1. Data Controller and Contact Information
The responsible party (Data Controller) for data processing on this website is: Xuezhou de Pol. My contact details are: Monumentenstr. 31, 10829 Berlin, Germany. You can reach me for all privacy and data protection inquiries via email at: info@knowlogie.com. As a sole proprietor, I do not have a dedicated Data Protection Officer (DPO).
2. Personal Data Collection: Scope and Purpose
I collect and process personal data only to the extent necessary for establishing contact, fulfilling consulting contracts, and maintaining the security and functionality of this website.
- Data collected directly: When you contact me via the contact form or email, I collect your name, email address, telephone number, and the content of your message. This data is processed to respond to your inquiry and, if applicable, to prepare a contract. The legal basis is (a) your consent (Art. 6(1) lit. a GDPR) or (b) the necessity for pre-contractual measures (Art. 6(1) lit. b GDPR).
- Usage data (Server Log Files): When you visit my website, the hosting provider automatically collects general data in “server log files” (e.g., your IP address, browser type, time of access, and pages visited). This data is processed to ensure the technical security and stability of the website. The legal basis is my legitimate interest (Art. 6(1) lit. f GDPR).
3. Data Processing for Contract Fulfillment (Client Data)
If we enter into a consulting contract, I process additional data necessary for service delivery, invoicing, and legal compliance, such as your full address, VAT ID (if applicable), and bank details. This processing is based on the legal basis of contractual necessity (Art. 6(1) lit. b GDPR) and legal obligation (Art. 6(1) lit. c GDPR) (e.g., tax and commercial law retention periods).
4. Data Sharing with Third Parties (Processors)
I only share your personal data with third parties if it is necessary for my business operations and in compliance with GDPR. These third parties are typically data processors acting on my instructions, such as:
- Web Host: Wix.com to ensure the website runs reliably.
- Email Provider: Microsoft for email correspondence.
- Tax Advisor/Accountant: For fulfilling legal accounting and tax obligations. Any transfer of data outside the EU/EEA (a “third country”) is secured by appropriate safeguards, such as standard contractual clauses.
5. Data Retention Period
Your personal data will be stored only for as long as necessary to achieve the purpose for which it was collected or as required by law.
- Inquiry data is deleted once the correspondence is complete, unless a contractual relationship is established.
- Client contract and invoice data is stored according to statutory retention periods, typically ten (10) years under German tax and commercial law.
6. Your Rights as a Data Subject (GDPR Rights)
Under the GDPR, you have the following rights regarding your personal data held by me. To exercise any of these rights, please contact me using the email address provided in Section 1.
- Right of Access (Art. 15): You can request confirmation of whether I process your data and access to that data.
- Right to Rectification (Art. 16): You can request the correction of inaccurate or incomplete data.
- Right to Erasure (‘Right to be Forgotten’) (Art. 17): You can request the deletion of your personal data, subject to legal retention obligations.
- Right to Restriction of Processing (Art. 18): You can request that I limit the way I process your data.
- Right to Data Portability (Art. 20): You have the right to receive the data you provided in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21): You have the right to object to processing based on my legitimate interests.
- Right to Withdraw Consent (Art. 7(3)): If processing is based on your consent, you can withdraw it at any time with future effect.
7. Right to Lodge a Complaint
If you believe that my data processing activities violate the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or the place of the alleged infringement.