Updated: 9 November 2026
1. Controller and contact
The controller for personal data processed on digibusinesstransformation.de is ideenrepublik UG, Chiemgaustr. 34a, 81549 Munich, Germany, represented by managing director Kai Rebhan. digiTAL is a project of ideenrepublik UG.
For privacy questions or to exercise your rights, contact info.digi@talconsulting.de or call +49 151 44 99 16 33.
2. Website operation and hosting
The website is hosted by IONOS. Visiting it involves processing, in particular, your IP address, access time, requested page, transferred data volume and device, browser and, where supplied, referring-page information. This is used to deliver the pages, operate the website securely and resolve errors.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is an available, reliable website protected against misuse. Technical troubleshooting, investigating specific security incidents and restoring operation determine the purposes for retaining logs and backups; section 13 explains the criteria. IONOS information: privacy and data processing terms.
4. Contact and product enquiries
When you contact us, we process your name, email address, selected interests or products and the content of your enquiry. Company and telephone details are optional. The contact and product forms use Ninja Forms: submissions are stored in the WordPress database and processed through the configured email actions for handling and an acknowledgement. Google Mail/Gmail is used as an email service.
For further handling, enquiry data may be managed in our own CRM on a self-managed server. Make is used for email delivery initiated within the CRM. It processes the recipient and message information and any attachments passed to each delivery operation. Central CRM storage does not exclude processing or technical logs at the delivery services involved.
Article 6(1)(b) GDPR applies to an enquiry about our services made at your request; other correspondence relies on Article 6(1)(f) GDPR and our interest in handling and answering your message. Retention depends on completion of the enquiry, any resulting collaboration, necessary records and legal obligations as explained in section 13. Provider information: Google, Make and Make data processing terms.
5. Applications and supporting documents
For an application, we process your selected role, name, email address and CV. You may optionally provide a telephone number, possible start date, profile/portfolio link, message and additional documents. Please submit only information needed for your application.
The form sends the application and PDF attachments to work.digi@talconsulting.de. Temporary PDF files are removed from the temporary server area after website processing. This does not delete emails or attachments already sent to the mailbox. The application is handled by those responsible for selection.
The purpose is to assess your application and decide on employment or other collaboration. Section 26(1) BDSG applies to employment applications; Article 6(1)(b) GDPR applies to other steps towards a contract. After the process ends, further retention is limited to records necessary to establish, exercise or defend legal claims and the relevant limitation periods; a specific dispute is retained for its resolution. If you are hired, only information needed for the collaboration is processed further. Use for other selection processes is not part of sending the form and requires a separate legal basis.
6. Booking with Calendly
On the booking page, you first select a topic locally. The embedded Calendly calendar loads only when you request it through its designated button. You can also open the direct Calendly link or contact us without using the calendar.
Loading it involves Calendly processing connection data. Booking uses your name, email address, appointment and optional preparation details. The free initial consultation lasts 30 minutes and offers Google Meet or telephone contact. Joining Google Meet later involves the account, communication and connection data needed for that meeting. The conferencing provider’s information also applies when you later join the meeting.
Booking an appointment relies on Article 6(1)(b) GDPR. Where loading optional third-party features requires consent, Article 6(1)(a) GDPR and Section 25(1) TDDDG apply. Appointment and preparation data is used to organise and conduct the meeting and retain necessary records; the criteria in section 13 apply afterwards. Information: Calendly privacy, Calendly data processing terms and Google.
7. digiTalia: optional AI text chat
You choose whether to use digiTalia. The text connection to ElevenLabs is established only after you enable AI answers and submit a question. Processing information is available beforehand. You can disable the AI feature again and contact us without using the chat.
ElevenLabs processes your question, information you share, generated responses and technically necessary connection data. Further model providers are used through ElevenLabs to generate answers; GPT-4.1 from OpenAI is currently configured as the language model. This website chat does not use a microphone, voice recordings or file attachments. Please do not enter credentials, confidential documents or particularly sensitive personal data.
The basis is your consent under Article 6(1)(a) GDPR and, where required, Section 25(1) TDDDG. Disabling the feature withdraws consent for the future. Conversations for this agent are configured for one-day retention at ElevenLabs. This is not a general deletion promise for provider logs, backups or emails sent separately. “Clear view” only removes the displayed conversation and short brief in the browser. This website chat does not decide on your employment or a contract. Information: ElevenLabs privacy and data processing and subprocessors.
8. Deliberately sending your short brief
Chatting alone does not send an enquiry to Kai or create a CRM record. Under “My brief”, you can review and edit the draft. Sending requires your email address; your name is optional.
Only your separate send action emails the displayed version and these contact details through our website to contact.digi@talconsulting.de. A full conversation transcript is not automatically added. Subsequent handling of an enquiry follows section 4. The AI conversation’s one-day setting does not apply to this separate email process. A service enquiry relies on Article 6(1)(b) GDPR; other messages rely on Article 6(1)(f) GDPR for handling and responding.
9. Security and abuse prevention
We use Wordfence and our own safeguards for forms and chat. These process technical connection and security information, such as IP-related attributes, time, access events, delivery references and error references. Our limiting features also use pseudonymous attributes derived from the IP address and browser characteristics. This is not full anonymisation.
Processing protects against attacks, unauthorised access and duplicate sending. It relies on Article 6(1)(f) GDPR and our legitimate interest in secure, reliable operation. Retention is determined by detecting and preventing the relevant misuse and necessary error or incident investigation. Wordfence is provided by Defiant; see the Wordfence privacy notice.
10. Videos and animations
Our own videos and animations are delivered as files from this website. Playback does not connect you to the service previously used to create an avatar or film. Normal website connection data is involved.
External YouTube videos on some German pages load only when you deliberately activate them after the processing notice shown. Google/YouTube may process your IP address, browser information, requested video and usage data and store or access information on your device. The basis is your consent under Article 6(1)(a) GDPR and, where required, Section 25(1) TDDDG. Closing or resetting the external video view stops further requests for the future; it does not reverse processing already carried out. Permission is not stored permanently; starting again requires a new activation. Information: Google privacy.
11. Fonts and Google Maps
The fonts used are served from our own server. Displaying them does not require a connection to Google Fonts.
Google Maps loads only when you deliberately activate the map after the information shown. It transmits, in particular, your IP address, browser and technical access data to Google; Google may store or access information on your device. The basis is your consent under Article 6(1)(a) GDPR and, where required, Section 25(1) TDDDG. You can close the map again; this removes the map view and stops its further requests but does not reverse processing already carried out. Permission is not stored permanently; reopening requires a new activation. You can contact us without using the map. Information: Google privacy.
12. Social media and external links
The social-media icons and WhatsApp references link to external services. Opening a link takes you away from this website; the respective provider’s information also applies to processing there. A simple link is distinct from an embedded feed or social-media plugin.
If you contact us through an external service, we use the contact and message information you provide to handle your request. A service enquiry relies on Article 6(1)(b) GDPR; other messages rely on Article 6(1)(f) GDPR. The purpose-specific retention criteria in section 13 apply.
13. Recipients, international processing and retention
Access is granted to those handling the relevant matter and the hosting, email, security and technical providers involved. Depending on the feature used, these include IONOS, Google for email or Google services, Make for CRM emails, Calendly and ElevenLabs, including their relevant subprocessors and model providers, currently OpenAI for the configured language model. Our own CRM is part of our central internal data management. This does not mean processing occurs exclusively on our server.
External providers may process data outside the European Economic Area, particularly in the United States. Depending on the contractual and processing arrangement, their published data processing terms provide for adequacy decisions, including the EU–US Data Privacy Framework, or Standard Contractual Clauses. Details and sources of these safeguards are available in the linked provider terms; you can also request relevant information from us. We do not give a blanket assurance of processing exclusively in Germany or Europe.
Retention is determined by the specific purpose and progress of the matter: completion of an enquiry and any resulting collaboration, completion of an application process and relevant claim periods, or organising and conducting an appointment and retaining necessary records. Once a purpose ends, further retention is restricted to data required by legal obligations or for specific legal claims. Different information may therefore have different retention periods.
In the ordinary commercial case, applicable business records include six years for commercial/business correspondence, eight years for accounting records and ten years for books and financial statements. Statutory rules determine commencement and any extension. These are not corresponding retention periods for every form or chat. Technical backups and logs follow their recovery, security and troubleshooting purposes. This does not promise automatic erasure of all data after one day or another single period.
14. Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation; you may object to direct marketing at any time. You may withdraw consent for the future without making earlier processing retrospectively unlawful.
Send your request to info.digi@talconsulting.de. You may also complain to a data protection authority, particularly the Bavarian State Office for Data Protection Supervision.
Providing information is generally voluntary. Without information required for a particular feature, that feature or the request made through it cannot be processed. You can use the website without the AI chat and embedded booking. The website features described here do not involve a solely automated decision producing legal or similarly significant effects.