Privacy

1. General information

This privacy policy explains which personal data is processed when visiting and using this website.

Personal data means any information that can be used to identify a natural person directly or indirectly, for example name, email address, IP address or technical usage data.

This website is a personal, non-commercial professional site by Johann Fischer on quality management, artificial intelligence, process improvement and related topics.

2. Controller

The controller for data processing on this website is:

Johann Fischer
Foxley Quality Intelligence
Henkelsweg 8a
87463 Dietmannsried
Deutschland

Email: fox@foxley-quality-intelligence.de

3. Hosting

This website is hosted by the following provider:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When this website is accessed, the hosting provider processes technically necessary data to deliver the website, maintain system security and detect attacks or misuse.

According to STRATO, IP addresses are recorded in log files when a website is accessed and stored for up to seven days to detect and defend against attacks. STRATO also provides anonymised log file evaluations; hostname or IP address of the accessing client is anonymised in this process.

The legal basis for this processing is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and efficient provision of the website.

The website is hosted by STRATO GmbH. In the course of hosting, technically necessary server log files may be processed. The conclusion and documentation of data processing pursuant to Art. 28 GDPR must be reviewed and kept up to date by the website operator in the STRATO customer account.

4. Server log files

When visiting this website, the following data in particular may be processed:

IP address or anonymised IP address
date and time of access
page or file accessed
referrer URL, if transmitted by the browser
browser and browser version used
operating system used
HTTP status code
amount of data transferred

This data is processed to deliver the website technically, maintain stability and security, and trace errors or attacks.

The operator of this website does not merge this data with other data sources.

5. Contact by email

If you contact us by email, the data you provide will be processed. This may include in particular your name, email address, message content, time of contact and technical metadata of the email.

Processing takes place to handle your enquiry and communicate with you.

The legal basis is Art. 6(1)(f) GDPR. Where contact is related to concluding or performing a contract, Art. 6(1)(b) GDPR also applies.

Data is deleted once the enquiry has been finally processed and no statutory retention obligations or legitimate interests in further storage exist.

6. Contact form

No contact form is currently provided on this website.

If a contact form is added later, this privacy policy will be updated before activation. In particular, mandatory fields, purpose of processing, retention period, spam protection and possible recipients must be described.

No newsletter is currently offered on this website.

If a newsletter is introduced later, separate consent will be obtained and a double opt-in procedure will be used. The privacy policy will be updated before activation.

8. Cookies and similar technologies

Based on the current technical setup, this website does not use non-essential cookies, advertising trackers or marketing technologies.

Technically necessary cookies or similar storage technologies may be used where required for operation, security or an expressly requested function of the website.

The legal basis for technically necessary processing is Art. 6(1)(f) GDPR. Where access to the end device is strictly necessary, permissibility also depends on Section 25(2) TDDDG.

Non-essential cookies, tracking technologies, marketing pixels or similar technologies are only used after valid consent has been obtained.

9. Web analytics and statistics

9.1 Current status

Based on the current technical setup, this website does not use personal web analytics with user profiles.

STRATO provides statistical evaluations for hosting products based on log files. According to STRATO, hostname or IP address in the log files is anonymised. These evaluations serve to assess technically and in terms of content which pages are accessed how often.

The operator of this website uses this data only in aggregated form and not to identify individual visitors.

9.2 No advertising or marketing trackers

The following are not currently used:

Google Analytics
Google Tag Manager
Meta Pixel
LinkedIn Insight Tag
TikTok Pixel
advertising network tracking
session recording
heatmaps
cross-site tracking

9.3 Optional future web analytics

If a web analytics tool such as Plausible Analytics, Matomo or a comparable system is used later, this privacy policy will be updated before activation.

The following must be documented:

whether cookies or similar technologies are used,
whether consent under Section 25 TDDDG is required,
which personal data is processed,
whether IP addresses are anonymised,
where the provider is located,
whether data is transferred to third countries,
how long data is stored,
whether user profiles are created.

No consent-requiring tracking will be activated until technical and legal review has been completed.

10. Embedding of external content

Based on the current technical setup, no external content is embedded that automatically transfers data to third parties when a page is loaded, in particular no automatically loaded content from:

YouTube
Google Maps
Google Fonts from Google servers
social media plugins
external tracking or advertising networks

Fonts are displayed using system fonts of the browser or operating system; no fonts are loaded from external servers.

If external content is embedded later, this privacy policy will be updated accordingly. For services requiring consent, valid consent must be obtained before loading, for example via a two-click solution or a consent management system.

11. AI-supported content

Some content on this website may have been created, structured, translated or summarised with the support of AI systems.

There is currently no plan to automatically transfer visitors’ personal data to AI services.

If visitors submit content by email, that content may be processed in the course of handling the enquiry. Transfer to external AI services does not take place without separate review and a legal basis.

AI-supported content is editorially reviewed where possible. Further information is available in the AI and editorial notice on this website.

12. Legal bases for processing

Personal data is processed on the following legal bases depending on the processing activity:

Art. 6(1)(f) GDPR: legitimate interest, in particular secure operation and communication
Art. 6(1)(b) GDPR: pre-contractual or contractual measures, where applicable
Art. 6(1)(a) GDPR: consent, where obtained
Section 25 TDDDG: access to information on end devices or storage of information on end devices, where applicable

13. Retention period

Personal data is stored only as long as necessary for the respective purposes or statutory retention obligations apply.

According to STRATO, server log data is stored for up to seven days to detect and defend against attacks. Anonymised statistics may be retained longer where no personal reference remains.

Email enquiries are deleted once finally processed and no statutory obligations or legitimate interests oppose deletion.

14. Recipients of data

Recipients of personal data may include:

STRATO GmbH as hosting provider
the site operator’s email provider
technical service providers where required for operation, security or maintenance

Data is not disclosed to third parties for advertising purposes.

15. Transfers to third countries

Based on the current technical setup, there is no intentional transfer of visitors’ personal data to third countries outside the European Union or the European Economic Area.

If external services are used later where transfer to third countries is possible, this privacy policy will be updated before activation.

16. Rights of data subjects

Data subjects have the following rights under the GDPR in particular:

right of access under Art. 15 GDPR
right to rectification under Art. 16 GDPR
right to erasure under Art. 17 GDPR
right to restriction of processing under Art. 18 GDPR
right to data portability under Art. 20 GDPR
right to object under Art. 21 GDPR
right to withdraw consent under Art. 7(3) GDPR

The contact address stated above may be used to exercise these rights.

17. Right to lodge a complaint with a supervisory authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data violates data protection law.

The authority responsible may in particular be the data protection supervisory authority of the federal state in which the data subject lives, works or in which the alleged violation occurred.

18. No automated decision-making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place on this website.

19. Currency and changes to this privacy policy

This privacy policy reflects the technical and organisational status of the website at the time of publication.

If new functions are introduced, in particular web analytics, contact forms, newsletters, external embeds, comments, login areas or paid offerings, this privacy policy will be updated before activation.

As of: 28 June 2026