HSE CONSULTING & MANAGEMENT

Privacy notice

1. Controller

The controller is HSE Consulting & Management GmbH, Hirschstrasse 3, 64653 Lorsch, Germany, represented by Yasin Özüdogru. Contact: info@hse-consulting.net.

2. Hosting and website access

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Technical data such as IP address, time of access, requested page, browser and operating system may be processed in server logs. This supports the availability, stability and security of the website under Article 6(1)(f) GDPR. Technical retention periods depend on the hosting configuration and the requirements of error and security analysis. Provider information: strato.de/datenschutz.

3. Contact form and email

When you contact us, we process your name, email address, message and, where supplied, company and topic. These details are sent to us by email to address your enquiry. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual matters, otherwise Article 6(1)(f) GDPR based on our interest in responding to enquiries. This theme does not create a separate database of form messages.

4. Form security

The form uses a time-limited security token and an unobtrusive spam field. Repeated submission attempts are limited for ten minutes. For this purpose, a hash of the IP address generated with a secret key is temporarily stored in the WordPress database. This form function does not store the full IP address. Processing protects against misuse under Article 6(1)(f) GDPR.

5. Essential browser storage

Your privacy preference is stored under hse-privacy-v1 in local browser storage for six months so that your choice can be remembered. Storage supports the function you requested under Section 25(2)(2) TDDDG and, where personal data is involved, Article 6(1)(f) GDPR. You can reset the entry through Cookie settings in the footer. Language navigation uses page addresses and does not require a language cookie.

6. Analytics, marketing and external content

In the supplied configuration, this website uses no analytics or marketing services, no external CAPTCHA and no automatically embedded maps or videos. Fonts and images are loaded from the website’s own hosting or from your device’s system. Links to other websites connect to the relevant provider only when opened.

7. Recipients and retention

Recipients may include technical hosting and email providers where necessary to operate the website and handle enquiries. Enquiry data is deleted when processing is complete and no legal retention obligations or legitimate grounds require further storage. Statutory retention obligations may apply if an enquiry leads to a contract.

8. Your rights

Subject to the applicable legal conditions, you have rights of access under Article 15, rectification under Article 16, erasure under Article 17, restriction under Article 18 and data portability under Article 20 GDPR. For processing based on legitimate interests, you may object under Article 21 GDPR on grounds relating to your particular situation. Any consent can be withdrawn at any time with future effect. You may lodge a complaint with a supervisory authority, particularly where you habitually reside, work or believe an infringement has occurred.

9. Provision of data and security

Providing contact details is voluntary; we cannot process a form enquiry without the fields marked with an asterisk. The supplied website performs no automated decision-making, including profiling. The website is designed to use encrypted HTTPS connections.

10. Privacy contact

For questions or to exercise your rights, email info@hse-consulting.net. This notice was prepared in November 2026.