Privacy notice

Controller. Martin Breitsprecher – contact details and full legal information in the Impressum.

What this portal processes. The portal exists to give my clients access to their project information. For that purpose it processes: your name and email address (as provided by your organisation for access), sign-in events and an access log (timestamp, event, email, IP address – kept for security auditing), session data, questions you submit through the contact form, and formal sign-off decisions you record (decision, name, timestamp). Legal basis is the performance of the consulting engagement with your organisation and my legitimate interest in securing the service (Art. 6(1)(b) and (f) GDPR).

Sign-in emails. Signing in works via one-time links sent to your email address; these emails are delivered through my transactional mail provider. You will also receive a short notification email when a new project update is published – you can opt out at any time by letting me know.

Cookies. The portal sets a single, strictly necessary session cookie after sign-in. There is no tracking, no analytics, no third-party embeds and no advertising – hence no cookie consent banner is required or shown. Your dark/light theme preference is stored locally in your browser only.

Hosting. The portal runs on infrastructure operated by me at Hetzner (Germany, EU). Data does not leave the EU.

Retention. Project content, decisions and time records are kept for the duration of the engagement and statutory retention periods. Access logs are kept for a limited period for security purposes. When your access is removed, your sessions are invalidated immediately.

Your rights. You have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR, and the right to lodge a complaint with a supervisory authority. For any request, contact martin@breitsprecher.de.