Privacy policy

As of: October 2026

General information

We take the protection of your personal data very seriously. All personal information is treated confidentially and in accordance with the statutory provisions, as explained in this privacy policy. You can of course use our website without providing any personal data. If personal data such as your name or email address is requested, this is always on a voluntary basis. Data is only passed on to service providers commissioned by us (processors, e.g. our host and Microsoft) and in cases provided for by law. Data transmission over the internet, for example by email, may always be subject to security gaps. Complete protection of data on the internet is not possible.

As our website continues to develop and legal requirements change, adjustments to this privacy policy may become necessary. This privacy policy is therefore updated regularly.

This English version is provided for your convenience. In case of any discrepancies, the German version shall prevail.

Controller

The controller responsible for data processing under the GDPR is:

Selcho Consulting GmbH
Reichertshalde 88/1
71642 Ludwigsburg
Germany

Phone: +49 7141 47 39 320
Email: info@selcho-consulting.com

Represented by Carsten Selcho (Managing Director)

Data processing

When you access our website, general information is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data. It is processed in particular for the following purposes:

• ensuring a smooth connection to the website,
• ensuring smooth use of our website,
• evaluating system security and stability, and for other administrative purposes.

We do not use your data to draw conclusions about you personally. Information of this kind may be evaluated statistically by us in order to optimize our website and the technology behind it.

If you contact us by email or phone, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of handling your request. This data is only passed on to our processors or with your consent. This data is processed on the basis of Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of requests addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested. We delete your request and the associated data no later than six months after it has been fully processed, unless you request deletion earlier and provided that no statutory retention obligations prevent this (e.g. up to six years for commercial and business correspondence under Section 257 of the German Commercial Code, HGB).

Contact form

If you send us a request via the contact form on our website, we process the information you provide (name, email address and, optionally, company, phone number, preferred format and your message) together with the date and time of the request in order to handle your request and contact you. Mandatory fields are marked; without this information we cannot process your request.

The legal basis is Art. 6(1)(b) GDPR if your request is aimed at concluding a contract or at pre-contractual measures; otherwise, our legitimate interest in the effective handling of requests (Art. 6(1)(f) GDPR).

Your request is forwarded by email to our responsible contact persons; you will also receive an automatic confirmation of receipt at the email address you provided. For sending emails, we use Microsoft 365 provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have concluded a data processing agreement with Microsoft. Microsoft generally processes data within the EU; however, access from the USA cannot be ruled out. The transfer is based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR), under which Microsoft is certified, and additionally on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

In addition, your request is stored in our website’s database on our host’s servers so that it is not lost in the event of a disruption to email delivery. We delete your request no later than six months after it has been fully processed, provided that no statutory retention obligations prevent this (see above).

To protect against spam, the form contains a check field that is invisible to you. No additional personal data is collected in the process.

Your rights

Within the scope of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of the data processing (Art. 15 GDPR), as well as the right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) of this data. You also have the right to request the restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). If you have given consent to data processing, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where processing is based on our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

To exercise your rights quickly and easily, please send an email to info@selcho-consulting.com.

External hosting

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (host). The personal data collected on this website is stored on the host’s servers. The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). Our host will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data.

To ensure data processing in compliance with data protection law, we have concluded a data processing agreement with our host.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

Our website only uses technically necessary cookies. Cookies are small text files that are stored on your device and do not cause any harm there. We do not use cookies for analytics or advertising purposes.

Language selection: To keep your selected language (German or English) for your next visit, the cookie “pll_language” is set. It only contains the code of the selected language and is automatically deleted after one year. Storing it is strictly necessary for the function you have requested (Section 25(2) No. 2 TDDDG); further processing is based on our legitimate interest in providing a user-friendly website (Art. 6(1)(f) GDPR).

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited. If cookies from third parties or for analysis purposes are used, we will inform you of this separately in this privacy policy and, if necessary, ask for your consent.

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

IP addresses in the log files are anonymized by our host. The log files are automatically deleted after six weeks.

Fonts

The fonts used on this website are loaded locally from our own server. No connection to third-party servers, such as Google, is established in the process.

Objection to advertising emails

We hereby object to the use of contact data published as part of our legal notice obligation for sending unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services, e.g. when introducing new services. The new privacy policy will then apply to your next visit.