Privacy Policy

1. General Information

This privacy policy informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within this website and about your rights under the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TTDSG).

Controller:
B.Craft GmbH
Sudermanplatz 1
50670 Cologne
Germany
E-Mail: info@business-crafting.de

2. Collection and Storage of Personal Data

When visiting this website, technical data is automatically processed and transmitted by your browser to our server (e.g., IP address, browser type, operating system, referrer URL, time of access).

Processing is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interest in the technically error-free provision of the website).

This website is operated via Squarespace, Inc. (225 Varick Street, 12th Floor, New York, NY 10014, USA).
A data processing agreement pursuant to Art. 28 GDPR has been concluded with Squarespace.
Data transfers to the USA take place on the basis of the EU–US Data Privacy Framework (DPF).

3. Use of Cookies

This website uses cookies to provide essential functionality and to analyze user behavior.
Cookies are small text files stored on your device.

Necessary cookies: Required for the functionality of the website (Art. 6(1)(f) GDPR).

Analytics/marketing cookies: Only set with your consent (Art. 6(1)(a) GDPR).

You can adjust your cookie settings at any time via your browser settings or – where available – through the cookie banner.

4. Analytics Tools – Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics 4 uses cookies and similar technologies to statistically analyze visitor behavior.

IP addresses are anonymized (IP masking), making it impossible to assign data to specific individuals.

Processing takes place on the basis of your consent in accordance with Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future, for example via the cookie settings or by using the opt-out link:
[Disable Google Analytics]

Further information:
https://policies.google.com/privacy?hl=de

5. Embedded Content (e.g., Appointment Booking)

If you use the embedded calendar (e.g., for booking appointments), data will be transmitted to the respective provider (koalendar.com).

Personal data such as name, email address and appointment details may be processed.

Processing is carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR).

6. Google Fonts

This website uses Google Fonts for consistent font display.

The fonts are embedded locally, meaning no connection to Google servers is established.

If Squarespace loads fonts via Google servers, data may be transferred to Google LLC (USA) on the basis of the EU–US Data Privacy Framework.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an appealing website presentation).

7. Contact Form

If you contact us via the contact form, we process the data you provide (name, email address, message) to handle your request.

Processing is carried out on the basis of Art. 6(1)(b) GDPR (performance of a contract) or your consent pursuant to Art. 6(1)(a) GDPR.

The data will be deleted once your request has been fully processed, unless statutory retention obligations apply.

8. Rights of Data Subjects

You have the right:

• to obtain information about your stored data (Art. 15 GDPR),

• to request rectification of inaccurate data (Art. 16 GDPR),

• to request erasure (“right to be forgotten”, Art. 17 GDPR),

• to request restriction of processing (Art. 18 GDPR),

• to data portability (Art. 20 GDPR),

• to object to processing (Art. 21 GDPR),

• to lodge a complaint with a supervisory authority (Art. 77 GDPR).

9. Withdrawal of Consent

You may withdraw your consent at any time with effect for the future. An informal email to datenschutz@business-crafting.de is sufficient.

10. Data Security

This website uses SSL/TLS encryption to protect the transmission of confidential content.

You can recognize a secure connection by “https://” in your browser’s address bar and the lock symbol.

11. Data Processing Agreements

Data processing agreements pursuant to Art. 28 GDPR have been concluded with all external service providers (e.g., Squarespace, Google).

12. Updates to this Privacy Policy

We reserve the right to update this privacy policy to ensure it always complies with current legal requirements.

Valid from: October 2025