Privacy policy

Last updated: March 2026

1. Controller

The controller responsible for data processing on this website is:

Roland Hassel Consulting

Mörchinger Str. 94

14169 Berlin, Germany

Phone: +49 157 73165859

Email: consulting@roland-hassel.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. Overview of Data Processing

Types of Data Processed

We process the following categories of personal data on this website:

  • Contact data (e.g., name, email address, phone number) when you submit our contact form

  • Usage data (e.g., pages visited, time of access, referring URL)

  • Technical data (e.g., IP address, browser type, operating system, device information)

  • Cookie and tracking data (see Section 7)

Legal Bases

We process your personal data based on the following legal bases under the General Data Protection Regulation (GDPR):

  • Art. 6(1)(a) GDPR — Your consent (e.g., for cookies and analytics)

  • Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures (e.g., responding to your inquiry)

  • Art. 6(1)(f) GDPR — Our legitimate interests (e.g., website security, optimization)

3. Hosting and Content Delivery

This website is hosted by Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA.

When you visit this website, Squarespace automatically collects and stores information in server log files that your browser transmits, including your IP address, date and time of access, pages visited, browser type, and operating system.

Squarespace processes data in the United States. Data transfers to the US are covered by the EU–US Data Privacy Framework. For more information, see Squarespace's privacy policy at https://www.squarespace.com/privacy.

The use of Squarespace is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable and secure presentation of our website.

4. Contact Form

When you use our contact form, the data you provide (name, email address, message content, and any other information you voluntarily include) will be stored and processed for the purpose of handling your inquiry and any follow-up questions.

Processing of this data is based on Art. 6(1)(b) GDPR if your inquiry relates to a potential contractual relationship, or Art. 6(1)(f) GDPR based on our legitimate interest in responding to inquiries. Data submitted via the contact form will be retained until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies.

5. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses cookies to analyze your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We have activated IP anonymization on this website, meaning your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted.

Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide us with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings. You can also prevent the collection and processing of data generated by the cookie by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout.

The use of Google Analytics is based on your consent pursuant to Art. 6(1)(a) GDPR. Consent can be revoked at any time.

Data transfer to the US is covered by the EU–US Data Privacy Framework. For more information, see Google's privacy policy: https://policies.google.com/privacy.

6. Google Fonts

This website uses Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the uniform display of fonts.

When you access a page on this website, your browser loads the required fonts from Google servers. In doing so, your IP address and browser information are transmitted to Google. Google Fonts may also be served through Squarespace's CDN.

If Google Fonts are loaded from Google servers, this is based on your consent pursuant to Art. 6(1)(a) GDPR. We recommend self-hosting fonts to avoid this data transfer. If fonts are served through Squarespace's CDN, this processing is based on Art. 6(1)(f) GDPR (legitimate interest in uniform website presentation).

For more information, see Google's privacy policy: https://policies.google.com/privacy.

7. Cookies

This website uses cookies. Cookies are small text files stored on your device by your browser. Some cookies are technically necessary for the functioning of the website ("essential cookies"). Others help us analyze how the site is used or improve the user experience ("non-essential cookies").

Non-essential cookies (including those from Google Analytics) are only set with your explicit consent. You can manage or withdraw your consent at any time through the cookie settings on this website.

Types of cookies used:

  • Essential cookies — Required for basic website functionality (legal basis: Art. 6(1)(f) GDPR, legitimate interest)

  • Analytics cookies — Used by Google Analytics to collect usage statistics (legal basis: Art. 6(1)(a) GDPR, consent)

  • Third-party cookies — May be set by embedded social media content (legal basis: Art. 6(1)(a) GDPR, consent)

8. Social Media

This website contains links to and/or embedded content from social media platforms (such as LinkedIn). When you interact with these features, data may be transmitted to the respective platform providers.

We have no control over the data collected by social media platforms. For information about data processing by these platforms, please consult their respective privacy policies.

Social media embeds that transmit data are only activated with your consent pursuant to Art. 6(1)(a) GDPR.

9. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights with regard to your personal data:

Right of access (Art. 15 GDPR) — You have the right to request confirmation as to whether personal data concerning you is being processed and, if so, to request access to that data and further information.

Right to rectification (Art. 16 GDPR) — You have the right to request the correction of inaccurate personal data or the completion of incomplete data.

Right to erasure (Art. 17 GDPR) — You have the right to request the deletion of your personal data, subject to certain conditions.

Right to restriction of processing (Art. 18 GDPR) — You have the right to request that the processing of your data be restricted under certain circumstances.

Right to data portability (Art. 20 GDPR) — You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to object (Art. 21 GDPR) — You have the right to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR, including profiling. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent (Art. 7(3) GDPR) — You have the right to withdraw any consent you have given at any time. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint — You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59-61 10555 Berlin Germany Phone: +49 30 13889-0 Email: mailbox@datenschutz-berlin.de Website: https://www.datenschutz-berlin.de

10. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

  • Contact form data: retained until the inquiry is fully resolved, then deleted unless legal retention periods apply

  • Analytics data: anonymized after 14 months (Google Analytics default setting)

  • Server log files: deleted after 7 days

Statutory retention obligations (e.g., under German commercial or tax law: 6 or 10 years) remain unaffected.

11. Data Security

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data transmission, regular security reviews, and access controls.

12. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements, our services, or data processing practices. The current version is always available on this website. We encourage you to review this page periodically.

Last updated: March 2026