Privacy Policy
This is an English translation of the German Datenschutzerklärung, provided for convenience. In case of any discrepancy, the German version prevails.
1. Controller
The controller responsible for data processing on this website is:
Dr Carsten Brockmann, BroConsult
Hopfengartenstr. 6, 86899 Landsberg am Lech, Germany
E-mail: carsten.brockmann@t-online.de
2. General information on data processing
This website is a purely informational presence. It does not use cookies, analytics or tracking services, or contact forms, and it does not embed third-party content (such as fonts, maps or videos). Personal data is processed only to the technically necessary extent described below, and when you provide it to me yourself, for example by e-mail.
3. Hosting and server log files
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you access the website, Netlify automatically collects information in so-called server log files that your browser transmits. This includes in particular your IP address, the date and time of access, the page requested, the volume of data transferred, the browser type and version, and the operating system used.
This processing is based on Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website securely, reliably and free of errors. According to its own statements, Netlify retains these log data for a maximum of 30 days. The data is not combined with other data sources.
A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify. As Netlify is based in the USA, personal data may be transferred to a third country. Netlify is certified under the EU-US Data Privacy Framework; in addition, the EU Commission's standard contractual clauses have been agreed. Further information is available in Netlify's privacy policy at netlify.com/privacy.
4. Contact by e-mail
If you contact me by e-mail, the information you provide (e-mail address, name, content of the message and any other data you supply) will be stored for the purpose of handling your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). The data will be deleted as soon as it is no longer required for this purpose and no statutory retention obligations apply.
5. External links (LinkedIn)
This website contains a link to my LinkedIn profile. This is a plain link, not an embedded plugin; no data is transmitted to LinkedIn when you merely visit this website. Only when you click the link do you leave this website. LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is responsible for data processing on LinkedIn. Information is available at linkedin.com/legal/privacy-policy.
6. Your rights
With regard to the personal data concerning you, you have the following rights vis-à-vis me:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise your rights, an e-mail to the address given above is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
7. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address line of your browser changes from "http://" to "https://" and by the padlock symbol in your browser bar.
8. Validity and changes to this privacy policy
This privacy policy is currently valid and was last updated in September 2026. Further development of the website or changes in legal requirements may make it necessary to amend this privacy policy.
Last updated: September 2026