DE|EN

Fischer | Konrad GmbH

Privacy Notice

Note: This English version is provided for convenience. The German version is the legally binding original.

1. Controller

The controller for the purposes of the General Data Protection Regulation (GDPR) is:

Fischer | Konrad GmbH
Aegidiimarkt 7
48143 Münster
Germany
Phone: +49 (0) 251 490 29 830
Email: datenschutz@fischerkonrad.de

2. Principles of processing

We take the protection of your personal data seriously. This website uses no cookies and no third-party services for advertising or user profiling. For audience measurement we run a cookieless analytics tool on our own server (see section 7). Beyond the mere request of this site, we only collect personal data when you actively provide it to us – for example by email or telephone (see section 5), or via the initial-consultation flow and its preparation page (see section 6).

To operate individual features we store short-lived values in your browser's session storage: the access token of the preparation page, your map consent and an appointment request you have dismissed. These values expire with the session and are technically required for the service you have requested. We do not use cookies, so no cookie banner is required.

3. Hosting and server log files

This website is operated by dogado GmbH, Antonio-Segni-Straße 11, 44263 Dortmund, Germany. The hosting provider automatically collects and stores information in so-called server log files which your browser transmits when accessing the website. These are:

  • IP address of the requesting device (anonymised after a short period)
  • Date and time of access
  • Name and URL of the file requested
  • Volume of data transferred
  • Browser type and version, operating system
  • Referrer URL (previously visited page)

This data is not combined with other data sources. Collection is based on Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). IP addresses are automatically anonymised after 7 days. The log files are managed automatically by the hosting provider. A data-processing agreement under Art. 28 GDPR is in place with dogado GmbH.

4. Map service (Leaflet / OpenStreetMap)

On our contact page, we first show our location as a static preview that is loaded exclusively from our own server. In this state there is no connection to any third party and no IP address is transmitted to third parties.

Only once you actively activate the interactive map (to zoom or pan) and confirm the prompt shown at that point, the map tiles (the "basemaps") are loaded via Leaflet directly from the servers of the OpenStreetMap Foundation (OSMF). Your browser then establishes a direct connection to those servers and transmits your IP address. According to the OSMF privacy policy, the IP address, browser and device type, operating system, referring page as well as the date and time of the request are processed. The data is stored in the United Kingdom and the Netherlands. For details, see the OSMF privacy policy.

The legal basis for loading the interactive map is your consent (Art. 6 (1) (a) GDPR), which you give by activating it and may withdraw at any time with effect for the future – via the "Deactivate map" button below the map. The consent applies only to the respective session in any case. The static preview and the marker icons are served from our own server.

5. Contact by email or telephone

If you contact us by email or telephone, your details (e.g. name, email address, content of your message) are stored by us in order to process your enquiry. We do not pass on this data without your consent. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual steps) and Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). The data is deleted once your enquiry has been dealt with and no retention obligations require otherwise.

Job applications. If you send us an application to karriere@fischerkonrad.de, we process the data you provide solely to carry out the application procedure. The legal basis is Section 26 (1) BDSG in conjunction with Art. 88 GDPR. If no employment relationship comes about, we delete the documents six months after the procedure has been concluded.

6. Initial consultation (Erstberatung)

Through the initial consultation and its preparation page on this site, you can initiate and prepare an initial consultation. We process personal data as follows:

Data collected. In the first step, your email address, optionally your telephone number, the selected topic category (business valuation, buying/selling a company, or financial modelling), and optionally a preferred meeting time and a short description of your matter. On the subsequent preparation page – to the extent you use it – additionally your name, optionally your company, plus voluntary information about your matter (industry, legal form, revenue, EBIT and other questionnaire answers), a preferred meeting time and optionally documents you upload. On request we prepare a non-disclosure agreement (NDA). For that we additionally process the contracting party (company or full name), the company address and the authorised representative.

Abuse protection. To protect against automated requests we briefly store counters based on cryptographically hashed identifiers of your IP address (up to one hour) and your email address (up to 24 hours). The plain-text data cannot be derived from these counters.

Purposes and legal basis. Processing serves to initiate and prepare the initial consultation and a possible client relationship. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and – to the extent you actively confirm the privacy check-box – Art. 6 (1) (a) GDPR (consent). You can withdraw any consent given at any time, with effect for the future.

Personal access link. Access to your preparation page is granted via a time-limited, cryptographically signed link that we email to you. The link contains no credentials and loses its validity after the period expires.

Processors and third-country transfers. For appointment management (Microsoft Bookings), for holding the consultation as a video conference (Microsoft Teams) and for email delivery we use Microsoft 365 / Microsoft Graph (Microsoft Ireland Operations Ltd., One Microsoft Place, Dublin 18, Ireland). During the video conference, Microsoft processes video, audio and connection data. The conversation is not recorded. This may involve processing in the United States (third country). The basis is the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Documents you upload are stored in our Nextcloud instance (cloud.fischerkonrad.de), operated by hosting.de GmbH & Co. KG, Wilhelmstraße 7, 64283 Darmstadt, Germany (server location: Germany). For the upload we create a personal share link. This link allows uploading only – anyone opening it can neither view nor download the folder contents. You may pass the link on to third parties, for example to your tax advisor. It expires no later than 20 days after your appointment. We have data-processing agreements in place with every processor under Art. 28 GDPR.

Retention. Your details are stored for the duration of the consultation preparation. If you withdraw your request via the preparation page, we delete the details stored there immediately. Documents you uploaded are removed within 90 days. If no client engagement results, we delete the data at the latest 90 days after the initial consultation. Where an engagement does result, the statutory retention periods applicable to the mandate apply (in particular 10 years after the end of the mandate for contractual and business records under the German Commercial Code/Fiscal Code).

7. Audience measurement (Matomo)

For anonymous audience measurement we use the analytics software Matomo, which we operate on our own server. No cookies are set and no information is stored on your device. Your IP address is truncated before storage, so it cannot be traced back to you. The data (pages visited, approximate time on page, browser type, referring page) never leaves our server and is not combined with any other data. If your browser sends the "Do Not Track" signal, your visit is not recorded. Raw data is deleted after six months at the latest. The legal basis is our legitimate interest in statistical analysis of website usage (Art. 6 (1) (f) GDPR).

8. External links

Our website contains links to external websites. Data protection on those sites is the responsibility of the relevant operator. We have no control over data processing by third parties.

9. Your rights as a data subject

Under the GDPR you have the following rights:

  • Right of access (Art. 15 GDPR): you may request information about the personal data we hold about you.
  • Right to rectification (Art. 16 GDPR): you may request the rectification of inaccurate data.
  • Right to erasure (Art. 17 GDPR): you may request the erasure of your data, provided no statutory retention obligations apply.
  • Right to restriction (Art. 18 GDPR): you may request that processing be restricted.
  • Right to object (Art. 21 GDPR): you may object to processing based on legitimate interests.
  • Right to data portability (Art. 20 GDPR): you may receive your data in a machine-readable format.

To exercise your rights, please contact: info@fischerkonrad.de

10. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the competent data-protection supervisory authority. The authority competent for Fischer | Konrad GmbH (registered in North Rhine-Westphalia) is:

Landesbeauftragte für Datenschutz und Informationsfreiheit NRW (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Email: poststelle@ldi.nrw.de
Germany
www.ldi.nrw.de

11. Currency of this privacy notice

This privacy notice is currently in force. As our website evolves or in response to changes in the legal landscape, we may need to update this notice. The most up-to-date version is always available on this page.

Last updated: September 2026