Website privacy policy

Who we are

This privacy policy explains how Consultinghouse GWB (“Consultinghouse”, “we”) processes personal data when you use our website, contact forms, newsletter signup, and related online services.

Controller: Consultinghouse GWB Contact: [email protected]. Data protection contact (Datenschutzbeauftragter): [email protected] (Consultinghouse GWB, Maximilianstraße 13, 80539 München, Germany).

Data we collect

We may process the following categories of data when you interact with our website:

• Identity and contact details you submit via forms (name, email, organisation, message content)
• Technical data: IP address, browser type, device identifiers, and approximate location
• Usage data: pages visited, referral source, and interaction with site features
• Cookie and analytics data as described in our Cookie Policy

Legal bases & purposes

We process data under GDPR Article 6(1)(b) for contact and mandate inquiries, Article 6(1)(f) for site security and analytics where balanced against your rights, and Article 6(1)(a) where you consent (e.g. optional marketing).

Purposes include responding to inquiries, improving our website, securing our systems, and — with consent — sending insights on capital and policy markets.

Sharing & retention

Data may be shared with hosting providers, email services, and analytics processors under data processing agreements. We do not sell personal data.

Contact form data is typically retained for up to three years unless a business relationship develops, in which case our advisory Data Protection policy applies. Server logs are rotated on a short-term schedule.

Your rights

You may request access, correction, deletion, restriction, portability, or object to processing. Withdraw consent at any time without affecting prior lawful processing. Contact [email protected] or lodge a complaint with BayLDA.

Your privacy rights in the United States

This section applies to residents of US states with consumer privacy laws, including the California Consumer Privacy Act as amended by the CPRA.

In the past twelve months we have collected, through this site, identifiers (such as your name and email address), commercial information you choose to give us in an enquiry, and internet activity (the essential cookies described in our cookie policy). We use it only to answer your enquiry, run the services you ask for, keep the site secure and meet legal duties.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We honour the Global Privacy Control signal as a request to opt out of any such sale or sharing.

To make a request, write to [email protected]. We will verify your request and answer within the time the law allows. You may use an authorised agent. We will not treat you differently for exercising your rights.

• The right to know what personal information we hold about you and how we use it.
• The right to delete personal information we collected from you.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information (which we do not do).
• The right to limit the use of sensitive personal information (which we do not collect through this site).