Privacy
policy

INFORMATION UNDER ART. 13 / 14 GDPR · LAST UPDATED 2026-08-19

Controller

Crestworks Consulting GmbH
Tal 44
80331 Munich, Germany
hello@crestworks.co

No data protection officer appointed. Privacy enquiries: Dr. Philipp Bauer, hello@crestworks.co.

Scope

This site is a single static page. It runs no analytics, sets no cookies, embeds no third-party fonts, media or trackers, and has no contact form. All assets are served from the site's own domain.

Server log data

When you open this site, our hosting provider processes the data your browser transmits automatically: IP address, date and time of the request, the file requested, referrer URL, browser and operating system. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in operating and securing the site.

Hosting provider: GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA (GitHub Pages). Server logs are retained in accordance with GitHub's standard data retention practices.

Contact by email

If you write to us, we process the address and the content of your message to answer it. The legal basis is Art. 6 (1) (b) or (f) GDPR. We keep such correspondence for as long as needed to handle the matter and to meet statutory retention obligations.

Recipients and transfers

We pass personal data on only where a processor is needed to operate this site, on the basis of a data processing agreement under Art. 28 GDPR. No transfer to a third country takes place.

Processor: GitHub, Inc. (hosting). A data processing agreement is in place under Art. 28 GDPR.

Your rights

  • Access to your data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interest (Art. 21 GDPR)
  • Withdrawal of consent at any time, with effect for the future (Art. 7 (3) GDPR)

To exercise any of these, write to hello@crestworks.co.

Right to lodge a complaint

You may complain to a supervisory authority, for us the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, Ansbach).

Changes to this policy

We update this policy when the site changes. The version in force is the one published here.

NB

Pending final legal review before go-live.