Privacy Policy

Last updated: 2 June 2026

1. Overview

This Privacy Policy explains how personal data is collected, processed and stored when you visit this website or use the contact form. This website is operated by Burag Gurden, an independent sustainability and strategy consultant based in Berlin, Germany. I am committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR).

2. Data Controller

Burag Gurden
Reinhardt Str. 3A, 12103 Berlin, Germany
Email: buraggurden@gmail.com
Phone: +49 1575 3320075

I act as the data controller for all personal data collected through this website.

3. What Data Is Collected

3.1 Contact Form

When you submit the contact form, the following data is collected:

• Full name
• Email address
• Company / organisation (optional)
• Service interest (optional)
• Message content

This data is submitted via Netlify Forms and stored on Netlify's servers in the United States. Netlify acts as a data processor under GDPR. For more information, see Netlify's Privacy Policy.

3.2 Analytics

This website does not use third-party analytics cookies, tracking pixels or advertising scripts. I do not use Google Analytics or similar services.

3.3 Server Logs

Netlify (the hosting provider) may collect standard server logs including IP address, browser type, referring page and timestamp. These are used for security and technical troubleshooting only and are retained for a limited period in accordance with Netlify's data retention policies.

4. How Your Data Is Used

Your personal data is used solely for the following purposes:

• To respond to your enquiry or consultation request
• To prepare for and conduct professional discussions
• To maintain a record of business correspondence

I do not use your data for marketing, advertising or any purpose unrelated to your original enquiry. I do not sell, rent or share your data with third parties except as required for hosting (Netlify) or legal compliance.

5. Legal Basis for Processing

Under GDPR Article 6, the legal basis for processing your contact form data is legitimate interest (responding to your business enquiry) and, where applicable, consent (your voluntary submission of the form).

6. Data Retention

Contact form submissions are retained for up to 24 months from the date of submission, after which they are deleted. If we enter into a professional engagement, relevant correspondence may be retained for the duration of the engagement plus any applicable statutory limitation period.

7. Your Rights

Under GDPR, you have the following rights:

• Right of access — Request a copy of your personal data
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your data ("right to be forgotten")
• Right to restriction — Request limited processing of your data
• Right to data portability — Receive your data in a structured format
• Right to object — Object to processing based on legitimate interest

To exercise any of these rights, contact me at buraggurden@gmail.com. I will respond within 30 days.

8. Data Security

This website uses HTTPS encryption for all data transmission. Contact form data is transmitted securely to Netlify's servers. I take reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.

9. International Data Transfers

Contact form data is processed by Netlify in the United States. Netlify participates in the EU-US Data Privacy Framework and provides Standard Contractual Clauses (SCCs) for GDPR-compliant international data transfers. For details, see Netlify's Data Processing Addendum.

10. Changes to This Policy

I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the website after changes constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact me at buraggurden@gmail.com or by post at the address above.