Privacy policy

Draft. This text has not yet been legally reviewed. Highlighted passages must be completed before publication.

This is a translation. The German version is legally binding.

1. Controller

BRAU Consulting Services LLC, represented by Chris Sprungmann
1415 Atlantic Blvd, Suite B, Neptune Beach, Florida 32266, U.S.A.
Phone +1 904 514 6092, email [email protected]

As we specifically offer our services to people in the European Union, the General Data Protection Regulation (GDPR) applies to the processing of their data.

Representative in the EU under Art. 27 GDPR: [to be completed or legally clarified whether required]

2. Data processing in the USA

We are based in the USA. The website itself runs on servers in a data centre in Europe (see section 3). However, the details you provide via the contact form, email and booking are handled by us in the USA, and our hosting provider is a US company. The USA does not have a general level of data protection applicable to all recipients comparable to that in the EU; US authorities may under certain circumstances access data. The transfer is necessary to answer your enquiry and to carry out pre-contractual measures that you request yourself (Art. 49(1)(b) GDPR).

3. Hosting, server logs and Cloudflare

This website is hosted by GoDaddy Operating Company, LLC, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, USA. The servers are located in a data centre in Europe (operator: Host Europe GmbH, a GoDaddy group company).

To protect against attacks and for encrypted, fast delivery, traffic is routed through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Art. 6(1)(f) GDPR). Privacy information: cloudflare.com/privacypolicy.

When you visit the website, the server automatically stores technical data: IP address, date and time, page accessed, amount of data transferred, referrer as well as browser and operating system. We need this data to provide the website securely and reliably (Art. 6(1)(f) GDPR). It is deleted after no more than [e.g. 14] days unless a security incident requires longer retention.

4. Cookies and tracking

This website does not use cookies for analytics or advertising and does not use tracking. Fonts are loaded locally from our server; there is no connection to Google Fonts.

If you select a language using the language switcher, we store this choice in a cookie named “lang” for one year so that the website greets you in your language on your next visit. Without your selection this cookie is not set; the language is then determined by your browser’s language setting. The password-protected administration area sets a technically necessary session cookie that does not affect visitors.

5. Contact form, email and phone

When you contact us, we process your details (name, email address, optionally phone number, subject, message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. Form enquiries are delivered to us by email.

If you enquire about services of our cooperation partners (e.g. bookkeeping and payroll), we only pass on the necessary contact details to the respective partner after consulting you (Art. 6(1)(b) GDPR). The partner is itself responsible for its further processing.

6. Online booking

When you request an appointment, we store the type of call, preferred date, topic, language, name, email address, phone number and your message on our server and send an email to you and to us. The processing serves to arrange and carry out the initial consultation (Art. 6(1)(b) GDPR). We delete booking requests [e.g. 12 months] after the appointment unless a contract is concluded and there are no statutory retention obligations.

6a. Payment for the initial consultation

You pay for the initial consultation via the payment service Stripe (Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA, or Stripe Payments Europe, Ltd., Dublin, Ireland). For this you are redirected to a Stripe payment page; Stripe does not pass your payment details on to us. We send Stripe a booking number and your email address and receive confirmation of payment from Stripe (Art. 6(1)(b) GDPR). Stripe’s privacy information: stripe.com/privacy.

7. Protection against misuse

To protect forms against automated misuse, we store a non-reversible encrypted value (hash) of your IP address together with the time of the request for a maximum of one day (Art. 6(1)(f) GDPR).

8. Google Maps

On the contact page you can display a Google Maps map. The map is only loaded when you expressly click to do so (Art. 6(1)(a) GDPR). Data such as your IP address is then transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Information on data processing by Google: policies.google.com/privacy.

9. Instagram

On the homepage we show our latest Instagram posts. The posts are retrieved from Instagram by our server and the images are stored on our server. Viewing the homepage therefore does not establish a connection between your browser and Instagram. Only when you click on a post or the link to our profile are you taken to Instagram, a service of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. Instagram’s privacy policy applies there: privacycenter.instagram.com/policy.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time. To do so, please contact [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority in the EU, in particular in the member state of your residence.

11. Changes

We update this privacy policy when the website or the legal situation changes. Last updated: 11/2026 [enter fixed date].