DE / EN / ES
Book a call

> legal

Privacy Policy

This privacy policy informs you about which personal data we process, and for what purposes, when you visit our website or use our services.

1. Controller

Florian Müller
Pannierstr. 21
12047 Berlin, Germany
Email: florian@fmconsulting.live

2. Overview and legal bases

We process personal data only insofar as this is necessary to provide a functional website and our content and services. The relevant legal bases are Art. 6(1) GDPR, in particular:

  • lit. a: consent (e.g. newsletter, playing embedded media, web analytics),
  • lit. b: performance of a contract and pre-contractual requests (e.g. booking, consulting enquiries),
  • lit. f: legitimate interests (e.g. secure and stable operation of the website).

3. Hosting (Netlify) and server log files

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When the website is accessed, Netlify processes technically necessary data (in particular IP address, date and time of access, pages accessed, browser type, and operating system) in so-called server log files. This processing is necessary for the operation and security of the website (Art. 6(1)(f) GDPR). Netlify is certified under the EU-U.S. Data Privacy Framework; a data processing agreement is in place with Netlify. Log data is automatically deleted after a short period.

4. Encryption

This website uses TLS/SSL encryption. Data you transmit to us cannot be read by third parties.

5. Contact by email

If you contact us by email, we process the information you provide (email address, name, content of the message) to handle your enquiry (Art. 6(1)(b) GDPR). The data is deleted once it is no longer required for processing and no statutory retention obligations apply.

6. Booking (Calendly)

For booking appointments we link to Calendly, a service of Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA. If you book an appointment via the link, Calendly processes the data you provide (name, email address, chosen slot, optional message) as well as technical data. The legal basis is Art. 6(1)(b) GDPR (arranging an appointment at your request). Calendly is certified under the EU-U.S. Data Privacy Framework. Further information is available in the Calendly privacy policy.

7. Newsletter (Brevo)

To send our newsletter “Der Route Log” we use Brevo, a service of Sendinblue SAS (Brevo), 106 boulevard Haussmann, 75008 Paris, France, a European provider. Sign-up uses the double opt-in procedure: after signing up you receive an email with a confirmation link; only after confirming are you added to the list. We process your email address as well as subscription and unsubscription data. The legal basis is your consent (Art. 6(1)(a) GDPR); you can revoke it at any time via the unsubscribe link in every email. A data processing agreement is in place with Brevo.

8. Embedded content (YouTube, Spotify): two-click solution

We embed videos (YouTube) and podcast episodes (Spotify) in a data-minimizing way: when the page loads, no connection to YouTube or Spotify is established; the preview images are stored on our own server. Only when you actively click “Play” is the respective player loaded and data (including your IP address) transmitted to the provider:

  • YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland), embedded in extended privacy mode (youtube-nocookie.com).
  • Spotify (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden).

The legal basis is your consent through the click (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Details can be found in the privacy notices of Google and Spotify.

9. Web analytics (Google Analytics)

Provided you have consented, this website uses Google Analytics 4, a web analytics service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies or comparable technologies that enable an analysis of your use of the website. IP addresses are truncated before processing (IP anonymization). Processing takes place exclusively on the basis of your consent via the consent banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG); you can revoke it at any time with effect for the future, via the “Cookie settings” link in the footer of every page. Google LLC is certified under the EU-U.S. Data Privacy Framework; a data processing agreement is in place with Google. Without consent, no analytics data is processed.

10. Google Search Console

We use Google Search Console to evaluate how our website is found in Google Search. We are provided exclusively with aggregated search data (e.g. search queries, click counts); no personal data of visitors to this website is transmitted to Search Console.

11. LinkedIn

We link to our profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). This is a simple link; no data is transmitted to LinkedIn when you visit our website. Only when you follow the link do LinkedIn's privacy notices apply.

12. Your rights

Under the GDPR you have the following rights:

  • access to the data processed (Art. 15),
  • rectification of inaccurate data (Art. 16),
  • erasure (Art. 17) and restriction of processing (Art. 18),
  • data portability (Art. 20),
  • objection to processing based on legitimate interests (Art. 21),
  • withdrawal of consent given, with effect for the future (Art. 7(3)).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.

13. Retention period

Unless otherwise stated in this policy, we store personal data only for as long as is necessary for the respective purposes or as long as statutory retention obligations apply.

14. Changes to this privacy policy

We adjust this privacy policy whenever the technology or legal situation changes. The version published here applies in each case.

> last updated: august 2026