Last updated: May 2026 · This privacy policy applies to our website.
1. Data controller
The data controller for this website is:
FX ALPHA eBusiness Consulting GmbH Schwalbacher Strasse 30a 65510 Idstein Germany
Email: info@fxconsulting.de Phone: +49 (0) 6126 958 56 52
Managing Director: Stefan Hamberger
2. Supervisory authority
The competent data protection supervisory authority is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI) Gustav-Stresemann-Ring 1 65189 Wiesbaden, Germany Phone: +49 611 1408-0 Web: datenschutz.hessen.de
3. General principles
We process the personal data of our website visitors only to the extent necessary to provide a functioning website and to deliver our content and services. Processing generally takes place only with the consent of the data subject, or where a legal basis exists under Art. 6 (1) GDPR.
4. Provision of the website and server log files
Each time the website is accessed, our hosting provider (see section 5) automatically collects data in server log files. The following data may be collected:
- Browser type and version
- The operating system of the accessing system
- The website from which an accessing system reaches our site (referrer)
- The pages accessed on our site
- Date and time of access
- The IP address (truncated/anonymised)
- The internet service provider of the accessing system
This data is used exclusively for the technical provision of the website, the security of our IT systems and anonymised statistical analysis. The data is not merged with other data sources.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in the secure provision of our website). Retention period: Log files are automatically deleted after a maximum of 30 days.
5. Hosting via Cloudflare
This website is delivered via Cloudflare Pages. Provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare stores the data listed in section 4 and sets the security cookie __cf_bm (see cookie notice). Data transfer to the USA takes place on the basis of the EU Commission’s standard contractual clauses and Cloudflare’s EU-US Data Privacy Framework certification.
Legal basis: Art. 6 (1) lit. f GDPR. Further information: www.cloudflare.com/privacypolicy
6. Fonts (self-hosted)
This website uses the fonts Archivo, Manrope and JetBrains Mono. These fonts are served exclusively from our own server and are not loaded from external services such as Google Fonts. No data is transferred to third parties when fonts are loaded.
7. Contact form and email
If you send us a message via the contact form or by email, we process the data you provide (name, email address, optionally company, phone number, message) solely to respond to your enquiry. The contact form is processed via the service provider Formspree (Formspree.io Inc., 717 Charlestown Rd, Phoenixville, PA 19460, USA).
Legal basis: Art. 6 (1) lit. b GDPR (initiation of a contractual relationship) or Art. 6 (1) lit. f GDPR (legitimate interest in responding to your enquiry). Retention period: Data is deleted as soon as your enquiry has been finally processed and no statutory retention periods apply (typically 6 months, longer for business correspondence under German commercial and tax law). Further information: formspree.io/legal/privacy-policy
8. Cookies
This website uses minimal cookies. A full overview is available in our cookie notice.
9. Your rights as a data subject
You have the following rights regarding your personal data:
- Access (Art. 15 GDPR) — to the data stored about you
- Rectification (Art. 16 GDPR) — of inaccurate data
- Erasure (Art. 17 GDPR) — unless legal retention obligations apply
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR) — to receive your data in a common format
- Objection (Art. 21 GDPR) — to processing based on legitimate interests
- Withdrawal of consent (Art. 7 (3) GDPR) — at any time, with effect for the future
- Complaint to the competent supervisory authority (see section 2)
To exercise your rights, an informal message to info@fxconsulting.de is sufficient.
10. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
11. Data security
We use transport-layer encryption (TLS/SSL) for website traffic, recognisable by the lock icon in your browser and the https:// URL. This protects data transmitted between your device and our server against unauthorised access and tampering.
12. Validity and amendment of this privacy policy
This privacy policy is currently valid and was last updated in May 2026. Due to ongoing development of our website or changes to legal requirements, it may be necessary to amend this privacy policy. The current version can be viewed on this page at any time.