Site policy
Website privacy policy
How we collect, use, and protect personal data when you visit gwbconsulting.de and related digital properties.
Updated September 2025
Website privacy policy
How we collect, use, and protect personal data when you visit gwbconsulting.de and related digital properties.
Who we are
This privacy policy explains how Consultinghouse GWB (“Consultinghouse”, “we”) processes personal data when you use our website, contact forms, newsletter signup, and related online services.
Controller: Consultinghouse GWB Contact: [email protected]. Data protection contact (Datenschutzbeauftragter): [email protected] (Consultinghouse GWB, Maximilianstraße 13, 80539 München, Germany).
Data we collect
We may process the following categories of data when you interact with our website:
- Identity and contact details you submit via forms (name, email, organisation, message content)
- Technical data: IP address, browser type, device identifiers, and approximate location
- Usage data: pages visited, referral source, and interaction with site features
- Cookie and analytics data as described in our Cookie Policy
Legal bases & purposes
We process data under GDPR Article 6(1)(b) for contact and mandate inquiries, Article 6(1)(f) for site security and analytics where balanced against your rights, and Article 6(1)(a) where you consent (e.g. optional marketing).
Purposes include responding to inquiries, improving our website, securing our systems, and — with consent — sending insights on capital and policy markets.
Sharing & retention
Data may be shared with hosting providers, email services, and analytics processors under data processing agreements. We do not sell personal data.
Contact form data is typically retained for up to three years unless a business relationship develops, in which case our advisory Data Protection policy applies. Server logs are rotated on a short-term schedule.
Your rights
You may request access, correction, deletion, restriction, portability, or object to processing. Withdraw consent at any time without affecting prior lawful processing. Contact [email protected] or lodge a complaint with BayLDA.
Visitors and clients in South Africa
If you use this site from South Africa, the Protection of Personal Information Act, 2013 (POPIA) also applies to our processing of your personal information, alongside the GDPR that governs us as a German firm.
Personal information you give us through this site is processed by Consultinghouse GWB in Germany. The GDPR gives it protection substantially similar to POPIA, which is the basis on which POPIA permits the transfer.
Our Information Officer can be reached at [email protected]. A manual under the Promotion of Access to Information Act (PAIA) is available on request from the same address.
- You may ask whether we hold personal information about you, and for a copy of it.
- You may ask us to correct or delete information that is inaccurate, out of date, excessive or unlawfully obtained.
- You may object to processing, including for direct marketing.
- You may lodge a complaint with the Information Regulator (South Africa).