Privacy Policy

1. Controller

The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws is:

Gunt Consulting
Owner: Jonathan Gunt
Schulstraße 33
74252 Massenbachhausen
Germany

Phone: +49 172 9373075
Email: info@gunt-consulting.com

2. General Information on Data Processing

We process personal data of visitors and prospects only to the extent necessary to provide a functional website and our services. Processing is generally based on your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), or our legitimate interests (Art. 6(1)(f) GDPR).

Personal data is deleted as soon as the purpose for processing ceases to apply, provided no statutory retention obligations prevent deletion.

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. On our behalf, Vercel processes data including your IP address, time of access, user agent, and referrer in order to deliver the website and prevent abuse.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and performant delivery of the website). A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel.

For transfers to the United States, Vercel relies on the EU Standard Contractual Clauses and, since July 2023, on the EU-US Data Privacy Framework. For details see vercel.com/legal/privacy-policy.

4. Server Log Files

When you visit this website, our hosting provider automatically records information that your browser transmits (server log files), including:

browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request, and IP address.

This data is not combined with other data sources and is used solely for technical delivery and protection of the website. Legal basis: Art. 6(1)(f) GDPR.

5. Cookies and Consent Management

Our website uses cookies. Cookies are small text files that are stored on your device and that allow your browser to be recognised.

We distinguish between technically necessary cookies, which are required for the operation of the site, and analytical cookies, which are only set with your explicit consent. When you first visit the site, a consent banner (provided by HubSpot) is displayed, which allows you to control each category individually.

You can withdraw your consent at any time with effect for the future. To do so, open the cookie settings again via the link in the banner, or delete the stored cookies in your browser settings. Legal basis for setting analytical cookies is Art. 6(1)(a) GDPR in conjunction with § 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG).

6. HubSpot (Tracking, Forms, Meetings)

We use services provided by HubSpot Ireland Limited, One Dockland Central, Guild Street, North Dock, Dublin 1, D01 E4X0, Ireland. HubSpot is our customer relationship management system and the provider of the consent banner used on this site. Processing takes place within the EU; sub-processors of HubSpot, Inc. in the United States are safeguarded by Standard Contractual Clauses and the EU-US Data Privacy Framework.

6.1 HubSpot Tracking

If you allow the analytics category in the consent banner, HubSpot loads a tracking script and sets cookies (including __hstc, hubspotutk, __hssc, __hssrc). This records, in pseudonymised form, page views, time on page, and a truncated IP address in order to analyse usage behaviour and improve our marketing. Legal basis is your consent under Art. 6(1)(a) GDPR.

6.2 Contact Form

When you use the contact form on this website, the information you provide (in particular first and last name, email address, job title, company, and your message) is transmitted directly to HubSpot and stored in our CRM so we can respond to your enquiry. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in handling business enquiries).

6.3 HubSpot Meetings

On our contact page we embed a HubSpot Meetings scheduling widget. When you book a meeting, the information you provide (name, email, selected time slot) is sent to HubSpot and added to our calendar. Legal basis: Art. 6(1)(b) GDPR.

For more information on data processing by HubSpot, see legal.hubspot.com/privacy-policy.

7. Google Analytics 4

If you allow the analytics category in the consent banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse how visitors use our website.

We have activated IP anonymisation (anonymize_ip). As a result, your IP address is truncated by Google within the member states of the European Union or the European Economic Area before being transferred to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there.

Our Google Analytics property ID is G-CJ358GL8DM. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. For transfers to the US, Google relies on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

Legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. Without your consent, Google Analytics will not be loaded.

For more information on how Google handles user data, see Google's privacy policy: policies.google.com/privacy.

8. Google Fonts

We embed the Manrope typeface via Google Fonts, a service provided by Google Ireland Limited. When the page loads, a connection to Google's servers is established and your IP address is transmitted. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in consistent and fast rendering of our content). For more information: policies.google.com/privacy.

9. Email Contact

If you contact us by email, we store your message along with the contact details you provide in order to handle your enquiry. Legal basis is Art. 6(1)(b) and (f) GDPR. The data is deleted once the purpose for processing ceases to apply, provided no statutory retention obligations prevent deletion.

10. Recipients and Processors

Your data is only shared with third parties where this is necessary to deliver our services or required by law. The processors we currently use include Vercel Inc. (hosting), HubSpot Ireland Limited (CRM, consent banner, forms, meeting scheduling, tracking), and Google Ireland Limited (Analytics, Fonts). Data processing agreements pursuant to Art. 28 GDPR are in place with all processors.

11. Your Rights

With regard to your personal data, you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). You may also withdraw any consent you have given with effect for the future at any time (Art. 7(3) GDPR).

To exercise these rights, an informal message to info@gunt-consulting.com is sufficient.

12. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

13. Changes to This Privacy Policy

We reserve the right to update this privacy policy so that it continues to meet current legal requirements or to reflect changes to our services. The updated version will apply to your next visit.