Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Marc Aulenkamp
QUESTPEAK
Johanniskamp 12
33378 Rheda-Wiedenbrück
Germany

Phone: +49 176 222 87 620
Email:m.aulenkamp@questpeak.eu

2. General Information on Data Processing

Protecting your personal data is important to me. Personal data is processed exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data is processed only to the extent necessary to provide this website, communicate with you, or handle your inquiries.

3. Hosting and Server Log Files

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA.

When you access this website, technically required data may be processed, including in particular:

• IP address
• Date and time of access
• Requested page or file
• Browser type and version
• Operating system used
• Referrer URL
• Other technical information relating to the request

Processing is based on Art. 6(1)(f) GDPR. My legitimate interest lies in the secure, stable, and technically reliable provision of this website.

Netlify may also process personal data outside the European Union, particularly in the United States. According to Netlify, it is certified under the EU-U.S. Data Privacy Framework. For further international transfers, Netlify also uses the European Commission’s Standard Contractual Clauses.

Netlify processes personal data on my behalf under a data processing agreement pursuant to Art. 28 GDPR. Netlify provides a Data Processing Agreement (DPA) for this purpose, which is incorporated into the applicable contractual terms.

4. Contact by Email or Phone

If you contact me by email or phone, the information you provide, in particular your name, contact details, and the content of your message, will be processed for the purpose of handling your inquiry.

If your inquiry relates to a potential or existing contractual relationship, processing is based on Art. 6(1)(b) GDPR. For other inquiries, processing is based on Art. 6(1)(f) GDPR. My legitimate interest lies in handling and responding to your inquiry.

Email communication is provided through:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

Where IONOS processes personal data on my behalf, processing is governed by a data processing agreement pursuant to Art. 28 GDPR. According to IONOS, for newer contracts this agreement forms part of the contractual terms.

The data will be deleted once it is no longer required to handle your inquiry, unless statutory retention obligations require longer storage.

5. Contact Form

The contact form on this website is provided using Netlify Forms, a service of Netlify, Inc.

When you use the contact form, the information you enter, in particular your name, email address, and message, is transmitted to Netlify, processed there, and made available to me for the purpose of handling your inquiry. Form submissions are stored by Netlify and can be deleted by the website operator.

For pre-contractual or contractual inquiries, processing is based on Art. 6(1)(b) GDPR. For other inquiries, processing is based on Art. 6(1)(f) GDPR.

Netlify Forms also uses automated spam detection. According to Netlify, form submissions are checked for spam using Akismet.

For possible transfers of personal data to the United States, the safeguards described in the section “Hosting and Server Log Files” apply.

Data submitted through the contact form is stored only for as long as necessary to handle the inquiry or as required by statutory retention obligations.

6. Cookies and Similar Technologies

In its current configuration, this website does not use cookies or similar technologies that require consent for analytics, tracking, or marketing purposes.

No services such as Google Analytics, Meta Pixel, or comparable tracking technologies are used.

If this changes in the future, this Privacy Policy will be updated accordingly and, where required by law, consent will be obtained before the relevant processing takes place.

7. Fonts and External Resources

This website uses only system fonts available on the respective end device. No connection is established to Google Fonts or comparable external font providers.

Images, stylesheets, and JavaScript files are provided through this website or the hosting infrastructure used.

No external social media widgets, tracking pixels, or third-party content delivery networks are embedded for analytics or marketing purposes.

8. External Links

This website contains links to external websites, including LinkedIn and websites relating to projects or partners presented on this website.

When you click an external link, you leave this website. From that point onward, data processing is governed by the privacy policy of the respective provider.

9. Recipients of Personal Data

Personal data is shared with service providers only to the extent necessary to operate this website or handle your inquiry.

This includes in particular:

• Netlify, Inc. – website hosting and contact form
• IONOS SE – email communication
• Subprocessors engaged by the above service providers where necessary to provide their services

Where service providers process personal data on my behalf, processing is based on corresponding agreements pursuant to Art. 28 GDPR.

10. Your Rights

Subject to the applicable legal requirements, you have in particular the right to:

• Access your personal data pursuant to Art. 15 GDPR
• Rectification of inaccurate data pursuant to Art. 16 GDPR
• Erasure of your data pursuant to Art. 17 GDPR
• Restriction of processing pursuant to Art. 18 GDPR
• Data portability pursuant to Art. 20 GDPR
• Object to certain processing pursuant to Art. 21 GDPR
• Withdraw consent with effect for the future pursuant to Art. 7(3) GDPR

To exercise your rights, you may contact me using the contact details provided above.

You also have the right to lodge a complaint with a data protection supervisory authority.

For North Rhine-Westphalia, the competent supervisory authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

11. Updates to this Privacy Policy

Last updated: September 2026

This Privacy Policy may be updated if the website, the services used, or applicable legal requirements change.