Privacy Policy

1. Data Controller

The party responsible for data processing on this website is:

Max-Appeal UG (haftungsbeschränkt)
Bizetstraße 8
13088 Berlin
Germany

privacy@max-appeal.com

2. Hosting and Server Log Files

This website, as well as the integrated appointment booking instance (Nextcloud), is operated on a self-managed server infrastructure in Germany. Unlike hosting with third-party providers, the data generated when accessing the website remains entirely under our control and is not transmitted to external hosting providers.

When using the website, information that your browser transmits to our server is automatically collected (so-called server log files):

  • IP address (in anonymized form)
  • Date and time of the request
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transmitted
  • Browser type and operating system

Legal basis: Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the technical provision, security, and stability of our own server environment. The data from the appointment booking via Nextcloud is subject to the same high security standards of our infrastructure.

3. Appointment Booking and Video Conferences via Nextcloud

To arrange and conduct consultation meetings, we use a self-hosted instance of the open-source software Nextcloud.

In contrast to common cloud solutions, the data you enter (name, email address, appointment details, and potentially video/audio data during the call) is processed exclusively on our own infrastructure operated in Germany. No data is transmitted to third-party providers.

If you book an online meeting, we use "Nextcloud Talk" for this purpose. Communication is encrypted and takes place directly via our server.

Purpose: Coordination, planning, and execution of appointment requests and consultations.

Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract or pre-contractual measures).

Storage duration: Data will be deleted as soon as it is no longer required for appointment scheduling and execution, and no legal retention obligations (e.g., under tax law) exist.

4. External Link to LinkedIn

On this website, we link to our profile on LinkedIn. This is a static link. Only when you click on it will you leave our website and access LinkedIn's servers. From that point on, data processing is the responsibility of LinkedIn Ireland Unlimited Company.

5. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification or erasure (Art. 16/17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.