Last updated: October 2026
The controller responsible for processing personal data on this website is:
Rapp Consulting GmbH
Dynamostraße 13
68165 Mannheim
Germany
Phone: +49 621 438 55-39 3
Fax: +49 621 438 55-55 5
Email: info@rapp-consulting.com
For questions about data protection or to exercise your rights, the fastest way to reach us is info@rapp-consulting.com.
You can use this website without providing any personal information. We do not use cookies, analytics or tracking services, or social media plugins. Fonts are loaded from our own server; visiting this website does not transfer any data to Google or other third parties for advertising or analytics purposes.
We only process personal data in the following cases:
a) technically necessary access data when you call up the website (section 3),
b) when you contact us by email, phone or fax (section 5),
c) in the context of a business relationship with us (section 6).
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in Germany. We have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR.
Each time the website is accessed, the following data is automatically stored in server log files:
IP address of the requesting device,
date and time of access,
page or file accessed,
amount of data transferred and HTTP status code,
website from which you are visiting us (referrer),
browser type and version and operating system.
The purpose is to deliver the website, ensure its stability and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The data is not combined with other data sources and is not used to identify individual visitors. It is deleted or anonymised as soon as it is no longer required for these purposes. Where there are concrete indications of an attack, individual entries may be retained until the incident has been resolved.
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.
If you contact us by email, phone or fax, we process the information you provide (in particular your name, contact details and the content of your enquiry) in order to handle your request. The legal basis is Art. 6(1) (b) GDPR where your enquiry relates to the conclusion of a contract or an existing contractual relationship, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in responding to your enquiry.
We delete the data once your enquiry has been fully dealt with, unless statutory retention obligations apply. Business letters and business-related emails are retained for up to six or eight years in accordance with German commercial and tax law (Section 257 German Commercial Code, Section 147 German Fiscal Code).
When initiating and carrying out consulting assignments, we process the data provided to us by our clients and their contact persons, in particular names, positions, business contact details, contract and billing data and correspondence. Where necessary to carry out the assignment, we also use publicly accessible sources such as the commercial register.
The legal basis is Art. 6(1)(b) GDPR and, for contact persons at companies, Art. 6(1)(f) GDPR; our legitimate interest lies in communicating with our business partners. We comply with retention obligations on the basis of Art. 6(1)(c) GDPR. The data is deleted as soon as it is no longer required for performing the contract or exercising contractual rights and the statutory retention periods have expired.
We only pass on personal data where this is necessary for the purposes stated or where we are legally obliged to do so. Recipients are:
STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (hosting),
JANUS Die Werbemanufaktur, Scheerer & Rohrmann GmbH, Krügerstraße 5, 68219 Mannheim,
Germany (technical support and maintenance of the website).
Both service providers act on the basis of a data processing agreement pursuant to Art. 28 GDPR and are bound by our instructions. Beyond this, we only transfer data where there is a legal obligation to do so, for example to tax or law enforcement authorities.
No data is transferred to countries outside the European Union or the European Economic Area.
With regard to your personal data, you have the following rights:
right of access (Art. 15 GDPR),
right to rectification (Art. 16 GDPR),
right to erasure (Art. 17 GDPR),
right to restriction of processing (Art. 18 GDPR),
right to data portability (Art. 20 GDPR).
Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where we process your data for direct marketing purposes, you may object to this at any time without giving reasons.
To exercise your rights, an informal message to info@rapp-consulting.com is sufficient.
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR (Art. 77 GDPR). The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart
Germany
www.baden-wuerttemberg.datenschutz.de
You are not required to provide any personal data to visit this website. To conclude and perform a contract, we need the information required for that purpose; without it, a contract can generally not be concluded. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
We update this privacy policy when the website, our processing activities or the legal situation change. The version published on this page applies.
This English version is provided for convenience. In case of doubt, the German version shall prevail.
