Privacy policy
Information about the processing of personal data when using this website.
1. Controller
The controller responsible for processing personal data on this website is:
CATO – Gemeinschaft rechtlich selbstständiger Unternehmensberater
Osterwisch 4
24217 Schönberg
Germany
Andreas „Quieta“ Quitte
2. Privacy at a glance
This website is provided solely to present CATO’s advisory services. It offers no user accounts, contact forms, newsletters or online payments.
Personal data may be processed in connection with the technical provision of the website and when you voluntarily contact us by email.
3. Hosting by STRATO
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO provides the technical infrastructure required to make the website available.
Processing is necessary to provide our website securely, reliably and effectively and is based on Article 6(1)(f) GDPR. Where STRATO processes personal data on our behalf, the requirements of Article 28 GDPR apply.
Further information about privacy at STRATO:
4. Server logs and technical access data
When this website is accessed, the hosting provider processes technically necessary access data, which may include:
- IP address, anonymised IP address or host name
- date and time of access
- requested page or file
- volume of data transferred and HTTP status code
- browser type, operating system and, where applicable, referring URL
This information is used to deliver the website, ensure system stability and security, and prevent or investigate technical attacks. STRATO states that IP addresses or host names are anonymised in the website log files made available to customers.
Processing is based on Article 6(1)(f) GDPR. Data is retained only where and for as long as necessary for these purposes; anonymised statistics do not directly identify individual visitors.
5. Automatic language selection
When the homepage is opened, the language configured in the browser is read locally to display the German, English, Spanish or Italian version where appropriate.
Language selection does not involve a user account, tracking, cookies or a persistent user profile. Visitors can manually select a language at any time.
6. Contact by email
If you contact us by email, we process your email address, the content of your message and any other information you choose to provide solely to handle and answer your enquiry.
The legal basis is Article 6(1)(b) GDPR where the enquiry concerns steps prior to entering into a contract or the performance of a contract, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in communication.
Enquiries are deleted once they have been resolved and no statutory retention obligations or other legitimate reasons require continued storage.
7. Cookies, tracking and external services
This website does not use analytics or marketing cookies. No web analytics, advertising, remarketing or social-media tracking services are used.
Fonts, graphics and other content are served through the website itself. No external maps, embedded videos, contact forms or embedded social-media content are used.
8. Recipients and international transfers
Personal data is accessible only to the individuals handling the relevant matter and to technical service providers where required for hosting, security or email communications.
The website is hosted by STRATO in Germany. This website does not intentionally transfer personal data to countries outside the European Union or the European Economic Area.
9. Retention and data security
Personal data is processed only for as long as necessary for the relevant purpose or required by statutory retention obligations.
Where SSL/TLS encryption is active, data transmitted between your browser and the website is encrypted. An encrypted connection can usually be recognised by ‘https://’ in the browser address bar.
10. Your rights
Under the General Data Protection Regulation, you have in particular the following rights:
- access to personal data under Article 15 GDPR
- rectification of inaccurate data under Article 16 GDPR
- erasure under Article 17 GDPR
- restriction of processing under Article 18 GDPR
- data portability under Article 20 GDPR
- objection to processing under Article 21 GDPR
- the right to lodge a complaint with a supervisory authority under Article 77 GDPR
You may contact us by email at any time to exercise these rights.
11. Supervisory authority
Independent Centre for Privacy Protection Schleswig-Holstein (ULD)
Holstenstraße 98, 24103 Kiel, Germany
Email: mail@datenschutzzentrum.de
12. Last updated
August 2026. This privacy policy will be updated if the website, the services used or the applicable legal requirements change.