As of 28 September 2026. This is an English translation of the Datenschutzerklärung. The German version is legally binding.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is
Alexander Gilburg
Suarezstr. 3
14057 Berlin
Germany
Email alex@alexgilburg.com
Phone +49 172 7708914
I am not required to appoint a data protection officer.
2. Overview
This website presents my consulting services and lets you book a call. I only process personal data where this is necessary for the secure operation of the website or for handling your enquiry, or where you have given consent. I do not sell personal data, and I do not use it for automated decision-making or profiling.
3. Hosting and server log files
This website is hosted by Namecheap, Inc., USA. When you visit the website, the server automatically records technical information that your browser transmits, in particular your IP address, the date and time of access, the page requested, the previously visited page, the browser and operating system used, and the amount of data transferred.
This is necessary to deliver the website and to ensure its stable and secure operation. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the secure and error-free operation of the website. Log files are kept only as long as necessary for these purposes and are then deleted. A data processing agreement is in place with the host. Transfers to the USA are based on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the EU Standard Contractual Clauses.
4. Security
This website uses the security plugin Wordfence by Defiant, Inc., USA, to protect against attacks. For this purpose, Wordfence processes visitors’ IP addresses and request data and compares them with lists of known threats. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in protecting the website and its visitors from misuse. The safeguards described in section 3 apply to transfers to the USA.
The website is delivered over an encrypted SSL/TLS connection, which you can recognise by “https” in your browser’s address bar.
5. Cookies and consent
This website uses the consent tool Complianz. On your first visit, a banner asks which categories of cookies and similar technologies you allow. Technically necessary cookies, including the cookie that stores your choice, are set on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies and services, in particular for statistics, are only activated after your consent, on the basis of § 25(1) TDDDG and Art. 6(1)(a) GDPR.
You can change or withdraw your consent at any time with effect for the future via the “Manage consent” link at the bottom of the page. Details of the cookies can be found in the cookie policy.
6. Statistics with Google Tag Manager, Google Analytics and Jetpack Stats
With your consent, this website uses Google Tag Manager and Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager only manages the integration of other services. Google Analytics uses cookies to analyse how visitors use the website, for example which pages are viewed and how long visits last. Google shortens IP addresses within the EU before processing them further.
Also only with your consent, this website uses the statistics feature of Jetpack (Jetpack Stats) by Automattic, Inc., USA. Page views and technical information such as your IP address, your browser and the previously visited page are recorded and processed by Automattic into aggregated visitor statistics.
The legal basis for both services is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data may be transferred to Google LLC and Automattic, Inc. in the USA. Transfers are based on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the EU Standard Contractual Clauses. You can withdraw your consent at any time via the “Manage consent” link.
7. Google Fonts
This website may display fonts from Google Ireland Limited. These are only loaded from Google’s servers after you consent via the cookie banner. Until then, a standard font installed on your device is used. When the fonts are loaded, your IP address is transmitted to Google.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you can withdraw at any time via the “Manage consent” link. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework.
8. Image delivery via Jetpack
To make images load quickly, this website uses Jetpack’s image delivery network by Automattic, Inc., USA. Images are delivered from Automattic’s servers, which receive your IP address and technical request data in the process. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in fast and reliable delivery of the website. The safeguards described in section 3 apply to transfers to the USA.
9. Booking via Cal.com
You can book a call via an embedded calendar from Cal.com, Inc., USA. When the calendar loads, Cal.com receives your IP address and technical request data. When you book an appointment, Cal.com processes the details you enter, usually your name, email address, the chosen time and any notes, and forwards them to me.
The legal basis for processing your booking is Art. 6(1)(b) GDPR, as it serves to initiate a possible business relationship. Loading the calendar is based on Art. 6(1)(f) GDPR. My legitimate interest lies in offering a simple way to arrange appointments. I store booking data for as long as necessary to hold and follow up on the call, and then delete it unless a business relationship arises or statutory retention periods apply. The safeguards described in section 3 apply to transfers to the USA.
10. Contact by email or phone
If you contact me by email or phone, I process the details you provide, such as your name, contact details and the content of your message, in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a possible or existing contract, and otherwise Art. 6(1)(f) GDPR, based on my legitimate interest in answering enquiries. I delete the data once your enquiry has been dealt with, unless statutory retention obligations apply, for example under commercial or tax law.
11. Link to LinkedIn
This website contains a simple link to my LinkedIn profile. No data is transmitted to LinkedIn unless you click the link. After that, LinkedIn’s privacy policy applies.
12. Your rights
You have the right to access the personal data I hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18), and to data portability (Art. 20). Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3)).
Right to object. Where I process your data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). I will then no longer process the data unless I can demonstrate compelling legitimate grounds that override your interests.
To exercise these rights, a message to alex@alexgilburg.com is enough.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.
13. Changes to this privacy policy
I update this privacy policy when the website or the legal requirements change. The current version always applies.