Privacy
How this website handles personal data, under the EU General Data Protection Regulation (GDPR). As of November 2026.
In short
This website uses no cookies, no tracking and no analytics. It has no contact form and no newsletter. Fonts and files come from the website’s own server. Personal data is only processed where it is needed to deliver the site, or when you contact me or book a call.
Who is responsible
Patrick Kögel, Blücherstraße 37a, 10961 Berlin, Germany, patrick@sdgventure.de.
Hosting and server logs
The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, the server records technical data your browser sends: IP address, date and time, the page requested, the referring page, and browser and operating system. This is needed to deliver the site and keep it secure (Art. 6 (1) (f) GDPR). Vercel processes this data on my behalf under a data processing agreement (Art. 28 GDPR) and keeps logs only for a limited period. Vercel is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA are covered by the EU adequacy decision (Art. 45 GDPR).
Booking a call
The “Book a call” and “Let’s talk” buttons open my booking page at Google Calendar, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Nothing is sent to Google until you click. On the booking page, Google processes what you enter, such as name, email and the time you pick, and I receive the booking to hold the call (Art. 6 (1) (b) GDPR, steps before a possible contract). Google may transfer data to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. Google’s privacy policy applies: policies.google.com/privacy.
Email
If you write to me, I use your email address and message to reply (Art. 6 (1) (b) or (f) GDPR). I keep it as long as needed for the conversation and as required by statutory retention periods.
CV download and links
The CV is served from this website, without extra data collection. Links to LinkedIn, client websites and other sites only lead there when you click; from then on, their privacy terms apply.
Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Just write to the email address above.
You can also complain to a data protection authority, for example the one responsible for me: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.