Privacy policy

Version: October 2026. This English text is provided for convenience; the German version is authoritative.

1. Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

DOJOKUN Consulting UG (haftungsbeschränkt)
Daimlerstraße 20
94419 Reisbach
Germany
E-mail: kontakt (at) dojokun.de

For questions about data protection and to exercise your rights, please contact: datenschutz (at) dojokun.de

2. Principles

We process personal data only insofar as necessary to operate this website, to respond to your enquiries or to conduct our business relationships. This website sets no cookies, uses no analytics or tracking tools and embeds no third-party content. Fonts and other resources are served from our own server; no data is transferred to third parties when you access the site.

3. Visiting the website

3.1 Server log files

When you access this website, the web server automatically processes the following data transmitted by your browser: IP address of the requesting device, date and time of access, page or file requested, volume of data transferred, HTTP status code, previously visited page (referrer), and browser type and operating system (user agent).

Purpose: Delivering the website, ensuring its operation, detecting and defending against faults and attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Retention period: Log files are retained for no longer than 30 days and then deleted, unless they are needed for longer to investigate a specific security incident.

3.2 Hosting

This website is hosted on a dedicated server operated by us, located in a data centre of Hetzner Online GmbH in Germany. Hetzner provides the infrastructure and has no contractually provided access to the content of the server. A data processing agreement under Art. 28 GDPR is in place with Hetzner. No processing outside the European Union takes place as a result of the hosting.

4. Contact by e-mail

If you contact us by e-mail, we process your e-mail address, the details you provide and the content of your message in order to handle your enquiry.

Legal basis: Art. 6(1)(b) GDPR where the enquiry is aimed at concluding or performing a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Retention period: Enquiries unrelated to a contract are deleted once the matter has been dealt with conclusively and no statutory retention obligations stand in the way. Correspondence relating to a contract is subject to the periods set out in section 5.

Without additional encryption, e-mail is not protected against access by third parties. For confidential content, please agree a secure transmission channel with us in advance.

5. Business relationships

In the context of proposals, contracts and engagements we process the data of our contacts at clients, prospects, partners and suppliers: name, business contact details, role and organisation, contract and billing data, and the communication relating to the engagement.

Purposes: Initiating, concluding and performing contracts, invoicing, fulfilling legal obligations, asserting or defending legal claims.
Legal bases: Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (legal obligations, in particular commercial and tax retention requirements), Art. 6(1)(f) GDPR (legitimate interest in maintaining the business relationship and in legal defence).
Retention period: For the duration of the business relationship and thereafter in accordance with statutory retention periods under German law – generally six years for business correspondence, eight years for accounting records and invoices, and ten years for books and annual accounts, in each case from the end of the calendar year.

Data that we process at our clients in the course of engagements is generally processed on their behalf under Art. 28 GDPR; in that respect the respective client is the controller.

6. Recipients

We disclose personal data only where necessary: to our tax advisers for bookkeeping and annual accounts, to the hosting provider named in section 3.2 as processor, and to authorities and courts where a legal obligation exists. No data is passed on for advertising purposes.

7. Transfers to third countries

Transfers to countries outside the European Economic Area take place only insofar as we work for clients in Switzerland. An adequacy decision of the European Commission under Art. 45 GDPR exists for Switzerland.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21). Any consent given may be withdrawn at any time with effect for the future.

To exercise your rights, an e-mail to datenschutz (at) dojokun.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).

9. No automated decision-making

We make no decisions based solely on automated processing and do not carry out profiling.

10. Notice for persons in Switzerland

Insofar as we process personal data of persons in Switzerland, the above information also serves as information under Art. 19 et seq. of the Swiss Federal Act on Data Protection (FADP). The controller within the meaning of the FADP is the company named in section 1. Processing takes place for the purposes stated above; data exports to and from Switzerland are covered by the mutual recognition of an adequate level of data protection.

11. Changes

We will amend this privacy policy if our processing activities or the legal situation change. The version published on this page at any given time applies.