIn only processes data under its own privacy notices once you follow a link.

8. Your rights

You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); for Bavaria: Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

Providing personal data is not required by law or contract; without your details, however, we cannot handle an enquiry. There is no automated decision-making, including profiling (Art. 22 GDPR).

9. Right to object under Art. 21 GDPR

Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal objection to info@blueanima.de is sufficient.

10. Version

October 2026