Legal
As at August 2026
This website sets no cookies, runs no analytics and loads nothing from third-party servers. Fonts and images are served from our own hosting. There is no contact form, no embedded map and no social media widget. If you read this site without writing to us, no data about you is created beyond the technically necessary server logs.
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
We have not appointed a data protection officer, as the statutory conditions for doing so do not apply. For any question about data protection, please write to the address above.
This website is hosted by:
When you open the site, your browser transmits technically necessary data which Netlify stores in log files. These are, in particular:
This processing is necessary to deliver the website, keep it stable and defend against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, uninterrupted operation). Log data is not combined with other sources, is not used to build user profiles, and is deleted after a short retention period.
A data processing agreement under Art. 28 GDPR is in place with Netlify. As Netlify is based in the United States, personal data may be transferred there. Netlify, Inc. is certified under the EU-US Data Privacy Framework, for which the European Commission determined an adequate level of protection in its decision of 10 July 2023. The European Commission's standard contractual clauses, which form part of the agreement with Netlify, apply in addition.
This website has no contact form. The addresses shown are plain email and telephone links.
If you write or call, we process the details you provide — typically your name, contact details, company and the substance of your enquiry — in order to answer it and to discuss a possible project with you.
Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to entering into or performing a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
We keep what you send us until your enquiry has been dealt with. If it becomes an engagement, commercial and tax retention periods apply. Please note that unencrypted email offers no comprehensive protection against being read by third parties.
The typefaces used are served from our own server. There is no connection to Google Fonts or any other external service. The same applies to every image on this website.
In a few places this website links to external services, for example standflow.eu. These are ordinary links, not embedded content. No data is transmitted to the provider concerned unless you click the link. Once you do, that provider's privacy policy applies.
In relation to us, you have the right to:
Any consent you have given us may be withdrawn at any time with effect for the future. An informal message to info@tactic.consulting is enough to exercise these rights.
If you believe that the processing of your data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
You may also approach the supervisory authority where you live or work.
We update this policy whenever the processing on this website changes — for instance if a form, a map or analytics were added. The version published here is the one that applies.