Privacy notice
1. Controller
The controller responsible for the processing of personal data on this website is:
2. Hosting and technical delivery
This website is hosted by an external hosting provider. In this context, the data technically required to deliver and securely operate the website is processed.
Where IONOS processes personal data on behalf of Zörner Consulting, this is based on the IONOS contractual documents, including a data processing agreement pursuant to Art. 28 GDPR.
3. Server log files
When the website is accessed, technical access data is processed. This may include, in particular, the IP address or anonymised IP address, date and time of access, requested file, amount of data transferred, referrer URL, browser type, browser version and operating system.
The processing serves the technical delivery of the website, system security and troubleshooting. This data is not combined with other data sources and is not used for advertising purposes.
Legal basis: Art. 6(1)(f) GDPR.
Server log files are processed on the server provided by IONOS as part of technical administration. Retention is governed by the log-rotation settings configured on the server; log data is deleted or overwritten once it is no longer required for operation, security and error analysis.
4. Contact by e-mail or phone
If you contact us by e-mail or phone, the data you provide is processed in order to handle your enquiry. This usually includes your name, contact details, the content of the enquiry and subsequent correspondence.
The processing is carried out to handle your enquiry, to communicate in the context of pre-contractual or contractual relationships and to document business processes.
The data is deleted once it is no longer required for the respective purpose, unless statutory retention obligations or legitimate interests require further retention.
5. Microsoft 365 as e-mail service provider
Microsoft 365 is used for business e-mail communication. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
When e-mails are sent, received and stored, message content, contact and communication data as well as technical log data may be processed.
The processing serves reliable business communication, documentation of enquiries and the technical security of e-mail operations.
Where Microsoft processes personal data on behalf of Zörner Consulting, this is based on the Microsoft contractual documents, including the Microsoft Products and Services Data Protection Addendum.
In limited cases, personal data may also be processed outside the European Economic Area or accessed from outside the EEA. Where this occurs, Microsoft relies in particular on the European Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR.
6. Digital tools and protected applications
The website may link to proprietary digital applications or protected project access, in particular under app.zoerner.consulting. When these services are used, technical access data, login or access events, code requests, inputs into calculation tools and security-relevant log data may be processed.
The processing serves to provide the applications, control access, analyse errors, protect confidential project information and prevent misuse.
Calculation inputs are often technical data. A personal-data reference may arise if users enter personal or project-related information in free-text fields, file names or project access areas.
Interactive Acoustic Model (project access): The e-mail address is used to authenticate access to protected project content. A time-limited one-time code is sent by e-mail for this purpose. As part of access control and protection against misuse, technical access data such as the IP address and the time and status of sign-in events is also processed. Sign-in data and security-relevant log data of the application are retained only for a short period and then deleted automatically. Session data is deleted automatically after the respective sign-in expires. Changes tried out in the model (e.g. sound sources switched on or off) are processed exclusively in the browser and are neither transmitted to nor stored on the server.
7. Cookies and local storage technologies
Under the current technical setup, the main website does not set cookies and does not use tracking or marketing technologies.
Based on this setup, a cookie banner is not required. If non-essential cookies, analytics tools or comparable technologies are introduced in the future, a suitable consent mechanism will be added beforehand.
Digital applications may use technically necessary cookies or local storage technologies where required for login, access protection, session security or the requested function.
Interactive Acoustic Model: Technically necessary cookies are used for sign-in, access protection and session security. Depending on the sign-in option selected, the session remains active until the browser is closed or for up to 30 days. Display settings – column width, selected view, share display and hidden receiver points – are kept in the browser's local storage (localStorage). They remain in the browser, are not transmitted and are kept until deleted in the browser. This storage is required for the function requested by the user (Section 25 (2) no. 2 TDDDG).
8. No analytics, marketing or third-party tools
This website does not use web analytics such as Matomo or Google Analytics, advertising cookies, a newsletter, event registration or embedded social media plugins.
The fonts used on this website are hosted locally. No connection is made to Google Fonts or comparable external font services.
9. Recipients of personal data
Personal data is only disclosed where this is required for the purposes described above, where there is a legal obligation or where another legal basis permits disclosure.
Where service providers process personal data on behalf of Zörner Consulting, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
10. Retention period
Personal data is stored only for as long as required for the respective purpose. It is then deleted unless statutory retention periods, documentation obligations or legitimate interests require further retention.
Business correspondence may be subject to commercial and tax retention obligations. Technical log data is generally stored for a shorter period and used only for operation, security and troubleshooting.
11. Rights of data subjects
Subject to the statutory requirements, you have the right of access, rectification, erasure, restriction of processing, data portability and objection to certain processing activities.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, simply send a message to datenschutz@zoerner.consulting.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for North Rhine-Westphalia is:
13. Data security
The website is provided via an encrypted HTTPS connection. Please note, however, that e-mail communication on the internet can generally involve security risks.
14. Version and changes
This privacy notice is dated 27 September 2026.
This notice will be updated if the technical implementation of the website, the service providers used or the legal requirements change.