CAPEXA Consulting
EN DE
Privacy Policy

How we handle personal data on this website.

Protecting your personal data matters to us. This policy explains which data is processed when you visit this website, on what legal basis, and which rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

  • ›CAPEXA Consulting GmbH i. G. (in formation)
  • ›Heinrich-von-Kleist-Strasse 9, 51373 Leverkusen, Germany
  • ›Represented by: Marc Ackermann, Dirk Bodenheim and Ludger Schlüter
  • ›Email: contact@capexa.de

2. General information on data processing

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy. This website can generally be used without providing personal data. Personal data is any data that can be used to identify you personally.

3. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights:

  • ›Right of access (Art. 15 GDPR)
  • ›Right to rectification (Art. 16 GDPR)
  • ›Right to erasure (Art. 17 GDPR)
  • ›Right to restriction of processing (Art. 18 GDPR)
  • ›Right to data portability (Art. 20 GDPR)
  • ›Right to object to processing (Art. 21 GDPR)
  • ›Right to withdraw a given consent (Art. 7 (3) GDPR), where consent was granted

To exercise these rights, an informal message to the contact details listed under section 1 is sufficient.

4. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data relating to you infringes the GDPR.

Competent supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf (address: Kavalleriestraße 2–4, 40213 Düsseldorf), phone +49 (0)211 38424-0, email poststelle@ldi.nrw.de

5. Data collected when visiting the website (server log files) and hosting

When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in what are known as log files. The following information is recorded without any action on your part and stored until it is automatically deleted:

  • ›IP address of the requesting device
  • ›date and time of access
  • ›name and URL of the file accessed
  • ›website from which access is made (referrer URL)
  • ›browser used and, where applicable, the operating system of your device as well as the name of your access provider

The purpose of the processing is to ensure a smooth connection to the website, to ensure comfortable use of our website, to evaluate system security and stability, and for administrative purposes.

The legal basis for the processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes for collecting the data listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about you personally.

Hosting: This website is a static website hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. The processing is carried out for the proper and secure provision of our online offering. GitHub states that it retains the log file data for security purposes for a limited period; we ourselves do not evaluate the log files and have no access to individual visitors’ data.

GitHub, Inc. is certified under the EU-US Data Privacy Framework. Further information is available in GitHub’s privacy statement.

Redirect domain. Besides this website we hold the domain capexa.eu. It hosts no content of its own; it redirects permanently to www.capexa.de. The redirect is operated by Sjorsvanwessem Holding B.V. (redirect.pizza), Netherlands, acting as our processor within the European Union. To perform the redirect, the provider processes the data your browser transmits with the request, in particular your IP address, the requested address and the time of the request. No cookies are set and no analytics are collected. The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in keeping additional domains reachable.

6. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://”.

7. Storage in your browser (local storage) – “capexa-lang”

Local storage is a browser mechanism similar to a cookie. This website uses it for exactly one entry:

  • ›Name: capexa-lang
  • ›Purpose: remembers whether you chose the English or the German version, so the language switch is honoured on your next visit and the start page opens in your language.
  • ›Content: the value “en” or “de”. No personal data, no identifier.
  • ›Lifetime: until you delete it in your browser. It is never transmitted to us or to anyone else.

Legal basis: Storing this value is strictly necessary to provide a function you expressly request (your language choice) within the meaning of § 25 (2) no. 2 TDDDG. Consent is therefore not required and no consent banner is shown. Since the value contains no personal data, the GDPR does not apply to this stored value.

Managing storage in your browser: You can view or delete the stored value at any time in your browser’s settings (usually under privacy, site data or cookies). If you block storage for this site, the site keeps working; your language choice is simply not remembered between visits.

8. What is not used

We do not use any analytics, statistics, tracking or marketing cookies. No advertising networks, social-media plugins or embedded third-party content are used. Fonts and photographs are served from our own server, so no third party can set cookies or collect data through this website.

9. Contacting us by email

If you contact us by email, the information you provide (your email address, your name and the content you share) will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in responding to your enquiry) or Art. 6 (1) (b) GDPR where your enquiry is aimed at the conclusion or performance of a contract. We do not pass on this data without your consent and delete it once the enquiry has been conclusively dealt with, provided there are no statutory retention obligations to the contrary.

10. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The current version applies to your next visit.

Last updated: September 2026