Privacy notice

1. Overview

We take the protection of your personal data seriously and process it exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). This notice informs you which data is processed when you visit this website and when you contact us.

No cookies, no consent banner: This website stores no cookies and does not access information on your device that would require consent under Section 25 TDDDG. Technically necessary storage in the browser (sessionStorage) only takes place if you use the Sales Time Check; this data only leaves your browser when you yourself send an enquiry or book an appointment.

2. Controller

3. Data protection officer

[PLACEHOLDER: name and contact details of the data protection officer, e.g. datenschutz@directscouts.com – or a note that there is no obligation to appoint one (Section 38 BDSG)]

4. Hosting

This website is hosted by [PLACEHOLDER: hosting provider, company name, address] on servers in the European Union [PLACEHOLDER: data centre location, e.g. Frankfurt am Main]. A data processing agreement under Art. 28 GDPR is in place with the provider.

The legal basis is our legitimate interest in a secure, fast and reliable provision of the website (Art. 6 (1) (f) GDPR).

5. Fonts

The font used (Montserrat) is served locally from our server. No connection to Google Fonts or other external font services is made; your IP address is therefore not transmitted to third parties.

6. Server log files

When the website is accessed, the server automatically processes: IP address (truncated or deleted after [PLACEHOLDER: retention period, e.g. 7 days]), date and time, page accessed, amount of data transferred, referrer URL, browser type and version, operating system. This data is not merged with other data sources.

The purpose is technical provision, security and error analysis. Legal basis: Art. 6 (1) (f) GDPR.

7. Contact form and enquiries

If you send us an enquiry via the contact form, we process your first name, your business email address and – if provided – your message. If you have used the Sales Time Check beforehand, the values entered there (number of sales reps, weekly hours, shares) and the calculated result are sent along so that we can prepare the conversation. These values contain no third-party data.

Processing takes place to answer your enquiry and to prepare a possible contractual relationship (Art. 6 (1) (b) GDPR). Your data is transmitted to our CRM system [PLACEHOLDER: CRM provider, based in the EU, data processing agreement] and stored there for [PLACEHOLDER: retention period, e.g. 12 months after last contact] if no contract is concluded. Commercial retention obligations remain unaffected.

To protect against automated enquiries the form uses an invisible check field and limits the number of enquiries per connection. Your data is used for marketing (newsletter) only after separate consent via double opt-in.

8. Appointment booking via Cal.com

To book an intro call we use the calendar service Cal.com (Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA).

The calendar is only loaded when you actively click “Pick a slot” (click-to-load). Only then are your IP address and browser data transmitted to Cal.com. When booking you provide your name, email address and optionally notes; values from the Sales Time Check may be pre-filled. The legal basis for scheduling is Art. 6 (1) (b) GDPR; for loading the service, your consent through active selection (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG).

9. Audience measurement (Plausible Analytics)

To analyse usage we use Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia). Plausible uses no cookies and stores no personal data; the IP address is used exclusively in hashed form, changing daily, to form sessions and is not stored. Processing takes place on servers in the EU. Consent is therefore not required.

Collected: pages accessed, referrer, device type, browser, country and anonymous events (e.g. “form submitted”, without content). Legal basis: Art. 6 (1) (f) GDPR (interest in improving our offering).

10. Bot protection (Cloudflare Turnstile)

To protect the contact form against abuse, Cloudflare Turnstile may be used (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; for the EU: Cloudflare Germany GmbH, Rosental 7, 80331 Munich). The check module is only loaded when you click into a form field. Technical characteristics of your browser and your IP address are processed; Turnstile uses no cookies for recognition.

Legal basis: Art. 6 (1) (f) GDPR (protection against automated enquiries). Transfer to the USA is based on Cloudflare’s certification under the EU-US Data Privacy Framework.

11. Data transfer to Turkey

Our operational sales teams work at our sites in Istanbul. In the course of an engagement, personal data (e.g. contact details of our customers’ contacts) may be processed there. There is no adequacy decision by the EU Commission for Turkey. Transfer therefore takes place on the basis of the EU Commission’s standard contractual clauses (Implementing Decision (EU) 2021/914, module 2) under Art. 46 (2) (c) GDPR, supplemented by a transfer impact assessment (TIA) and technical and organisational measures (TOMs).

No transfer to Turkey takes place for visitors of this website; enquiries via the contact form are processed in the EU.

12. Job applications

Applications are accepted via our careers page [PLACEHOLDER: careers page / application process] or by email. We process your application data to decide on establishing an employment relationship (Section 26 (1) BDSG, Art. 6 (1) (b) GDPR). After the procedure is completed, the data is deleted after six months at the latest, unless you have consented to longer retention in our talent pool. Applications for our sites in Istanbul are additionally processed under Turkish law (KVKK).

13. Your rights

You have the following rights against us regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Insofar as we process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time for reasons arising from your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

To exercise your rights, an informal message to vertrieb@directscouts.com is sufficient.

14. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is that of the federal state in which we have our registered office: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

15. Changes to this notice

We adapt this privacy notice when the website or the legal situation changes. The version published here applies.

As of: September 2026