Controller and contact
Byte Forgepoint, Level 10, 62 Valentinskamp, Hamburg 20354, is the controller for personal data described here. Privacy questions and rights requests can be sent to info@byte-forgepoint.digital.
Data we process and why
When you make an inquiry, we process your name, email, message, selected service and optional timeline to answer it and take steps toward a contract (Article 6(1)(b) GDPR). For clients, we process intake answers, correspondence, appointment notes, deliverables and billing records to perform the engagement and meet tax and accounting duties (Articles 6(1)(b) and (c)).
Our host may process IP address, request time, page, browser details and security events in server logs to deliver and protect the site based on legitimate interests (Article 6(1)(f)). Essential local storage remembers a cookie choice. Optional analytics, if introduced, will require consent and this notice will be updated.
Do not send passport numbers, health data or full identity records through the first-contact form. If special-category data later becomes genuinely necessary, we will identify an appropriate legal basis and secure channel first.
Recipients and international transfers
Necessary data may be handled by hosting, email, video-call, bookkeeping and professional-service providers under suitable contracts. We disclose information to authorities when legally required. If a provider processes data outside the European Economic Area, we use an adequacy decision or appropriate safeguards such as EU standard contractual clauses, and assess supplementary measures where required.
Retention
Unsuccessful inquiries are normally deleted within six months. Consultation working records are normally retained for three years after the engagement to address contractual questions. Invoices and tax records are retained for statutory German periods, commonly up to ten years. Security logs are generally kept for no more than 30 days unless an incident justifies longer preservation. A legal claim or hold may extend these periods.
Your rights
Subject to legal conditions, you may request access, correction, deletion, restriction, portability or objection. You may withdraw consent prospectively at any time. You also have the right to complain to a competent data-protection supervisory authority; in Hamburg this is the Hamburg Commissioner for Data Protection and Freedom of Information.
We may need to confirm identity before fulfilling a request. Some records cannot be deleted immediately where law requires retention or they are needed for legal claims.
Automated decisions and children
We do not use personal data for solely automated decisions with legal or similarly significant effects. Our consultations are intended for adults arranging their own or household relocation; a parent or guardian should contact us regarding a child.
Security and updates
We use access controls, minimization and service-provider safeguards appropriate to the data. No internet transmission is entirely risk-free. Material changes will be dated on this page. See the cookie notice for browser-storage details.