Privacy notice

Controller

Mario Willatowski
REEEM Consulting & Partner
Hohenzollerndamm 105
14199 Berlin
Deutschland / Germany

E-Mail: mwillatowski@reeem-consulting.com
Website: reeem-consulting.com
Telefon / Phone: +49 30 39728968

Please contact me directly with privacy questions or requests to delete your information.

Website delivery and security

The website is provided through OpenAI Sites using Cloudflare infrastructure. Requests involve technical connection data such as IP address, time, requested address and browser details. The purpose is delivery and secure operation, based on Article 6(1)(f) GDPR. Form submissions are stored in a database and uploaded images in object storage.

To limit automated submissions, the application uses short-lived form tokens and hashes derived from IP addresses and time windows. Tokens are valid for 30 minutes and rate limits apply for one hour. Expired entries are cleaned up on subsequent token requests.

Contact and partnership enquiries

We process the information you provide, including name, email address, company, role, message and partnership interests, to handle your enquiry. Partnership and assignment enquiries are private. Processing is based on your consent under Article 6(1)(a) GDPR and, where necessary for a specific pre-contractual or contractual enquiry, Article 6(1)(b). Required fields are identified in the form. Without them, the form cannot be submitted; you may contact us by email instead.

Recommendations, profile links and photos

Recommendations are stored privately for review before publication. Publication requires your consent and manual approval. Your chosen display mode determines whether your name, role and company are shown or the recommendation appears anonymously. Anonymous display does not remove your contact details from the private submission. Your email address is never included in the public recommendation.

A profile or LinkedIn link and photo are optional. Each requires separate permission for public display and is shown only with a named recommendation. Both remain private for anonymous recommendations. Before upload, photos are resized and re-encoded as JPEG in your browser; the original file is not uploaded. Confirmation that you have the necessary image rights is required. Submission and publication are based on Article 6(1)(a) GDPR.

You may withdraw your consent by email at any time, including consent for only the link or photo. This does not affect the lawfulness of earlier processing. Third parties may copy public content; we do not directly control their copies.

Email and notifications

When notifications are enabled, the website uses Resend (Plus Five Five, Inc., USA). Notifications to the operator contain the submission category and a link to the protected administration area, not your message, contact details or photo. Resend processes the operator’s recipient address and technical delivery data. The legal basis is our legitimate interest in promptly handling enquiries, Article 6(1)(f) GDPR.

Direct email correspondence uses the operator’s Google Workspace mailbox. Google processes the email content and metadata needed for this communication. Please avoid sending unnecessary sensitive information.

Downloads, video and external links

The download password is used for decryption in your browser and is not sent to the server. Current downloads require no registration and do not collect email addresses. Registration for future publications has not yet been activated.

Videos and images are served through this website, without an embedded YouTube player. External sites, such as LinkedIn, KfW or industry associations, open when you follow a link and have their own privacy notices.

Cookies and Google Analytics

With your voluntary consent we use Google Analytics 4 to measure page views, active users and traffic sources. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Usage events, device and browser information and cookie identifiers may be processed. Google may process data in the USA. The legal bases are your consent under Article 6(1)(a) GDPR and, for access to your device, Section 25(1) TDDDG.

Our code does not load the Google Analytics tag before consent or when you select “Necessary only”. After consent, cookies named _ga and _ga_… may be set. Our tag uses a 180-day cookie lifetime without automatic renewal; browsers may shorten this. Your choice is saved locally in your browser for up to 180 days. Our tag disables advertising features and Google Signals. Our application code does not send form contents to Analytics.

You can withdraw consent for future processing at any time using “Statistics preferences” at the bottom left. Measurement is then disabled and our code removes accessible Analytics cookies. This does not affect previous processing. Google's event-data retention depends on the Analytics property settings, which still need to be confirmed; this is distinct from the cookie lifetime.

The protected owner administration uses ChatGPT sign-in and displays aggregated Analytics reports through server-side read access. The Google service-account key is not delivered to visitors. See Google’s privacy policy and Analytics cookies. The contractual and international-transfer arrangements still requiring confirmation below also apply to Analytics.

Retention and deletion

Enquiries are retained only for as long as needed to handle them, support subsequent cooperation or meet statutory retention requirements. Published recommendations remain visible until consent is withdrawn or the operator removes them. Evidence of consent may be retained where necessary for legal claims. There is currently no automated retention period for submissions; the operator performs deletion. Fully deleting a submission also removes its associated image and notification record from active application storage.

Recipients and international processing

Private submissions are accessible to the operator. Technical providers support hosting, storage and email communication. These services may involve processing outside the EU or EEA, particularly in the United States.

Verification pending: The specific processing agreements, subprocessors, international transfer mechanisms and platform log and backup retention periods still require confirmation for the accounts used. This notice describes the inspected application code and remains provisional in these respects.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and portability. Consent can be withdrawn for the future. You may object to legitimate-interest processing on grounds relating to your particular situation. The application does not make automated decisions producing legal or similarly significant effects.

You may complain to a supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.

Photo gallery

The photo gallery displays editorially selected original photographs with year, context and role descriptions. New uploads are initially visible only to the operator. Please contact the controller above with questions about a published photograph or a removal request. Earlier website archives may retain earlier image versions.

Private preview and feedback

A preview link supplied by the owner allows you to view the website during maintenance. A necessary, protected access cookie is stored for the remaining validity of the link (up to 30 days). You can remove it using “Leave preview”; the owner may revoke access at any time. With your consent, your optional name, comment and the page path are stored privately for the owner to improve the website. Feedback is not published. You may request deletion using the contact details above; the owner can delete feedback from the administration after processing.