Root-to-branch Consulting

Privacy Policy

This privacy policy explains which personal data is processed when you visit this website and when you get in touch, on what legal basis this happens and which rights you have.

Controller

The party responsible for data processing on this website is:

Nuri Schumann
Demmeringstraße 32
04177 Leipzig, Germany

Email: r2b@posteo.de

Hosting

This website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. netcup makes the website available on its servers. In doing so, the technically necessary access data (see below) is processed on our behalf. Where personal data is processed, a data processing agreement pursuant to Article 28 GDPR is in place with the provider. The legal basis is the legitimate interest in the secure and efficient operation of the website (Article 6(1)(f) GDPR).

Access data / server log files

When you visit this website, technical access data, in particular your IP address and the requested resource, is processed to transmit and securely provide the website. The web server's regular access log records only the time, page category, HTTP method, response status and transferred data volume; it does not store IP addresses, full URLs, URL parameters, referrers or browser identifiers. Technical error logs may contain additional details of the affected request. This web server's access and error logs are rotated daily and automatically deleted within seven days, or sooner under high volume. They are kept in volatile storage and are not backed up. The legal basis is Article 6(1)(f) GDPR (legitimate interest in secure and stable operation and the detection of errors and misuse).

The upstream HTTPS proxy does not keep a regular access log. Its operational and error messages may occasionally contain IP addresses. These logs are stored separately and rotated by size (up to three files of 10 MiB each), overwriting the oldest files. No fixed time-based deletion period has yet been configured for these operational logs.

Getting in touch

If you contact us by email, the information you provide (e.g. name, email address and the content of your message) is processed exclusively to handle your enquiry and for the subsequent communication. The legal basis is Article 6(1)(b) GDPR where your enquiry is aimed at concluding or performing a contract, otherwise Article 6(1)(f) GDPR (legitimate interest in responding to enquiries). The data is deleted as soon as the purpose of the communication has been fulfilled and no statutory retention obligations prevent this.

No cookies, no tracking, no embedded third-party services

This website uses no cookies and no analytics, tracking or advertising services of its own. Fonts and all other resources are loaded directly from this server. No external services (such as content delivery networks or third-party web fonts) are embedded.

Your rights

Within the scope of the statutory provisions, you have in particular the following rights:

To exercise your rights, you can contact the controller named above at any time.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint about the processing of your personal data with a data protection supervisory authority (Article 77 GDPR). Competent authorities include the supervisory authority of the federal state in which the controller is established — here the data protection supervisory authority responsible for Saxony.

No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.

Last updated: September 2026.