OYSTER CONSULTING

Privacy notice

This notice explains how personal data are processed when you visit our website or contact us, and describes your rights.

Last updated: 30 September 2026

1. Controller

Oyster Consulting GmbH
An der Christ-König-Kirche 19
66119 Saarbrücken
Germany
Represented by managing director Giuseppe Paoli
Phone: +49 681 927 419 60
Email: info@oyster-consulting.de

This notice covers the German and English corporate website at oyster-consulting.de, including the www address, and contact initiated through this website.

1a. Data protection officer

You can contact our external data protection officer through:

Frommel Datenschutz GmbH
Akazienstraße 6a
61352 Bad Homburg
Germany
Email: info@frommel.com
Phone: +49 6172 17 10 179

Please indicate that your enquiry concerns data protection at Oyster Consulting GmbH.

2. Hosting and technical access data

Our hosting provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Requests to this website involve your IP address and technical connection data, including the requested page or file, access time, browser and operating system, device type and, where transmitted, the referring page.

Processing is necessary to deliver the website and maintain a reliable and secure service. The legal basis is Article 6(1)(f) GDPR, with our legitimate interest in providing and protecting this website. IONOS receives hosting data as our hosting service provider.

According to IONOS's product information, visitor data are anonymised at collection and retained for eight weeks. IONOS states that this web hosting processing does not involve transfers outside the EU.

3. IONOS visitor statistics

IONOS web hosting includes WebAnalytics, which the provider describes as enabled by default. It uses access data for statistical evaluation and technical optimisation.

IONOS describes collection through logs or a counting pixel, without cookies, and immediate anonymisation of the transmitted IP address. Subsequent analysis is described as non-personal, with no disclosure to third parties.

To the extent that personal data are processed before anonymisation, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is understanding use and technical performance to improve the website. The retention period for the underlying web hosting visitor data is described in section 2; IONOS states that anonymised statistics cannot be attributed to individual visitors.

4. Cookies and embedded content

The pages we provide do not set their own cookies or store information in persistent browser storage. Images, fonts, styles and scripts are served from our own webspace. Loading the site does not connect to Google Fonts. We do not embed Google Analytics, advertising pixels or maps in these pages.

Navigation, language selection and expandable service descriptions operate in your browser. Our page code does not transmit your selections to an analytics service.

5. Contact and project enquiries

If you phone or email us, we process the information you supply, such as your name, business contact details, company, role, project information and message. The website has no form that submits this information to us.

If you are an individual acting as a contracting party, contract-related enquiries are processed under Article 6(1)(b) GDPR. For contacts acting on behalf of a company and other business enquiries, the legal basis is Article 6(1)(f) GDPR, with our legitimate interest in handling enquiries and business communication. Where statutory retention obligations apply, further retention is based on Article 6(1)(c) GDPR.

Our email mailbox is provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. As our email service provider, IONOS processes message contents and attachments, sender and recipient addresses, and technical connection data as required to receive, store and send messages. This processing serves to handle your enquiry on the legal bases set out above.

Data are accessible to people handling your enquiry and necessary communications and IT service providers. Data are deleted once the matter has been resolved, unless retention is required by law or for establishing, exercising or defending legal claims.

You choose whether to contact us. Without the details needed to handle an enquiry, we may be unable to respond. Connection data necessary to deliver a requested page are technically required.

7. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability under Articles 15–20 GDPR. Where processing is based on consent, you may withdraw that consent at any time for the future, without affecting the lawfulness of earlier processing.

Right to object under Article 21 GDPR

You may object to processing based on legitimate interests on grounds relating to your particular situation. We will stop that processing unless we demonstrate overriding compelling legitimate grounds or need the data for legal claims. You may object to direct marketing at any time without giving reasons.

To exercise your rights, contact us using the details in section 1. You may also contact our external data protection officer using the details in section 1a. This website does not make decisions based solely on automated processing that produce legal or similarly significant effects.

Under Article 77 GDPR, you can lodge a complaint with a data protection supervisory authority, particularly in the EU country of your usual residence, place of work or the alleged infringement.

The supervisory authority for our registered location is:
Unabhängiges Datenschutzzentrum Saarland
Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany
poststelle@datenschutz.saarland.de
www.datenschutz.saarland.de