Privacy Policy

This is the English version of the privacy policy. In case of discrepancies, the German version at /datenschutz prevails.

Last updated: 21 October 2026

1. Controller

SCRM Consulting GmbH
Daimlerstraße 3
73469 Riesbürg, Germany

Email: kontakt@scrm-guard.de
Phone: +49 1520 7550995

This policy concerns the SCRM Guard website and contact made through it. Processing in the context of any subsequent collaboration is governed by the information and arrangements agreed for that purpose.

2. Hosting and technical provision

The website is provided through Sites by OpenAI. Cloudflare infrastructure is used for delivery and protection. When you visit, technical logs may process information including your IP address, time of access, requested page, volume of data transferred, referrer, and browser and operating system details. This data is used to provide the website, analyse errors and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Technical logs are subject to the hosting providers’ retention and security policies. The website uses Rybbit for traffic analytics and does not load external fonts.

As part of hosting, Sites provides statistics on page views and visitor numbers. This hosting feature is independent of the consent banner described below. Your selection in the banner controls only the optional storage of your enquiry selections by our website code; it does not disable hosting statistics.

For traffic analytics, a script from app.rybbit.io loads when a page is opened. Rybbit records page views and technical visit information, such as referring pages and browser and device information. We use these reports to understand how our content is used and where traffic comes from. The script loads independently of the convenience choice in the banner.

3. Enquiries, email and telephone

When you contact us, we process your contact details and the information you provide to answer your enquiry, arrange an initial call and prepare a proposal. This may include your email address, name, company, message and your selections relating to areas of use and your supply network.

You may leave your requirements open in the enquiry section. Direct submission requires only an email address; all other details are voluntary. When direct submission is available, the website sends your enquiry over an encrypted connection to our own website endpoint. From there, it is forwarded via Microsoft 365 to kontakt@scrm-guard.de. If direct submission is unavailable, the website prepares an email that you can review and send yourself in your own email application.

To prevent misuse and duplicate submissions, direct submission uses short-term technical records: cryptographic hashes derived from your IP and email addresses, an enquiry fingerprint, and a reference, timestamp and delivery status. These records contain no readable contact details or message text. They are used for checks for up to 24 hours; expired records are deleted during a subsequent permitted submission request. The enquiry content is then held in our email system, not in this checking database.

The legal basis is Article 6(1)(b) GDPR where processing concerns pre-contractual steps at your request or a contract with you. For communication with company contacts and other enquiries, we rely on Article 6(1)(f) GDPR; our interest is appropriate business communication. Misuse prevention is also based on Article 6(1)(f) GDPR.

There is no automatic newsletter subscription. We delete enquiry data once its purpose has been fulfilled and there are no statutory retention obligations or legitimate grounds for retaining it further, such as documenting business transactions or asserting claims.

4. Cookies and storage in your browser

Technical hosting functions may use necessary cookies, for example to protect access or detect automated requests. Among others, Cloudflare describes the security cookie __cf_bm, which the provider states expires after 30 minutes of inactivity. The safeguards applied depend on the hosting and the individual request. These hosting functions are not controlled through the consent banner. Where they are necessary to provide the service you have expressly requested, access to storage on your device is based on section 25(2), no. 2 TDDDG; subsequent processing is based on Article 6(1)(f) GDPR.

Your privacy choices: The consent banner lets you choose between “Necessary only”, “Accept all” and individual settings. The optional convenience feature is disabled before your consent. “Accept all” only permits the storage of your proposal selection described below. Rybbit traffic analytics loads independently of this choice.

We store your decision under scrm_guard_consent_v2 in your browser’s local storage for 180 days. We store the version of the consent information, your choice and the decision and expiry times. The record contains no visitor identifier and is not sent to a server by our website code. Reading it or reopening the banner does not extend this period. If local storage is unavailable, we use session storage where possible; otherwise, your decision applies only to the current page. Storing your privacy choice allows us to manage and respect your decision (section 25(2), no. 2 TDDDG; where personal data is concerned, Article 6(1)(c) GDPR to fulfil the obligations under Article 7(1) and (3) GDPR).

Optional convenience feature “Remember enquiry selections”: Only with your consent, we use session storage under scrm-guard-offer-v1 to store your selected areas of use, supplier count, industry and, where applicable, your selected use case. This lets us restore your configuration when you move between pages within the same browser session. The controller is the provider named in section 1. Your name, email address, company and message text are not stored there. The website code does not send this storage record to a server. Contact you deliberately initiate is governed by section 3.

The legal basis for optional storage and retrieval is your consent under section 25(1) TDDDG; where personal data is concerned, Article 6(1)(a) GDPR. Storage is limited to the browser session; if a session is restored, the browser may also restore your selection. “Reset selection” clears this selection.

Withdrawal and refusal: You can use “Privacy settings” in the footer at any time to select “Necessary only”, or switch off the convenience feature and choose “Save selection”. Your stored enquiry selections will then be deleted immediately and will no longer be stored. The lawfulness of processing before withdrawal is unaffected. The website and enquiry form continue to work without consent; however, your enquiry selections will not be restored when you leave or reload the page. On the Legal Notice and Privacy Policy pages, the banner opens only at your request. You can also delete or block browser storage in your browser settings.

Further information on hosting protection: Cloudflare cookies.

5. Appointment booking and external links

Links to Microsoft Bookings, LinkedIn and other external services connect to the respective destination only when you click them. No booking forms, social feeds or external chat widgets are embedded automatically. Our fonts, images and logos are served with the website.

When you book an appointment through Microsoft Bookings, the data you enter there is processed to organise the appointment. The provider of Microsoft services in Europe is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The information shown there also applies, along with Microsoft’s privacy information. We process booking data to arrange appointments under Article 6(1)(b) or (f) GDPR, as applicable.

6. Recipients and transfers

Data is accessible to the people handling your enquiry within our organisation and to service providers where required for hosting, security, communication and appointment organisation. In particular, we use Sites/OpenAI, Cloudflare and Microsoft. Your chosen email provider processes data under its own terms.

International providers may process data outside the European Economic Area. The requirements of Articles 44 et seq. GDPR apply, in particular adequacy decisions or appropriate safeguards such as EU Standard Contractual Clauses, where applicable. We do not commit here to processing exclusively in Germany or the EU. You can request information on the recipients and safeguards applicable to your data processing at the contact address above.

7. Your rights

Subject to the legal requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you can withdraw it with effect for the future.

Right to object: Where we process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

To do so, please contact kontakt@scrm-guard.de. You also have the right to lodge a complaint with a data protection supervisory authority. For our registered office, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg is responsible.

8. Updates

We update this information when the website, the services used or the legal requirements change.