Last updated: 11 November 2026
This policy explains what personal data Vitral Consulting collects through vitral-consulting.com, why, and what rights you have. If you have any question about it, write to us at [email protected].
Who is responsible
Vitral Consulting is the controller of the personal data described here. Contact: [email protected].
Contact form
When you send the contact form we receive your name, company, email address, the topic you selected and your message. We use them only to answer your enquiry and, if it leads to one, to prepare an offer or contract. The form is handled by our form service, which runs on servers in the European Union (Germany), and your message is delivered to our team by email. You also receive an automatic confirmation by email.
To keep the form free of spam and abuse, the form service also records the IP address you send from, your browser and device type, and the page you sent the form from. These details are kept for up to 90 days on the form server and are included in the email our team receives.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries and protecting the form from abuse (Art. 6(1)(f) GDPR). We keep enquiry emails for as long as needed to handle your request and any business relationship that follows, and delete them when they are no longer needed.
Google reCAPTCHA
The contact form uses Google reCAPTCHA v3 to tell people from automated spam. It loads only once you start filling in the form, and sends Google technical information such as your IP address, browser details and how you interact with the page. Google LLC may process this data in the United States under the EU-US Data Privacy Framework. Legal basis: our legitimate interest in protecting the form (Art. 6(1)(f) GDPR). See Google’s Privacy Policy and Terms of Service.
Cookies and analytics
We use Google Tag Manager, Google Analytics 4 and Microsoft Clarity to understand how the site is used, for example which pages are visited and where visitors come from. These tools set cookies and are loaded only if you click Accept in the cookie banner. If you decline, nothing is loaded. You can change your choice at any time with the Cookie settings link at the bottom of every page.
- Google Analytics 4 / Google Tag Manager (Google Ireland Ltd. and Google LLC): cookies
_gaand_ga_*, kept up to 2 years. - Microsoft Clarity (Microsoft Corporation): cookies such as
_clckand_clsk, kept up to 1 year. Clarity records how pages are used (clicks, scrolling) in a pseudonymised form.
Both providers may transfer data to the United States under the EU-US Data Privacy Framework and standard contractual clauses. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Your choice itself is stored in your browser’s local storage under toc-consent.
Live chat
The site offers a live chat provided by tawk.to (tawk.to inc.). If you use it, the messages you write, your name and email if you give them, and technical data such as your IP address and browser are processed by tawk.to so that we can reply. Legal basis: our legitimate interest in answering questions quickly (Art. 6(1)(f) GDPR) and, where it concerns a possible engagement, steps before a contract (Art. 6(1)(b) GDPR). See the tawk.to privacy policy.
Booking a consultation
The free consultation page embeds a booking calendar from Calendly (Calendly LLC, United States). When you book, Calendly processes the details you enter and the time you choose so that the meeting can be scheduled. See the Calendly privacy notice.
Hosting and server logs
The website is hosted in the European Union. Like any web server, it records technical access logs (IP address, date and time, requested page, browser) to keep the site secure and running. These logs are deleted automatically after a short period.
Who receives your data
We do not sell your personal data. It is only shared with the service providers named above, which process it on our behalf or as independent controllers under their own policies, and with authorities where the law requires it.
Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw any consent you gave at any time, without affecting processing that happened before. To use these rights, email [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.
Changes
We may update this policy when the site or the services we use change. The date at the top shows the latest version.