Deutsch

Privacy notice

Last updated: October 2026. This is a translation; the German version (Datenschutzerklärung) is the binding one.

1. Controller

Benjamin Burk, BurkGxP
Berliner Allee 47, 64295 Darmstadt
Email: Benjamin.Burk@burkgxp.de

2. In brief

This website sets no cookies, uses no analytics or tracking tools and embeds no third-party content: no external fonts, maps, videos or social media plugins. There is no contact form. Personal data is processed only when you visit the website (technically necessary connection data), when you book an appointment via Microsoft Bookings and when you send me an email.

3. Website delivery via Cloudflare

The website is delivered through Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary data:

  • the IP address of the requesting device,
  • date and time of the request,
  • the address requested and the amount of data transferred,
  • the referrer (the page visited before, if your browser sends it),
  • browser and operating system (user agent).

Purpose: delivering the website, keeping it stable and protecting it against attacks such as denial-of-service attacks.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is providing the website securely and reliably.

Processor: Cloudflare processes the data on my behalf under a contract pursuant to Art. 28 GDPR.

Transfers to third countries: Cloudflare operates data centres worldwide and may process data in the USA. Cloudflare is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, the contract with Cloudflare includes the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

Retention: I do not store or analyse this access data myself. How long Cloudflare keeps it is described in Cloudflare's privacy policy.

4. Booking via Microsoft Bookings

You can book the introductory call via Microsoft Bookings. The "Book a free introductory call" button leads to a booking page operated by Microsoft; it is not part of this website.

When you book, I process the details you enter there: name, email address, your company and phone number if given, the time you choose and your notes. I use them to arrange the appointment, remind you of it and hold the call.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request).

Processor: Bookings is part of Microsoft 365. The same contract with Microsoft Ireland Operations Limited applies as for my emails (see section 5), including the bases for transfers to the USA named there.

Booking page: When you open the booking page, Microsoft also processes connection data and may set cookies needed for the page to work. Microsoft's privacy statement applies to this.

Retention: I delete the booking data once the call has taken place and no engagement follows, at the latest after six months.

5. Contact by email

If you write to me, I process your email address, your name, your company if given, and the content of your message. I use them to answer your enquiry, arrange the introductory call and send you the assessment afterwards.

Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a possible engagement, otherwise Art. 6(1)(f) GDPR. My legitimate interest is answering your enquiry.

Email provider: My emails are processed via Microsoft 365, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, under a contract pursuant to Art. 28 GDPR. Where data is transferred to the USA in the process, this is based on Microsoft's certification under the EU-US Data Privacy Framework (Art. 45 GDPR) and, in addition, on the European Commission's standard contractual clauses.

Introductory call: Depending on what we agree, the call takes place by phone or via Microsoft Teams.

Retention: I delete your data once your enquiry has been dealt with and no engagement follows. Where messages are subject to statutory retention duties, for example under Section 147 of the German Fiscal Code (AO), I keep them for the period required there.

6. Links to other websites

The website links to LinkedIn and GitHub. These are plain links: data is only sent to the provider once you click one. From then on, that provider's privacy policy applies.

7. Your rights

You have the right of access to the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Just send me an email.

Right to object: Where I process data on the basis of Art. 6(1)(f) GDPR, you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

8. Further information

You are not obliged to provide any data. Without your email address, however, I cannot reply. There is no automated decision-making or profiling.

I update this notice when the website or the legal situation changes.