Skip to content
OSPStrategy Consultants
Legal

Privacy Policy

This page is an English convenience version of our German privacy policy. In case of doubt or discrepancy, the German version applies: Datenschutzerklärung (German).

1. Controller

The controller responsible for the processing of personal data on this website is:

OSP Strategy Consultants GmbH
Karlsplatz 3
80335 Munich
Germany

Represented by the Managing Director:
Oktay Süzeroğlu

Phone: +49 89 255 575 806
Email: contact@ospstrategy.com

2. General Information on Data Processing

We process personal data only to the extent necessary to provide and secure this website, to handle inquiries, to carry out pre-contractual measures, or to fulfil contractual and statutory obligations.

Personal data means any information relating to an identified or identifiable natural person. This may include, in particular, names, contact details, communication content, IP addresses and technical usage data.

The applicable legal bases are stated in the following sections.

3. Hosting and Server Log Files

This website is hosted by the following service provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

When this website is accessed, the web server processes technically necessary information, which may include in particular:

  • the IP address of the accessing device,
  • date and time of access,
  • the page or file accessed,
  • the volume of data transferred,
  • the referrer URL,
  • browser type and version,
  • operating system,
  • HTTP status code.

This processing serves to provide the website technically, to ensure its stability and security, to detect attacks and misuse, and to analyze technical errors.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.

IP addresses are anonymized in the hosting provider’s log files at the point of collection. Log files are stored for up to eight weeks and then deleted. Longer storage may occur in individual cases where there are concrete indications of unlawful use or a security-relevant incident.

A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The hosting provider processes the data exclusively within the European Union.

4. Encrypted Transmission

This website uses an encrypted HTTPS connection. This is intended to protect data transmitted between your browser and our server from unauthorized access by third parties.

5. Contacting Us

You can contact us via the contact form, by email, by phone or by other means.

In doing so, we process the data you provide, in particular:

  • name,
  • company,
  • business email address,
  • phone number (voluntary),
  • selected topic,
  • the content of your message,
  • any further information provided voluntarily.

The processing serves to handle your inquiry, to communicate with you and, where applicable, to prepare or perform a contractual relationship.

Where your inquiry relates to an existing contract or to pre-contractual measures, the processing is based on Art. 6 (1) (b) GDPR. In other cases the processing is based on Art. 6 (1) (f) GDPR; our legitimate interest lies in the proper handling of business and other inquiries and in maintaining existing and potential business relationships.

Protection against misuse: To protect the contact form against automated submissions and misuse, we use an invisible form field (honeypot) and a short-term submission rate limit. For the rate limit, a pseudonymized check value (hash) is derived from the IP address and deleted automatically after a few minutes; the IP address itself is not stored for this purpose. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in protecting our systems against spam and misuse.

The data is deleted as soon as it is no longer required for handling the inquiry and no statutory retention obligations or legitimate interests in further storage exist. If a contractual relationship is established, the data may be further processed within the scope of the business relationship and in accordance with statutory retention periods under commercial and tax law.

6. Cookies and Similar Technologies

This website uses cookies and comparable technical storage mechanisms.

Technically necessary cookies and storage access are used to the extent required to provide the website, the language selection, security functions and the privacy settings you have chosen.

Cookies or comparable technologies that are not strictly necessary are only used with your prior consent.

The storage of information on your terminal equipment, or access to information already stored there, is based on § 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) for technologies requiring consent. Strictly necessary technical operations are based on § 25 (2) TDDDG.

Where personal data is processed in connection with such technologies, this is based on Art. 6 (1) (a) GDPR for services requiring consent.

Further information on the cookies used, their purposes and their storage periods is available at: Cookie Settings

7. Consent Management with Complianz

We use the WordPress plugin Complianz to inform you about the use of cookies and comparable technologies and to manage your consent decisions.

In doing so, technically necessary information is stored, in particular:

  • whether you have consented or declined,
  • which categories you have selected,
  • the time and version of your consent decision,
  • technically necessary consent cookies.

This processing is necessary to store your selection, to avoid repeated prompts on every page view, and to be able to demonstrate that consent was given or declined.

The legal bases are Art. 6 (1) (c) GDPR in conjunction with our accountability obligations under data protection law, and Art. 6 (1) (f) GDPR. Our legitimate interest lies in the legally compliant and user-friendly management of your privacy settings.

You can change or withdraw your decision at any time via the “Cookie Settings” link. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8. Language Selection

This website is available in German and English. We use Polylang to manage the language selection.

A technically necessary cookie may be stored to remember the language you have chosen. This processing serves exclusively to provide the website in your preferred language.

The storage is a strictly necessary technical operation based on § 25 (2) TDDDG; where personal data is processed, the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the explicitly requested language function.

9. Locally Hosted Fonts

The fonts used on this website are served locally from our own server. No connection to Google Fonts servers is established when the website is accessed, and your IP address is not transmitted to Google for loading fonts.

10. Google Analytics 4

We use Google Analytics 4 on this website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics is used exclusively if you have previously consented to the “statistics” category via our consent banner. Before you give consent, no connection to Google is established and no data is transmitted to Google.

The legal bases are your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the Cookie Settings.

Google Analytics uses cookies and comparable technologies that enable an analysis of your use of the website. The data processed includes, in particular, pseudonymous usage identifiers, device and browser information, and information about pages visited and events triggered (e.g. submission of the contact form). Google Analytics 4 does not store IP addresses; location is derived from truncated IP data.

We use the resulting insights to understand the reach, usage and conversions of our website and to develop our offering. Google may also transfer the data to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. User-level data in Google Analytics is retained for 14 months.

Further information is available in Google’s privacy policy at policies.google.com/privacy.

Beyond this, we do not use any other web analytics, tracking or marketing services and do not embed any other content from third-party servers.

11. Recipients of Personal Data

Within OSP Strategy Consultants GmbH, access to personal data is granted only to those persons who need it to perform their tasks.

In addition, data may be transferred to external service providers supporting us in particular in the following areas:

  • hosting and technical provision of the website,
  • maintenance and IT security,
  • email communication,
  • data backup,
  • where applicable, tax, legal or management consulting.

Where service providers process personal data on our behalf, they are contractually bound in accordance with statutory requirements.

Data is only disclosed to other third parties where a legal basis exists, where this is necessary for the performance of a contract, or where you have given your prior consent.

12. Transfers to Third Countries

Personal data is only transferred to countries outside the European Union or the European Economic Area where the statutory requirements of Art. 44 et seq. GDPR are met.

Should service providers established in, or processing data in, a third country be used in individual cases, we will provide separate information in this privacy policy about the respective service, the legal basis and the safeguards applied.

13. Storage Periods

We store personal data only for as long as necessary for the respective processing purpose.

Beyond that, data may be stored where statutory retention obligations exist (in particular under commercial and tax law) or where the data is required for the establishment, exercise or defence of legal claims.

Once the processing purpose ceases to apply and statutory retention periods have expired, the data is deleted or anonymized.

14. Your Rights

Subject to the statutory requirements, you have in particular the following rights:

  • the right of access to the data stored about you,
  • the right to rectification of inaccurate or incomplete data,
  • the right to erasure of your data,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to withdraw consent given, with effect for the future.

Right to object (Art. 21 GDPR): Where processing is based on Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, please contact:
contact@ospstrategy.com

15. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law.

For private companies established in Bavaria, the competent supervisory authority is in particular:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de

You may also contact another competent data protection supervisory authority, in particular the authority of your habitual residence or place of work.

16. No Automated Decision-Making

No exclusively automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place via this website.

17. Updates to This Privacy Policy

We will update this privacy policy whenever the services used, the data processing or the legal requirements change. The version published on this website at the relevant time applies.

Last updated: July 2026