Skip to content
Kuron Consulting
Legal

Privacy Policy

This is a courtesy translation. The German version is the legally binding original.

Data controller

The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Kuron Consulting GmbH
Woldsenweg 2
20249 Hamburg, Germany

Represented by managing director Stephan Kuron
Email: info@kuron-consulting.de
Phone: +49 40 – 22 85 17 57

Overview

We process personal data only to the extent necessary and in accordance with the GDPR and the German Federal Data Protection Act (BDSG). This website is a purely informational website without an online shop, customer account or newsletter. Below we inform you which data is processed when you visit our website.

Hosting (Cloudflare)

This website is delivered as a static website via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When the website is accessed, Cloudflare, acting as processor, processes technically necessary access data (in particular IP address, date and time of access, file retrieved, amount of data transferred, referrer URL, browser and operating system information) in server log files. This serves to ensure the secure, stable and performant delivery of the website as well as to defend against attacks.

The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable and secure operation). Transfers to the USA are safeguarded on the basis of the EU-US Data Privacy Framework and/or the EU standard contractual clauses. A data processing agreement (Art. 28 GDPR) is in place with Cloudflare.

Fonts

The fonts used (Nunito) are served locally from this website. There is no connection to third-party servers (e.g. Google Fonts); in particular, your IP address is not transmitted to third parties for this purpose.

To obtain and manage consent for non-essential services, we use the consent management platform Usercentrics by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich. The consent banner is loaded when the website is accessed. In doing so, data is processed to document your consent decision (including consent data, IP address in shortened/anonymised form, device and browser information, time of consent, a consent ID). Your decision is stored on your device so that it can be recalled on your next visit.

The legal basis is Art. 6 para. 1 lit. c GDPR (fulfilment of the legal obligation to document consent) as well as Art. 6 para. 1 lit. f GDPR. You can adjust or withdraw your consent at any time with effect for the future by reopening the privacy settings via the consent banner.

Google Tag Manager, Google Analytics & Google Ads

This website uses Google Tag Manager, through which we can integrate further Google services – exclusively after your consent – in particular Google Analytics 4 (traffic measurement) and, where applicable, Google Ads (conversion measurement). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

These services are only loaded and executed via Google Tag Manager after you have given consent in the consent banner. Until then, they are set to “denied” by default via Google Consent Mode v2, so that no analytics or marketing cookies are set and no corresponding data is transmitted. Once the services become active following consent, usage data (including shortened IP address, device and browser information, pages visited, interactions) may be processed and cookies set in order to evaluate use of the website.

The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent is voluntary and can be withdrawn at any time with effect for the future via the privacy settings. In the course of these services, data may be transferred to the USA; this is safeguarded on the basis of the EU-US Data Privacy Framework and/or the EU standard contractual clauses.

Contacting us

If you contact us by email or phone, we process the data you provide (e.g. name, contact details, content of the enquiry) exclusively to process your enquiry and for any follow-up questions. The legal basis is Art. 6 para. 1 lit. b GDPR (if the enquiry relates to a contract) or Art. 6 para. 1 lit. f GDPR (legitimate interest in responding). The data will be deleted as soon as it is no longer required to achieve the purpose and no statutory retention obligations apply.

Appointment booking (SimplyMeet.me)

To book a free initial consultation, we integrate the appointment booking tool SimplyMeet.me on our contact page. The provider is SimplyBook.me Ltd, Limassol, Cyprus. The provider acts as a processor on our behalf (we remain the controller for the booking data); a data processing agreement pursuant to Art. 28 GDPR is in place.

Like all non-essential services, the booking widget is only loaded after your consent via our consent banner. When used, SimplyMeet.me processes the booking data you enter (e.g. name, email address, requested appointment and any further details of your enquiry) as well as technical usage data (in particular IP address, browser type and version, operating system, approximate location, referrer and pages accessed). Cookies are set for this purpose, including for session management and protection against automated access (captcha).

The data is stored on Google Cloud servers in Germany (EU). Through individual sub-processors (including Google reCAPTCHA, Google Analytics, email delivery via Linode), data may be transferred to third countries; this is safeguarded via EU standard contractual clauses, the EU-US Data Privacy Framework, or an adequacy decision (United Kingdom).

The legal basis for loading the widget and setting cookies is your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Processing of the actual appointment request is based on Art. 6 para. 1 lit. b or lit. f GDPR. You can withdraw your consent at any time with effect for the future via the privacy settings.

Further information can be found in SimplyMeet.me’s privacy policy at simplymeet.me/policy and in the data processing agreement at simplymeet.me/en/dpa. The provider’s data protection officer can be reached at dpo@simplybook.me.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

Your rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent given, with effect for the future (Art. 7 para. 3 GDPR)

To exercise your rights, an informal message to info@kuron-consulting.de is sufficient.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
datenschutz-hamburg.de

Currency and changes to this privacy policy

This privacy policy is dated June 2026. It may become necessary to update this privacy policy due to the further development of our website or changes in legal or regulatory requirements.