Last updated: 9 September 2026
We take the protection of your personal data seriously. This policy explains what data we process when you use this website, why, on what legal basis, and what rights you have. Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law.
1. Controller
The controller is the operator of this website. Full operator details are set out in the Legal Notice. For data-protection questions, use the contact form.
2. Hosting and server log files
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA ("Netlify"), acting as our processor. Netlify may process IP address, request time, requested page, referring URL, browser and operating-system information to provide the website securely. The legal basis is Art. 6(1)(f) GDPR.
Netlify is certified under the EU–US Data Privacy Framework, with EU Standard Contractual Clauses as an additional safeguard. A data-processing agreement is in place under Art. 28 GDPR.
3. Contact, enquiries and appointment booking
When you submit the contact form, we process your name, work email address, company, industry and message. Netlify processes and stores submissions on our behalf. The data is used to respond to your enquiry under Art. 6(1)(b) or Art. 6(1)(f) GDPR and retained only as long as necessary, subject to statutory retention duties.
Appointment links lead to Calendly LLC in the United States. Calendly processes the details you enter under its own privacy policy and is certified under the EU–US Data Privacy Framework.
PPWR email updates
If you sign up for PPWR updates, we use your email address and recorded consent to manage your subscription and send news, European Commission guidance and our perspectives. Newsletter requests are collected and stored through Netlify Forms separately from enquiries. To withdraw your consent and stop receiving updates, email hello@ppwr.consulting. We remove you from the mailing list when you unsubscribe.
4. Web fonts
This website uses Bricolage Grotesque and Plus Jakarta Sans, stored and served from our own hosting. No connection to Google or another third-party font provider is established when the fonts load.
5. Analytics
This website uses Google Analytics 4 and Google Ads conversion measurement only after you give consent through the cookie banner. Google may process shortened IP address, device and browser data, and on-site interactions. The legal basis is Art. 6(1)(a) GDPR. You can withdraw consent by clearing the consent stored in your browser. Data may be transferred to Google LLC in the United States; Google is certified under the EU–US Data Privacy Framework.
6. Cookies
Before consent, analytics and advertising storage are denied. A local-storage entry remembers your choice so the banner is not repeatedly shown. If you consent, Google Analytics and Google Ads may set cookies as described above.
7. Your rights
You have rights of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent under Articles 7 and 15–21 GDPR. You may also lodge a complaint with a competent supervisory authority under Art. 77 GDPR.
8. Data security
This website uses TLS/SSL encryption to protect transmitted content.
9. Changes
We may update this policy to reflect changes in processing or legal requirements.