Privacy Policy

1. Controller and Contact

The controller responsible for the processing of personal data on this website is:

If you have any questions about how we handle your personal data, you may contact us at the address above or by email at info@frontinoit.com.

2. Data We Collect

2.1 Contact and inquiry forms

When you submit a form on this website, we collect the information you provide, which may include:

• Full name
• Work email address
• Company name and your role within it
• Information about your SAP environment, project context, or inquiry type
• Any additional information you include in free-text fields

This information is used exclusively to respond to your inquiry and assess whether and how we can be of service.

2.2 Server log files

When you visit this website, your browser automatically transmits certain data to our web server. This includes: browser type and version, operating system, referrer URL, IP address (anonymised after 24 hours), date and time of access, and pages visited. This data is not linked to any personal identifier and is used solely for technical operation and security purposes.

2.3 Newsletter subscription

If you subscribe to our insights newsletter, we collect your email address. You may unsubscribe at any time by using the link included in every email or by contacting us directly.

3. Legal Basis for Processing

We process personal data on the following legal bases under Article 6 GDPR:

• Art. 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a contract (responding to inquiries about our services)
• Art. 6(1)(f) GDPR — processing is necessary for our legitimate interests in operating a professional business website and responding to business inquiries
• Art. 6(1)(a) GDPR — processing is based on your consent, where explicitly given (newsletter subscription)

4. How We Use Your Data

We use the data you provide exclusively for the following purposes:

• Responding to your inquiry or request
• Assessing the relevance and fit of our services to your situation
• Scheduling and conducting discovery calls or assessments
• Sending our insights newsletter, if you have subscribed
• Fulfilling legal obligations, including record-keeping requirements

We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Retention Periods

We retain personal data only as long as necessary for the purpose for which it was collected:

• Inquiry form data: retained for up to 24 months following the last contact, unless a business relationship is established
• Data related to an existing or completed business relationship: retained in accordance with German commercial and tax law retention obligations (generally 6–10 years under HGB and AO)
• Newsletter email addresses: retained until you unsubscribe
• Server log files: anonymised or deleted within 7 days

6. Third Parties and Transfers

We do not transfer your personal data to third parties for their own commercial purposes. We may share data with the following categories of service providers who process data on our behalf and under our instructions:

• Web hosting and infrastructure providers (servers located within the EU/EEA)
• Email service providers used for business communication

All third-party processors are bound by data processing agreements in accordance with Art. 28 GDPR. No personal data is transferred to countries outside the EU/EEA unless adequate safeguards as defined in Chapter V GDPR are in place.

7. Cookies and Tracking

This website does not use tracking cookies, advertising cookies, or third-party analytics services (such as Google Analytics). No cookies are set that track your behaviour across sessions or third-party websites.

If technically necessary session cookies are used (e.g. for form state), they are deleted at the end of your browser session and contain no personal identifiers.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — you may request confirmation of whether we process your personal data and receive a copy
• Right to rectification (Art. 16 GDPR) — you may request correction of inaccurate or incomplete data
• Right to erasure (Art. 17 GDPR) — you may request deletion of your data where no legal obligation to retain it exists
• Right to restriction of processing (Art. 18 GDPR) — you may request that we limit processing in certain circumstances
• Right to data portability (Art. 20 GDPR) — you may request your data in a structured, machine-readable format
• Right to object (Art. 21 GDPR) — you may object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at info@frontinoit.com. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the competent supervisory authority. The relevant authority for Frontino IT Consulting GmbH is:

9. Data Security

This website uses SSL/TLS encryption for all data transmitted between your browser and our server. We implement appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect your data against unauthorised access, loss, or disclosure.

Form submissions are transmitted over encrypted connections. We do not store payment card data on this website — no payment processing takes place on these pages.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Material changes will be communicated where required by law. Continued use of this website after an update constitutes acceptance of the revised policy.