PLegal

Privacy Policy / Datenschutzerklärung

1. Data Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Sebastian Syperek, Hermelinweg 57b, 61231 Bad Nauheim, Germany. Email: sebastian.syperek@cx-fit.com

This website is the independent consulting website of Sebastian Syperek (Market Research Consultant).

2. Data Protection Officer

No data protection officer has been appointed. The statutory conditions for a mandatory appointment are not met. Data protection enquiries can be addressed directly to the controller using the contact details above.

3. Data We Process

We only process personal data that is necessary to operate this website and to handle enquiries addressed to us.

  • Inquiry form data: When you submit the contact form, we process the details you provide voluntarily, namely your name, your company (optional), your business email address, the type of research support requested, your project description, and your confirmation of this privacy policy.
  • Technical access data: When you visit the website, the hosting provider automatically records standard log data, such as your IP address, the date and time of access, the page or file requested, the amount of data transferred, your browser type and version, and your operating system. This data is required for the technical delivery and secure operation of the website.
  • Communication data: If you contact us directly by email, we process your email address and the content of your message.

4. Purposes and Legal Bases

  • Handling your enquiry and preparing a potential engagement: Art. 6(1)(b) GDPR (pre-contractual measures).
  • Answering business enquiries and maintaining business communication: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries and operating a professional website).
  • Processing based on your consent, given by ticking the checkbox in the contact form: Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected (Art. 7(3) GDPR).
  • Secure and technically error-free operation of the website, including protection against attacks: Art. 6(1)(f) GDPR.
  • Compliance with statutory retention obligations: Art. 6(1)(c) GDPR.

5. Cookies and Tracking

This website does not set cookies and does not use tracking pixels, advertising identifiers, or analytics tools. Because no tracking technologies are used, no consent banner is required.

Should analytics or other tracking tools be added in the future, this privacy policy will be updated and, where legally required, your consent will be obtained in advance.

6. Web Fonts

This website uses the fonts Inter, Manrope, and JetBrains Mono, which are loaded from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When a page is opened, your browser connects to Google servers and transmits your IP address in order to load the fonts.

The legal basis is our legitimate interest in a consistent and technically reliable presentation of the website (Art. 6(1)(f) GDPR). If your browser serves the fonts from its cache or blocks the request, no data is transmitted. Further information is available in Google’s privacy policy at https://policies.google.com/privacy.

7. External Links

This website contains links to external services, in particular to our LinkedIn profile. When you follow such a link, you leave this website and the respective provider becomes responsible for data processing. We have no influence over the processing carried out there; the data protection provisions of the respective provider apply.

8. Recipients and Service Providers

This website runs on a hosting platform which processes data on our behalf. Service providers are also used for the technical operation of the website and for sending email notifications. These providers are bound to confidentiality and, where legally required, engaged on the basis of data processing agreements pursuant to Art. 28 GDPR. Your data is not passed on to third parties for advertising purposes and is not sold.

Where a service provider processes personal data outside the EU or EEA, the transfer is based on an adequacy decision of the European Commission or on the European Commission’s Standard Contractual Clauses together with additional safeguards.

9. Storage and Retention

Your inquiry is stored in the website’s database, access to which is restricted to the controller. We retain your data only for as long as necessary for the purposes described above. Inquiry data is deleted once the correspondence has been concluded and no later than six months afterwards.

Where an inquiry leads to a contract, or where statutory commercial or tax retention obligations apply, the data is retained for the statutory periods (generally six or ten years pursuant to § 257 HGB and § 147 AO) and deleted afterwards.

10. Your Rights

You have the following rights regarding your personal data:

  • Right of access to the data we process about you (Art. 15 GDPR).
  • Right to rectification of inaccurate or incomplete data (Art. 16 GDPR).
  • Right to erasure (Art. 17 GDPR).
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object to processing based on legitimate interests (Art. 21 GDPR).
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
  • A message to the contact details above is sufficient to exercise any of these rights.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, https://datenschutz.hessen.de.

12. Automated Decision-Making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

13. Data Security

This website is transmitted in encrypted form using SSL/TLS. This protects the data you enter from being read by third parties during transmission. We also take appropriate technical and organisational measures to protect your data against loss, destruction, and unauthorised access.

14. Changes to This Privacy Policy

We may update this privacy policy if legal or technical circumstances change. The version published on this website at the time of your visit applies. Last updated: October 2026.