Last updated: 15 August 2026
Data controller
Codecraftpoint, Level 10, 19 Arnulfstraße, Munich 80335, is the controller for personal data described here. Privacy questions and rights requests can be sent to info@codecraftpoint.digital.
Data we receive
When you use the inquiry form, we receive your name, email, selected consultation, optional preferred date, message and consent record. During booking and delivery we may process contact and invoicing details, appointment records, your questions, redacted employment material and our consultation notes. Please do not send passport numbers, bank credentials, health records or unrelated family documents through the form.
Our hosting provider may process technical request information such as IP address, browser, requested page, timestamp and error logs to deliver and secure the website. The cookie preference is stored in your own browser.
Purposes and legal bases
We process inquiries and requested pre-contract steps under Article 6(1)(b) GDPR, deliver a contract on the same basis, maintain legally required invoices under Article 6(1)(c), and protect website security and handle ordinary business correspondence under our legitimate interests in Article 6(1)(f). Optional analytics, if introduced and accepted, would rely on consent under Article 6(1)(a). You may withdraw consent prospectively.
Recipients and international transfers
Data is shared only where needed with hosting, email, appointment, accounting and professional-service providers under appropriate contractual duties, or with authorities where law requires it. We do not sell personal data. If a provider processes information outside the European Economic Area, we use an applicable adequacy decision or safeguards such as European Commission standard contractual clauses and assess supplementary protections where required.
External images and font files may be requested from their respective public hosts when pages load, which can disclose technical request information to those providers. Avoiding those requests may require browser blocking settings.
Retention
Unbooked inquiry messages are normally deleted within six months after the last meaningful contact. Consultation working documents and notes are normally retained for three years after the end of the engagement to answer scope or quality questions, then securely deleted unless a dispute requires longer retention. Invoices and tax-relevant records are kept for the period required by German law, commonly up to ten years depending on record type. Security logs are generally kept for no longer than 30 days unless needed to investigate an incident.
Your rights
Subject to legal conditions, you can request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing. We may need reasonable information to verify identity and may retain data where a legal obligation or defence of claims applies.
You may complain to a competent data-protection supervisory authority. In Bavaria, the relevant authority for private-sector organisations is generally the Bayerisches Landesamt für Datenschutzaufsicht.
Automated decisions and required information
We do not make decisions producing legal or similarly significant effects solely by automated means. Fields marked as required in the inquiry form are needed so we can identify and answer the request; choosing not to provide them means the form cannot be submitted.
Changes
We update this notice when our practices or legal duties change. The date above identifies the current version. Our cookie notice explains browser storage in more detail.