1. Controller responsible for data processing, data protection officer and general principles
(1) We, Björn Jensen Management Consulting GmbH, 73033 Göppingen, Germany (full address see Legal notice), phone: +49 152 525 00 500, email: jensen(at)jensen-consulting.eu, as operator of the websites available at www.jensen-consulting.eu (hereinafter also the “WEBSITE”), are the controller for the processing of personal data of the user of our WEBSITE (“you”) pursuant to Art. 4 No. 7 of the EU General Data Protection Regulation (“GDPR”, in German: DSGVO).
(2) Our data protection officer is Dr. Frederic Dachs, email: dachs@contiq.de, LinkedIn.
(3) In fulfilment of our information obligations, we would like to inform you in detail below about which data is processed when you visit our WEBSITE. We would also like to inform you about the accompanying protective measures we have taken, including those of a technical and organisational nature.
2. Processing of your personal data
(1) Personal data is any information relating to an identified or identifiable natural person. Your personal data therefore includes all data that can be attributed to you directly or indirectly, such as your name, your address, your telephone number or your email address.
(2) We process personal data only if and to the extent that
- you have given us your consent to the processing of your data for one or more specific purposes (Art. 6 (1) subpara. 1 lit. a GDPR);
- the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (Art. 6 (1) subpara. 1 lit. b GDPR);
- the processing is necessary for compliance with a legal obligation to which we are subject (Art. 6 (1) subpara. 1 lit. c GDPR), or
- the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6 (1) subpara. 1 lit. f GDPR).
(3) Which of the legal bases listed in paragraph 2 we rely on for the processing of your personal data in each individual case is set out in the following provisions of this privacy policy.
(4) In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are monitored regularly. Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us jointly with partners. You will receive further information on this when you provide your personal data or in the following provisions of this privacy policy. Where our service providers or partners are based in a country outside the European Economic Area (EEA), we also inform you of the consequences of this circumstance in the following provisions of this privacy policy.
3. Purely informational use of our WEBSITE
(1) In connection with the purely informational use of our WEBSITE, i.e. if you do not otherwise transmit information to us, we only collect the data that your internet browser automatically transmits to our server. The following data is collected in this process:
- IP address of the requesting computer
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (specific page)
- access status/HTTP status code
- amount of data transferred in each case
- website from which the request originates
- browser
- operating system and its interface
- language and version of the browser software.
(2) This data is technically necessary for us to enable you to use our WEBSITE and to ensure its functionality, in particular to display the WEBSITE and to guarantee the security and stability of the WEBSITE. This data is not linked to the personal data of a specific natural person. Our legitimate interest lies in a functioning website. The legal basis is Art. 6 (1) subpara. 1 lit. f GDPR.
(3) We delete your data as soon as it is no longer required to achieve the purpose for which it was collected. Where data is collected for the provision of our WEBSITE, it is deleted when the respective session has ended.
(4) Our WEBSITE is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the data listed above on our behalf on servers in Germany; a data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. Fonts and images are served entirely from this server. No third-party content is loaded when you visit the WEBSITE without your consent.
4. Contact / feedback
(1) If you contact us, for example to give us your feedback, the contact data you provide (e.g. first and last name, email address, telephone number) is processed in order to respond to your enquiries and/or suggestions submitted via the contact form, by email or in any other way. The processing of your data serves exclusively to handle the contact and to prevent misuse and ensure the security of our information technology systems.
(2) The legal basis for the processing of the data is Art. 6 (1) subpara. 1 lit. f GDPR. If your message is aimed at concluding a contract, the additional legal basis for the processing of your data is Art. 6 (1) subpara. 1 lit. b GDPR.
(3) Unless statutory or contractual retention periods prevent the deletion of your personal data, we delete it as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when the conversation with you has ended. As a rule, the conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
(4) Information entered in the contact form is transmitted to our server in encrypted form and delivered to us from there as an email via the IONOS mail server (see section 3 (4)). We do not store your message on the web server itself. If you have given consent in the cookie banner, HubSpot also records your details (see section 8 (2)). To protect against abusive mass requests, we store a non-reversible hash of your IP address together with the time of the request for a maximum of one hour. The legal basis for this is Art. 6 (1) subpara. 1 lit. f GDPR; our legitimate interest lies in the security of our systems.
6. Google Analytics 4 (web analytics)
(1) If you have given your consent via the cookie banner, our WEBSITE uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), with the measurement ID G-3CZZR3CYLV. GA4 is not loaded without your consent.
(2) GA4 processes pseudonymised usage data (including page views, time spent on the site,
approximate location, basic device and browser data) for the statistical evaluation of site
usage. GA4 does not store complete IP addresses. For this purpose GA4 sets the cookies
_ga and _ga_3CZZR3CYLV with a duration of up to two years. No linking with other Google services takes place on the basis of your consent.
The legal basis is Art. 6 (1) subpara. 1 lit. a GDPR (consent) and § 25 (1) TDDDG.
(3) As Google may transfer data to the USA, we rely for this third-country transfer on the Standard Contractual Clauses (SCC) pursuant to Art. 46 (2) GDPR and on the EU-US Data Privacy Framework, under which Google is certified.
(4) You can withdraw your consent at any time via the link “Cookie settings” in the footer or by deleting the Klaro cookies in your browser. Data collected before the withdrawal is deleted by Google after 14 months at the latest.
7. Leadinfo (B2B visitor identification)
(1) If you have given your consent via the cookie banner, our WEBSITE uses the Leadinfo service of Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands (“Leadinfo”). Leadinfo identifies the requesting company (not the individual natural person) on the basis of the IP address and enriches this information with publicly available company data (industry, size, location).
(2) The purpose is B2B contact initiation: to learn which companies show an interest in our content so that appropriate follow-up communication can be made possible where applicable. Natural persons are not identified. The legal basis is Art. 6 (1) subpara. 1 lit. a GDPR (consent) and § 25 (1) TDDDG.
(3) Leadinfo processes the data within the EU. As a rule, no third-country transfer takes
place. Leadinfo sets the cookies _li_id (duration up to two years, recognises
returning visits) and _li_ses (until the end of the session). Our website's
identifier at Leadinfo is LI-67D160E06BD6A.
(4) You can withdraw your consent at any time via the link “Cookie settings” in the footer.
8. HubSpot and LinkedIn Insight Tag
(1) If you have given your consent via the cookie banner, our WEBSITE uses the HubSpot tracking code (account ID 48406808), a service of HubSpot Ireland Ltd., One Sir John Rogerson's Quay, Dublin 2, Ireland, and its parent company HubSpot Inc., USA (“HubSpot”). We use HubSpot to evaluate which content on our WEBSITE attracts interest and to manage our business contacts. We do not use HubSpot's own forms, pop-ups or chat on this WEBSITE.
(2) With your consent, HubSpot also records the information you submit via our contact form (name, email address, phone number, message) and links it to your visit (“Collected Forms”). This allows us to handle your enquiry in our contact management. Without consent, your enquiry only reaches us by email (section 4 (4)).
(3) With your consent, HubSpot also loads the LinkedIn Insight Tag (partner ID 6960634) of
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). It measures
whether visitors come to our WEBSITE after seeing our content on LinkedIn and helps us show
ads on LinkedIn to suitable audiences. LinkedIn sets the cookies bcookie (one
year), lidc (24 hours) and li_gc (six months, stores your cookie
choice at LinkedIn) and processes the page visited, the referring page, IP address, device
and browser data and, if you are logged in to LinkedIn, your LinkedIn identifier. We only
receive aggregated reports from LinkedIn, no data on individual persons. We and LinkedIn are
joint controllers for the processing on LinkedIn (Art. 26 GDPR); LinkedIn provides the agreement as part of its terms for advertisers.
More information:
LinkedIn privacy policy.
(4) With active consent, HubSpot sets the cookies __hstc and
hubspotutk (duration six months, recognise returning visits),
__hssc (30 minutes) and __hssrc (until the end of the session).
Page views, time spent on the site, the source of the visit and device and browser data are
processed in the process.
(5) The legal basis is Art. 6 (1) subpara. 1 lit. a GDPR (consent) and § 25 (1) TDDDG. For the third-country transfer to the USA (HubSpot Inc., Cambridge, MA, and LinkedIn Corporation, Sunnyvale, CA) we rely on the Standard Contractual Clauses (SCC) pursuant to Art. 46 (2) GDPR and the EU-US Data Privacy Framework, to which both companies have acceded.
(6) You can withdraw your consent at any time via the link “Cookie settings” in the footer or by deleting the HubSpot and LinkedIn cookies in your browser.
10. Data security
(1) We use technical and organisational security measures to protect personal data that arises or is collected, in particular against accidental or intentional manipulation, loss, destruction or attack by unauthorised persons. Our security measures are continuously improved in line with technological developments.
(2) Our WEBSITE is encrypted using SSL technology to prevent access by unauthorised third parties. You can recognise the secure transmission by the protocol designation “https://” in the URL bar.
11. Your rights
(1) With regard to the processing of personal data concerning you, you are entitled to the rights listed below vis-à-vis us, subject to the statutory requirements. Please contact us or our data protection officer for this purpose. The contact details can be found under section 1.
a) Right of access
Pursuant to Art. 15 GDPR, you may request confirmation from us as to whether personal data concerning you is being processed by us. In this case, pursuant to Art. 15 (1) GDPR, you have a right of access to the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom we have disclosed or will disclose the personal data, the envisaged storage period or the criteria used to determine the storage period, the existence of a right to rectification or erasure of your personal data as well as to restriction of processing or to object to processing, the existence of a right to lodge a complaint with a supervisory authority, and the existence of automated decision-making, including profiling.
b) Right to rectification
Pursuant to Art. 16 GDPR, you may request from us the rectification without undue delay and/or, taking into account the purposes of the processing, the completion of your personal data if your data is inaccurate or incomplete.
c) Right to erasure
Pursuant to Art. 17 GDPR, you may request from us the erasure of your personal data without undue delay if one of the grounds under Art. 17 (1) lit. a to f GDPR applies. However, the right to erasure of your personal data does not exist in particular to the extent that the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (Art. 17 (3) GDPR).
d) Right to restriction of processing
Pursuant to Art. 18 GDPR, you may request from us the restriction of the processing of your personal data for as long as we are verifying the accuracy of your data which you contest, if you oppose the erasure of your data on the grounds of unlawful processing and instead request the restriction of the use of your data, if you require your data for the establishment, exercise or defence of legal claims, or if you have objected to the processing for as long as it has not yet been established whether our legitimate grounds override yours.
e) Right to notification
Pursuant to Art. 19 GDPR, we communicate any rectification or erasure of your personal data or restriction of its processing pursuant to Art. 16, 17 (1) and 18 GDPR to each recipient to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
f) Right to data portability
Pursuant to Art. 20 GDPR, you have the right to receive the personal data which you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller, provided that the further requirements of Art. 20 GDPR are met, in particular that this is technically feasible.
g) Right to object
Where we base the processing of your personal data on legitimate interests and the balancing of interests pursuant to Art. 6 (1) subpara. 1 lit. f GDPR, you may object to the processing pursuant to Art. 21 GDPR. When exercising such an objection, we ask you to set out the reasons why we should not process your personal data as we have been doing. In the event of a justified objection, we will examine the situation and, pursuant to Art. 21 (1) sentence 2 GDPR, will either cease processing the personal data or demonstrate to you our compelling legitimate grounds for the processing which override your interests, rights and freedoms.
h) Right to withdraw consent
Pursuant to Art. 7 (3) GDPR, you have the right to withdraw any consent given to us under data protection law at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of your consent up to the time of withdrawal.
(2) If you are of the opinion that the processing of your data violates data protection provisions, you also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. Please contact a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
12. Changes to this privacy policy
We reserve the right to change this privacy policy at any time with effect for the future. The current version is available on our WEBSITE. Please visit the WEBSITE regularly and inform yourself about the applicable privacy provisions.
Last updated: 3 November 2026.