Privacy policy
Last updated: 2026-07-19
Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Felix Hansen, Eichendorffstraße 4, 50858 Cologne, Germany. Email: felix@fh-advisory.com
Principle
This website is deliberately built to minimise data. It sets no cookies, embeds no analytics or tracking services, and contains no contact forms. Fonts are served from our own server rather than from an external provider. Simply visiting this website therefore transfers no data to third parties, with the exception of the hosting described below.
Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When the site is accessed, Vercel processes technically necessary access data, in particular:
- IP address of the requesting device
- date and time of access
- page requested and volume of data transferred
- referrer URL and information about browser and operating system
The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in providing the website reliably and securely. Server log files are deleted once they are no longer required to ensure secure operation; the specific retention period is determined by our host. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. As Vercel is based in the USA, personal data may be transferred to the United States. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework, so the transfer relies on the European Commission's adequacy decision of 10 July 2023 pursuant to Art. 45 (3) GDPR. In addition, and in the event that this decision ceases to apply or the certification lapses, the European Commission's Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR have been agreed.
Scheduling via Calendly
To arrange an intro call, this website links to the service Calendly (Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA). Calendly is not embedded in this website. No data is transferred to Calendly unless you click the link.
If you follow the link, you leave this website. From that point onwards, Calendly's privacy policy applies. The data you enter there, such as name, email address and preferred time, is processed in order to hold the conversation. The legal basis for the subsequent contact is Art. 6 (1) (b) GDPR.
The booking data is transmitted to us by Calendly; in that respect we are the controller and Calendly is our processor under Art. 28 GDPR. Calendly LLC is certified under the EU-U.S. Data Privacy Framework, so the transfer to the USA relies on the adequacy decision under Art. 45 (3) GDPR, supplemented by the Standard Contractual Clauses under Art. 46 (2) (c) GDPR. Booking data is deleted once the appointment has been concluded and no statutory retention periods apply.
Contact by email
If you contact us by email, your details are stored in order to process the enquiry and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries and otherwise Art. 6 (1) (f) GDPR. The data is deleted once it is no longer required for the purpose and no statutory retention periods apply.
External links
This website links to LinkedIn and to the photography portfolio at felix-hansen.com. These are plain links with no embedded content. Data is transferred only once you click the respective link.
Your rights
Under the GDPR you have the following rights:
- access to the data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing (Art. 21 GDPR)
An email to the address above is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out on the basis of Art. 6 (1) (f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. An email to the address above is sufficient to object.
Changes
This privacy policy will be adapted if data processing on this website changes. The version published here at any given time applies.