CONTRAS consulting & training services

Privacy policy

This is a translation for your convenience. The German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

CONTRAS K. Hein
Kirsten Hein
Laerchenweg 12
61440 Oberursel
Germany
Phone: +49 (0)6172 – 99 74 050
Email: kirsten.hein@contras.net

2. In brief

This website is deliberately lean: it sets no cookies, uses no analytics or tracking tools and embeds no external services (such as Google Fonts, maps, videos or social media plugins). All fonts and images are loaded directly from our own server.

3. Hosting and server log files

This website is hosted by Pauly-IT Dienstleistungen, Alt-Niedereschbach 9, 60437 Frankfurt am Main, Germany. Pauly-IT uses Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, as a sub-processor. The server is located in a data centre in Germany. When you visit the website, the server automatically processes information transmitted by your browser and stores it in server log files:

  • IP address of the requesting device
  • date and time of access
  • page or file requested and amount of data transferred
  • referrer URL (previously visited page)
  • browser and operating system used

This processing is necessary to deliver the website and to ensure its stability and security. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Log files are deleted automatically after a short period unless they are needed to investigate a specific security incident. A data processing agreement pursuant to Art. 28 GDPR is in place with Pauly-IT.

4. Encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock icon in your browser’s address bar.

5. Contact by email or phone

If you contact us by email or phone, we process the information you provide (e.g. name, contact details, content of your enquiry) in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). We delete the data once it is no longer required and no statutory retention obligations apply.

6. Links to other websites

This website contains links, e.g. to www.contras.net. Data is only transmitted to the operator of the linked site once you click such a link. Their privacy policy applies to any processing there.

7. Your rights

You have the right at any time to access the personal data we hold about you (Art. 15 GDPR), and to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Simply contact us using the details above.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de.

Last updated: November 2026