Privacy Policy

The controller responsible for data processing on this website is:

The controller determines the purposes and means of the processing of personal data. As we are a small company, we have not appointed a separate data protection officer. For all data protection inquiries, please contact us at the above email address.

2.1 Access Credentials (Session Storage)

When you enter the access code to view protected pages, we store a cryptographic hash in your browser's sessionStorage. This is necessary to maintain your authenticated session.

• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — to provide website functionality
• Storage duration: Until you close your browser
• Storage location: Your browser only (not on our servers)
• Purpose: Session authentication

2.2 Form Submissions (via HubSpot)

When you submit a contact form, producer registration, or early access request, we collect:

• First name and last name
• Email address
• Company name and role (where applicable)
• Any message or information you voluntarily provide

Legal basis: Consent (Art. 6(1)(a) GDPR) — you explicitly submit the form
Storage duration: Until you request deletion or withdraw consent
Purpose: To respond to your inquiry, facilitate network introductions, provide early access

2.3 Analytics and Tracking (HubSpot)

We use HubSpot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA) for website analytics and tracking. HubSpot automatically collects:

• IP address (anonymized)
• Browser type and version
• Operating system
• Referrer URL (the page you came from)
• Pages visited on our website
• Time and date of access

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — to improve website usability and understand visitor behavior
Data transfer: HubSpot processes data in the USA. We have a Data Processing Agreement with HubSpot compliant with GDPR Art. 28.
Storage duration: HubSpot retains analytics data for 13 months
Opt-out: You can block HubSpot tracking by using browser privacy settings or ad blockers

2.4 Google Tag Manager

We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage tracking scripts on our website. Google Tag Manager itself does not collect personal data or set cookies. It serves as a container that triggers other tools (such as Google Analytics) based on your consent settings.

• Legal basis: Consent (Art. 6(1)(a) GDPR) — Google Tag Manager is loaded only after you accept non-essential cookies via our consent banner
• Data transfer: Google Ireland Limited may transfer data to Google LLC in the USA. Standard Contractual Clauses apply
• Privacy Policy: https://policies.google.com/privacy

2.5 Google Analytics (GA4)

We use Google Analytics 4 (Google Ireland Limited) to analyze website traffic and user behavior. Google Analytics collects:

• Pages visited and time spent on each page
• Device type, browser, and operating system
• Approximate geographic location (based on anonymized IP)
• Referral source (how you found our website)
• User interaction events (clicks, scrolls, form submissions)

We have enabled IP anonymization. Google Analytics does not collect personally identifiable information through our implementation.

• Legal basis: Consent (Art. 6(1)(a) GDPR) — loaded only after you accept non-essential cookies
• Measurement ID: G-SMZPB5W6YR
• Data retention: 14 months
• Data transfer: Standard Contractual Clauses apply
• Opt-out: You can reject non-essential cookies via our consent banner or install the Google Analytics Opt-out Browser Add-on
• Privacy Policy: https://policies.google.com/privacy

2.6 Server Logs

Our hosting provider automatically collects and stores information in server log files:

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing computer
• Time of the server request

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — to ensure system security and detect abuse
Storage duration: 7 days, then automatically deleted
Purpose: Technical operation and security

3.1 Session Storage (Essential)

We use browser sessionStorage (not cookies) to maintain your login session. This data:

• Is stored only in your browser
• Is never transmitted to our servers
• Is automatically deleted when you close your browser
• Cannot be accessed by other websites

3.2 HubSpot Cookies

HubSpot sets the following cookies:

You can block these cookies through your browser settings without affecting core website functionality.

3.3 Cookie Consent

When you first visit our website, a cookie consent banner is displayed at the bottom of the page. You have two options:

• Accept all: All cookies and tracking tools (HubSpot, Google Tag Manager, Google Analytics) are loaded
• Reject non-essential: Only essential functionality is loaded. No analytics or marketing cookies are set

Your choice is stored in your browser's localStorage under the key 'efuels_cookie_consent'. The banner will not appear again unless you clear your browser data. You can change your preference at any time by clearing your browser's localStorage and revisiting the website.

No tracking scripts are loaded before you make a choice.

3.4 Google Analytics Cookies

We share your data with the following third parties:

HubSpot, Inc. (USA)
Purpose: CRM, analytics, form processing
Legal basis: Data Processing Agreement (Art. 28 GDPR)
Data transfer mechanism: Standard Contractual Clauses (EU-approved)
Privacy Policy: https://legal.hubspot.com/privacy-policy

We do not:

• Sell your data to third parties
• Use your data for automated decision-making or profiling
• Share your data with advertising networks
• Transfer data outside the EU/EEA except as described above

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — Request a copy of all data we hold about you
• Right to rectification (Art. 16 GDPR) — Correct inaccurate or incomplete data
• Right to erasure (Art. 17 GDPR) — Request deletion of your data
• Right to restriction (Art. 18 GDPR) — Limit how we process your data
• Right to data portability (Art. 20 GDPR) — Receive your data in a structured, machine-readable format
• Right to object (Art. 21 GDPR) — Object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3) GDPR) — Withdraw consent at any time

To exercise any of these rights, email us at: [email protected]
We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

• HTTPS encryption for all data transmission
• Access code protection (SHA-256 hashing) for authenticated areas
• Regular security updates to our systems
• Restricted access to personal data within our organization
• Data Processing Agreements with all third-party processors

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

This website is intended for business use only and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately at [email protected] and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The current version is always available on this page. We will indicate the effective date at the top of the policy.

If we make material changes, we may notify you by email (if we have your contact information) or by placing a prominent notice on our website.

For questions about this Privacy Policy or our data practices:
Email: [email protected]
Phone: +49 (0)89 29 19 27 0

cb & Partner Consulting GmbH
Beta-Straße 10A (Eingang Haus A)
85774 Unterföhring
Germany