Privacy Policy
Last updated: 7 October 2026
This privacy policy explains how personal data is processed when you visit our website or contact us by email.
Controller and contact details
BADA Digital Consulting GmbH
Ernst-Bauer-Weg 14
89075 Ulm
Represented by: Dominik Rziha, Lewin Schaudt
Email: info@bada-consulting.com
For project enquiries, please contact sales@bada-consulting.com.
Contact by email
When you contact us by email, we process the information you provide to handle and respond to your enquiry. This includes your email address, the content of your message and, where applicable, your name and attachments. The contact links on this website open your email application.
We use Microsoft 365 / Exchange Online for email communication. Microsoft processes the communication data provided as part of delivering this service. Information about its data protection and security terms is available in the Microsoft Products and Services Data Protection Addendum.
If your enquiry relates to a contract or pre-contractual steps, processing is based on Article 6(1)(b) GDPR. For other enquiries, the basis is Article 6(1)(f) GDPR; our legitimate interest is to handle and respond to your enquiry.
We retain this information for as long as necessary to handle your enquiry. Where statutory retention obligations apply, the relevant data is retained for the required period.
Hosting and technical delivery
This website is operated and hosted through Webflow. The provider is Webflow, Inc., USA. When you access the website and its files, data processed includes your IP address, the requested address, the time of access, and browser and device information. This information is used to deliver the website, analyse errors and ensure secure operation, and may be stored in technical log files.
This processing serves our legitimate interest in providing a secure and reliable website under Article 6(1)(f) GDPR.
Webflow uses additional service providers; processing in the USA is possible. The Webflow Data Processing Addendum describes the terms for processing on our behalf and the safeguards provided for international data transfers. Further information is available in the Webflow EU & Swiss Privacy Policy.
Fonts and website files
Manrope and Darker Grotesque are uploaded to Webflow as font files. Like the images and ISO certificate, they are delivered through Webflow’s file infrastructure. The technical processing described above takes place to deliver these files.
Technical infrastructure and security
The hosting infrastructure protects this website against excessive and abusive requests. It uses the technical Cloudflare cookie _cfuvid for this purpose. This cookie enables rate limiting to distinguish requests from visitors who share an IP address and helps protect access to the website. It is set as a session cookie without a fixed expiry time. Further information is available in the Cloudflare cookie documentation.
Plausible Analytics
We use Plausible Analytics for statistical analysis of website usage. Plausible operates without analytics cookies or a persistent visitor identifier in the browser.
Data collected includes pageviews and referring pages, browser, operating system and device information, approximate location information, time spent and scroll depth. According to the provider, raw IP addresses and User-Agent strings are not stored. An identifier that changes daily and is specific to the website enables visitors to be distinguished for statistical purposes.
We also measure use of selected links through the events Contact CTA for “Discuss a project”, Email Click for the separate email link and ISO Certificate for the certificate link. These event calls send only the event name, without personal custom event properties such as names, email addresses or message content.
Information about the data collected and how it is processed is available in the Plausible Data Policy.
Your rights
Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on your consent, you may withdraw it with effect for the future. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.
You may also lodge a complaint with a data protection supervisory authority. For questions or to exercise your rights, please contact info@bada-consulting.com.
Updates to this policy
We update this privacy policy when the website’s technical delivery or the processing of personal data changes.