Privacy Policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information can be found in the sections below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Responsible Party" section of this privacy policy.
How do we collect your data?
Your data is collected in part by you providing it to us, for example by email, phone, WhatsApp or via a contact form. Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access).
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used, with your consent, to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances, and you have the right to lodge a complaint with the competent supervisory authority.
2. Responsible Party
The party responsible for data processing on this website is:
Kevin Soudah
KS Advisory
Lassallestraße 13
68199 Mannheim
Deutschland
E-Mail: k.soudah@ks-advisory.de
Telefon: +49 175 2610072
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
3. General Information and Mandatory Disclosures
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
Storage Period
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of processing no longer applies. If you assert a justified request for deletion or revoke your consent, your data will be deleted unless statutory retention obligations – such as commercial or tax law requirements – prevent this.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
Data Processing Agreements
We have concluded data processing agreements (DPA) with our service providers in accordance with Art. 28 GDPR to ensure that they only process your personal data according to our instructions and comply with the GDPR.
4. Data Collection on This Website
Hosting
This website is hosted by an external service provider: Lovable Labs Incorporated, 2261 Market Street, San Francisco, CA 94114, USA. The personal data collected on this website is stored on the host's servers. This mainly includes IP addresses, meta and communication data, website access data, and other data generated via a website.
Hosting takes place in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR) and to fulfill pre-contractual measures towards prospective and existing clients (Art. 6 para. 1 lit. b GDPR).
We have concluded a data processing agreement (DPA) with the host in accordance with Art. 28 GDPR. The data infrastructure used is configured to data centers within the European Union (Ireland). Insofar as data is nevertheless transferred to the USA during operation, this takes place on the basis of the EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR and – where the provider is certified – on the basis of the EU-US Data Privacy Framework.
Database and Protected Administration Area
The texts of this website are provided and maintained via the database, authentication, and storage services of our hosting provider (Lovable Cloud, technically based on Supabase). The data is stored in a data center within the EU (Ireland). When content is retrieved, your IP address is technically transmitted to this service. The login area is reserved exclusively for the website operator; no visitor accounts are created. The legal basis is our legitimate interest in a secure and maintainable website (Art. 6 para. 1 lit. f GDPR). A data processing agreement is in place for this as well.
Fonts
The fonts used on this website are served locally from our own server. There is no connection to Google Fonts servers or other web font providers, and your IP address is not transmitted to third parties for this purpose.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR for the purpose of a secure and trouble-free operation of the website.
Inquiry by Contact Form, Email or Phone
If you contact us via the contact form, by email or by phone, your details including all resulting personal data will be stored and processed by us for the purpose of handling your request and in case of follow-up questions. We do not pass on this data without your consent. The legal basis is Art. 6 para. 1 lit. b GDPR if your request relates to the initiation of a contract, otherwise Art. 6 para. 1 lit. f GDPR. The data remains with us until processing is complete and no statutory retention obligations apply.
On our website, we offer the option to contact us via WhatsApp. If you use this function, your message and the associated metadata will be transmitted to WhatsApp (Meta Platforms Ireland Limited). Please note that WhatsApp may transfer data to the USA. The legal basis is your decision to use this channel (Art. 6 para. 1 lit. a and lit. b GDPR).
Our website includes a link to our LinkedIn profile. No LinkedIn content is loaded on our pages. Only when you click the link are you redirected to LinkedIn, where LinkedIn Ireland Unlimited Company may collect data about your visit. The legal basis for including the link is our legitimate interest in our public presence (Art. 6 para. 1 lit. f GDPR).
Cookies
Our website uses cookies, which are small text files stored by your browser. Technically necessary cookies – for example for the language selection and your cookie decision – are set on the basis of Art. 6 para. 1 lit. f GDPR and Sec. 25 para. 2 TDDDG. Optional analytics cookies are only set after your express consent. You can change your decision at any time via the cookie settings.
5. Analytics Tools
Google Analytics
This website uses Google Analytics to analyze website usage. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics is only activated after you have expressly consented in the cookie notice (Art. 6 para. 1 lit. a GDPR, Sec. 25 para. 1 TDDDG). Without your consent, no analytics cookies are set and no identifiers are stored; we use Google Consent Mode v2 for this. Advertising and personalization features are permanently disabled and IP addresses are truncated. You can revoke your consent at any time via the cookie settings.
For more information on how user data is handled, please see Google's privacy policy: https://policies.google.com/privacy
6. Your Rights as a Data Subject
Right to Information (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data is being processed. If so, you have the right to information about this personal data and to further information in accordance with Art. 15 GDPR.
Right to Rectification (Art. 16 GDPR)
You have the right to request immediate rectification of inaccurate personal data.
Right to Erasure (Art. 17 GDPR)
You have the right to request the deletion of your personal data if one of the reasons stated in Art. 17 GDPR applies.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data if one of the conditions in Art. 18 GDPR is met.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21 GDPR)
You have the right to object at any time to the processing of personal data concerning you on grounds relating to your particular situation.
Revocation of Your Consent
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until revocation remains unaffected. You can adjust cookie consent at any time via the cookie settings.
Right to Lodge a Complaint with a Supervisory Authority
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged violation. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. A message to the email address above is sufficient to exercise your rights.
Last updated: 11 September 2026