Kantor Communication Consulting

Privacy Policy

This is a convenience translation. The legally binding version is the German version (Datenschutzerklärung).

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Dorian Kantor
Kantor Communication Consulting
Schadowstraße 29, 45147 Essen, Germany
Phone: +49 170 7070045
Email: contact@kantor-communication.com

We are not legally required to appoint a data protection officer. For any data protection questions, please use the contact details above.

2. General information

The protection of your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, German Federal Data Protection Act / BDSG). This privacy policy informs you about the most important aspects of data processing on our website.

3. Hosting

This website is hosted by an external service provider (processor): Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.

The personal data collected on this website is processed on the provider's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, and other data generated via a website.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the reliable and secure provision of our website).

Data processing agreement: We have concluded a data processing agreement (DPA) with the provider pursuant to Art. 28 GDPR.

Data transfer to the USA: As the provider is based in the USA, personal data may be transferred to the USA. The provider is certified under the EU-U.S. Data Privacy Framework (DPF). Insofar as a transfer is not covered by the DPF, it takes place on the basis of the European Commission's Standard Contractual Clauses (Art. 46 (2) (c) GDPR).

The domain of this website is managed via the registrar Porkbun LLC (USA).

4. Server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • browser type and version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address

This data is not merged with other data sources. Collection is based on Art. 6 (1) (f) GDPR; we have a legitimate interest in the technically error-free presentation and security of our website. The data is deleted as soon as it is no longer required for the stated purpose.

5. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL / TLS encryption. You can recognise an encrypted connection by the change in the browser's address line from "http://" to "https://" and by the lock symbol in your browser bar. When encryption is active, the data you transmit to us cannot be read by third parties.

6. Contact by email

If you contact us by email, your details, including the contact data you provide, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR). We do not pass on this data without your consent.

7. Contact and application forms

Our website offers forms through which you can contact us: enquiry for Communication Consulting, enquiry for the Language School, and job application (Jobs).

When you use one of these forms, we process the data you enter — in particular your name, email address and any further contact and enquiry data you provide voluntarily. In the application form you may additionally upload a CV; we process the personal data it contains for the purpose of conducting the application procedure.

The forms are technically provided via the service Formspree (Formspree, USA). The form data you submit — including documents uploaded via the application form — is processed by this provider on our behalf and forwarded to us. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. Processing takes place on servers in the USA (Amazon Web Services). As personal data is thereby transferred to the USA, the transfer is carried out on the basis of the European Commission's Standard Contractual Clauses (Art. 46 (2) (c) GDPR).

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures or handling of your enquiry); for applications additionally § 26 (1) BDSG. Where you consent beyond this (e.g. inclusion in a talent pool), Art. 6 (1) (a) GDPR, revocable with effect for the future.

Retention period: We store your data for as long as necessary to handle your request, then delete it. Application documents are deleted no later than six months after conclusion of the procedure, unless longer storage has been agreed and no statutory retention obligations apply.

8. Cookies

Our website uses only technically necessary cookies that are required for the operation of the website. No consent is required for these (§ 25 (2) TDDDG). We do not use any analytics, tracking or marketing cookies. The legal basis for the associated processing is Art. 6 (1) (f) GDPR (legitimate interest in a technically flawless provision of the website).

9. Fonts

To display fonts consistently, this website uses locally embedded fonts. The fonts used are stored on the hosting provider's server and loaded locally. No connection to third-party servers (e.g. Google) takes place in this respect.

10. Your rights

You have the following rights regarding your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object to processing (Art. 21 GDPR)

If you have consented to processing, you may withdraw that consent at any time with effect for the future (Art. 7 (3) GDPR). The lawfulness of processing carried out until withdrawal remains unaffected. To exercise your rights, an informal message to the contact details in section 1 is sufficient.

11. Right to object (Art. 21 GDPR)

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

12. Right to lodge a complaint with a supervisory authority

In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent authority is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
www.ldi.nrw.de

13. Obligation to provide data

The provision of your data is voluntary. Insofar as certain details are required to process an enquiry or application, we may be unable to process your request, or unable to process it in full, without them.

14. Currency of and changes to this privacy policy

As our website develops or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.

Last updated: July 2026