Privacy Policy

Last updated: 28 September 2026

This English version is provided for convenience. In case of any discrepancy, the German version is legally binding.

1. At a glance

This website sets no cookies, uses no analytics or tracking tools and loads no third-party content — even fonts are served from our own server. We process personal data in only two cases: where technically necessary when you visit the site (server log files), and when you contact us by email or phone.

2. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Richard Waldner Consulting
Owner: Richard Waldner
Bergstr. 28
94078 Freyung
Germany
Phone: +49 176 32220260
Email: kontakt@tokave.com

3. Data protection officer

We are not legally required to appoint a data protection officer. For any data protection questions, please contact us at kontakt@tokave.com.

4. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers are located in Germany. We have concluded a data processing agreement with the host pursuant to Art. 28 GDPR.

When you visit the website, the server automatically records information transmitted by your browser (server log files):

• IP address of the requesting device
• date and time of access
• page or file requested and amount of data transferred
• whether the request was successful (HTTP status code)
• referrer URL (the previously visited page)
• browser type and version, operating system

This processing is necessary to deliver the website and to ensure its security and stability, for example to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Log files are deleted after eight weeks unless they are needed for longer to investigate a specific security incident. They are not combined with other data sources.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

6. No cookies, no tracking, no third parties

We do not use cookies or comparable technologies that store or read information on your device. We use no web analytics, no advertising or social media plugins, no embedded maps or videos and no content delivery networks. All fonts are loaded locally from our server; no connection is made to servers of Google or any other third party when you visit the site. Consent under Section 25 TDDDG is therefore not required, and there is no cookie banner.

7. Contact by email or phone

If you contact us by email or phone, we process the information you provide (e.g. name, company, contact details and the content of your enquiry) in order to handle your request.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the preparation or performance of a contract. In all other cases, processing is based on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

We delete your data as soon as it is no longer needed for this purpose. Statutory retention obligations remain unaffected — in particular for commercial and business correspondence under Section 257 HGB and Section 147 AO (generally six years, and up to ten years for accounting-relevant documents).

Our mailbox is operated with Google Workspace by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. Processing by Google LLC in the United States cannot be ruled out; it takes place on the basis of the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Google is certified, and additionally on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Please note that unencrypted email is not fully protected against access by third parties in transit. For confidential information, we will be happy to agree a secure means of transmission with you.

8. Recipients and transfers to third countries

Your data is received only by the processors named above (hosting, email), who act on our instructions. It is disclosed to other third parties only where we are legally obliged to do so. Visiting the website involves no transfer to countries outside the EU or EEA. If you email us, processing in the United States by Google is possible; the safeguards for this are described in section 7.

9. Your rights

Subject to the statutory requirements, you have the right at any time to:

• access your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw any consent given, with effect for the future (Art. 7(3) GDPR)

Simply contact us at kontakt@tokave.com.

11. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de

12. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. You are under no legal or contractual obligation to provide us with personal data; without contact details, however, we cannot respond to your enquiry.

13. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.