Legal

Privacy policy

This is a translation. Only the German version is legally binding.

Last updated: October 2026

1. Overview

Protecting your personal data is important to us. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR, German: DSGVO), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

This website is our own, individually programmed website. It is not run on a website builder. Below you will find out which data we process when you visit the website, send us an enquiry or subscribe to our newsletter, why we do so and what rights you have.

2. Controller

SN Advisory
Owner: Svyatoslav Nychyporenko
Königsberger Str. 14
96215 Lichtenfels
Germany

Email: [email protected]
Phone: +49 155 63747796

3. Data protection officer

A data protection officer is not required by law and has therefore not been appointed. If you have any questions about data protection, please contact us directly at the address above.

4. Hosting, delivery and server log files

This website, its database and its application logic run on Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages, Workers and D1 services). Cloudflare delivers the pages via a global network of data centres and protects the website against attacks and overload.

When you access the website, the following data is processed because it is technically necessary:

  • IP address
  • date and time of access
  • address accessed (URL) and amount of data transferred
  • referring website (referrer)
  • browser, operating system and device type

The purpose is to provide the website securely, reliably and quickly, and to prevent misuse. The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the technically flawless and secure operation of the website. This data is not combined with other data and is deleted by Cloudflare after a short period.

The data from our enquiry form, newsletter subscriptions and blog articles are stored in a Cloudflare database configured to store data within the European Union.

We have concluded a data processing agreement with Cloudflare pursuant to Art. 28 DSGVO (Data Processing Addendum). Cloudflare is certified under the EU-U.S. Data Privacy Framework. Should data reach the USA, the transfer is based on the adequacy decision of the European Commission (Art. 45 DSGVO) and additionally on standard contractual clauses (Art. 46 DSGVO).

5. Storage on your device, cookies and consent

We only store information on your device that is required for the functions you have requested. Everything else happens only with your consent.

Strictly necessary (no consent required)

  • sn-lang, sn-theme, sn-cur: your chosen language, light or dark mode and the currency in which prices are shown (local storage of your browser, until you delete it).
  • sn-consent: your choice in the cookie banner and when you made it, so that we do not ask you again on every page (local storage, until you delete it).

The legal basis is § 25 Abs. 2 Nr. 2 TDDDG and Art. 6 Abs. 1 lit. f DSGVO.

Statistics and marketing (only with consent)

Google Analytics, Google Ads and the Meta Pixel are only loaded after you have given your consent in the cookie banner. Before that, no data is transferred to these providers. The legal basis is your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO in conjunction with § 25 Abs. 1 TDDDG.

If you have consented to statistics, we also note for the duration of your visit which page or campaign brought you to us (entry sn-attr in your browser's session storage, deleted when you close the tab).

Changing or withdrawing your consent

You can change or withdraw your choice at any time via the “Cookie settings” link in the footer of every page. Withdrawal applies to the future. You can also delete cookies and stored data in your browser settings.

6. Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It helps us understand how visitors reach our website (for example via Google Search, social media or a campaign) and which content they use, so that we can improve our services.

The data processed includes: pages viewed, time spent on the site, source of the visit, approximate location (country, city), device, browser and operating system, as well as a pseudonymous identifier. Google Analytics 4 does not store complete IP addresses. For this purpose, cookies such as _ga and _ga_<ID> are set with a lifetime of up to 2 years. Data in Google Analytics is deleted after 14 months.

Data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Google. The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TDDDG). Further information: policies.google.com/privacy

To embed these services we may use Google Tag Manager (also provided by Google Ireland Limited). It does not set any cookies itself, only manages how the services are loaded, and is likewise only loaded after you have given your consent.

7. Google Ads conversion tracking

If we run adverts on Google and you have consented to marketing, we use Google Ads conversion tracking (also provided by Google Ireland Limited). This tells us whether someone sent an enquiry after clicking on one of our adverts. For this purpose, cookies such as _gcl_au are set with a lifetime of up to 90 days. We only receive aggregated statistics, not data that would allow us to identify you personally. The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TDDDG). Regarding transfers to the USA, the information in section 6 applies.

8. Meta Pixel

If you have consented to marketing, we use the Meta Pixel provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). This allows us to measure whether visitors send an enquiry after clicking on an advert on Facebook or Instagram, and to target our adverts more precisely. Among other things, the cookie _fbp is set with a lifetime of up to 90 days.

We are jointly responsible with Meta for the collection and transfer of the data to Meta (Art. 26 DSGVO). Any further processing by Meta is the sole responsibility of Meta. You can find the corresponding agreement at facebook.com/legal/controller_addendum. Data may be transferred to Meta Platforms, Inc. in the USA. Meta is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TDDDG). Further information: facebook.com/privacy/policy

9. Enquiry form (consultation requests and job applications)

Using our enquiry form, you can request a consultation with no obligation or apply for a position. In doing so, we process:

  • the selected topic, details and budget range (if provided)
  • name, company (optional), email address, phone number and preferred method of contact
  • your message (optional)
  • website language, the page from which you sent the enquiry and the time of the enquiry
  • source of your visit: the referring website and, where applicable, campaign parameters from the link (for example utm_source) through which you reached our website

The purpose is to handle your enquiry, to prepare and hold the consultation and, where applicable, to conclude and perform a contract. The source information helps us understand how clients find us. The legal basis is Art. 6 Abs. 1 lit. b DSGVO (precontractual measures) and, for the source information, Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in evaluating our channels). For job applications, the legal basis is Art. 6 Abs. 1 lit. b DSGVO in conjunction with § 26 BDSG.

Your enquiry is stored in our client management system (database at Cloudflare, see section 4) and is also sent to us by email via our email delivery service (see section 11). Only we have access to the data, and access is password protected.

We delete enquiries once they have been dealt with and no contract has been concluded, at the latest 12 months after the last contact. We delete application data at the latest 6 months after the application process has ended, unless you have consented to longer storage. Statutory retention obligations remain unaffected.

To protect against spam and misuse, we briefly process an encrypted (hashed) value of your IP address when you submit the form. This value is deleted after 24 hours at the latest (Art. 6 Abs. 1 lit. f DSGVO).

Scheduling appointments and video calls

When we schedule an appointment with you, we enter it in our Google Calendar (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This involves processing your name, email address, the topic and the time of the appointment. You will receive an invitation from Google by email. For video calls we use Google Meet. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6 Abs. 1 lit. b DSGVO. We delete appointment data within the same periods as your enquiry.

10. Newsletter

If you subscribe to our newsletter, we store your email address, your language and the date and time of your subscription and confirmation. We use the double opt-in procedure: after signing up, you will receive an email with a confirmation link. Your subscription only becomes active once you click this link. This ensures that nobody can sign up using someone else's address.

The newsletter contains information about our services, expert knowledge, news and offers. The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO). We store the times of subscription to document your consent (Art. 6 Abs. 1 lit. c und f DSGVO).

You can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by sending us a message. After you unsubscribe, we remove your address from the mailing list. We delete unconfirmed subscriptions after 30 days.

11. Mailbox (Hostinger) and email delivery (Brevo)

Our email mailboxes are provided by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Automated emails from this website, i.e. notifications about new enquiries, confirmation emails and newsletters, are sent via Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). This involves processing the recipient address and the content of the respective email. Both providers process the data within the EU. We have concluded a data processing agreement with both pursuant to Art. 28 DSGVO. The legal basis is Art. 6 Abs. 1 lit. b und f DSGVO, and for the newsletter your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO.

12. Contact by email, phone, WhatsApp or Telegram

If you contact us directly by email, phone or via a messenger, we process your details in order to deal with your request (Art. 6 Abs. 1 lit. b und f DSGVO). For WhatsApp (WhatsApp Ireland Limited) and Telegram (Telegram Messenger Inc.), their own privacy policies also apply. These services are only used if you open them yourself. If you prefer not to use them, please use email, phone or our form.

13. Fonts and software libraries

All fonts, icons and scripts on this website are hosted on our own server. No connection to Google Fonts or other external providers is established when a page is loaded. The only exceptions are the services described in sections 6 to 8, and only with your consent.

14. Links to social networks and external websites

Our website contains simple links to Instagram, TikTok, Telegram and WhatsApp as well as to articles in our portfolio. These are plain links without any embedded content. Simply visiting our website does not transfer any data to these providers. Only when you click a link are you taken to the respective provider's website, where its own privacy policy applies.

15. Recipients and transfers to third countries

We only pass on your data if you have consented, if it is necessary for the performance of a contract or precontractual measures, if there is a legal obligation or if we use service providers as processors (Cloudflare, Hostinger, Brevo, Google, Meta as described above). Transfers to the USA are only made to providers certified under the EU-U.S. Data Privacy Framework or on the basis of standard contractual clauses.

16. Storage period

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods (for example up to 10 years under German commercial and tax law). The specific periods can be found in the individual sections.

17. Your rights

You have the right at any time to:

  • access to your stored data (Art. 15 DSGVO)
  • rectification of inaccurate data (Art. 16 DSGVO)
  • erasure (Art. 17 DSGVO)
  • restriction of processing (Art. 18 DSGVO)
  • data portability (Art. 20 DSGVO)
  • withdraw any consent given, with effect for the future (Art. 7 Abs. 3 DSGVO)

Right to object (Art. 21 DSGVO): Where we process data on the basis of legitimate interests (Art. 6 Abs. 1 lit. f DSGVO), you may object at any time on grounds relating to your particular situation. You may object to the use of your data for advertising purposes at any time without giving reasons.

To exercise your rights, an informal message to [email protected] is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, Bavarian Data Protection Authority), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

18. Obligation to provide data and automated decision making

You are not obliged to provide us with any data. However, without the mandatory details in the form, we cannot process your enquiry. No automated decision making or profiling within the meaning of Art. 22 DSGVO takes place.

19. Data security

All data is transmitted in encrypted form via HTTPS (TLS). Access to our client management system is protected by a strong password, which is only stored in encrypted (hashed) form, and safeguarded against repeated failed login attempts.

20. Changes

We update this privacy policy whenever the website, our service providers or the legal situation change. The version published here at any given time applies.