Forbach & Partners DE Book a call

Legal

Privacy policy

This is a convenience translation. The German version is legally binding.

1. Controller

Forbach and Partners Ltd
Agias Irinis 46, 8504 Paphos, Cyprus
Represented by: Sascha P. Forbach (Director)
Postal address Germany: Graf-Adolf-Straße 41, 40210 Düsseldorf
Email: info@forbachandpartners.com
Phone: +49 211 909 899 62

We have not appointed a data protection officer, as we are not required to do so. For data protection questions, contact us at the email address above.

2. Overview and recipients

Apart from technically necessary server logs (section 4) and the LinkedIn Insight Tag with your consent (section 9), we only process personal data when you contact us. This includes in particular your name, company, email address, phone number, details of your machine control and the content of your request.

We use service providers that process data only on our instructions (processors under Art. 28 GDPR). They are named in the following sections.

Beyond this, we only disclose data where the law permits or requires it, or where you have consented.

3. Contact form

If you write to us via the contact form, we process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request aims at a contract, and otherwise our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).

We need your name, company, email address and message to be able to reply. All other details are optional.

The form is transmitted in encrypted form (TLS) to our mailbox via a server of our hosting provider ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We have concluded a data processing agreement with ALL-INKL. The provider stores technical logs for 7 days.

4. Hosting and server logs

This website is provided via GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When the pages are accessed, server logs are created automatically. They may contain IP address, date and time, the address accessed, browser type and version, and operating system.

This processing serves the secure and stable provision of the website. The legal basis is our legitimate interest in this (Art. 6(1)(f) GDPR). The data is not combined with other data sources.

GitHub is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by the European Commission's adequacy decision (Art. 45 GDPR). Further information: GitHub Pages data collection.

5. Contact by email and phone

If you contact us by email or phone, we process your details to handle your request. The legal bases are as in section 3.

Our emails are processed via Microsoft 365. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have concluded a data processing agreement with Microsoft. Data may be transferred to Microsoft Corporation in the USA; Microsoft is certified under the EU-US Data Privacy Framework.

6. WhatsApp

You can also contact us via WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp processes your phone number, profile name, message content and metadata such as time and device.

Message content is end-to-end encrypted. Metadata may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework. We use your details only to handle your request (legal bases as in section 3).

Using WhatsApp is voluntary. You can always reach us by phone, email or the contact form instead. Further information: whatsapp.com/legal/privacy-policy-eea.

7. Video calls

If you choose a video call for the initial conversation, we use Microsoft Teams (Microsoft Ireland Operations Limited, Dublin, Ireland), Google Meet (Google Ireland Limited, Dublin, Ireland) or Zoom (Zoom Communications, Inc., San José, USA), as you prefer.

The respective provider processes your name, email address, video and audio, and technical connection data such as IP address and device information. Calls are not recorded. Legal bases as in section 3.

Data may be transferred to the USA; the providers rely on the EU-US Data Privacy Framework and EU standard contractual clauses for this. If you prefer not to use video, we are happy to talk by phone.

8. Fonts and images

The fonts Archivo, IBM Plex Sans and IBM Plex Mono and all images are loaded from our own web space. There is no connection to Google servers. We do not use external script libraries or content delivery networks.

9. LinkedIn Insight Tag (only with your consent)

We use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland). It is only loaded after you have given your explicit consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). If you decline, the tag is not loaded and no marketing cookies are set.

We use the Insight Tag for two purposes:

  • Conversion tracking: we can see whether visitors send an enquiry after clicking one of our LinkedIn ads.
  • Retargeting: we can show our ads on LinkedIn to people who have visited our website.

For this, LinkedIn sets cookies and processes your IP address, device and browser information, referrer URL, time of access and, if you are logged in to LinkedIn, your LinkedIn member ID. We only receive aggregated reports and audiences above a minimum size, which do not allow us to identify individuals.

We and LinkedIn are joint controllers for the collection and transmission of this data to LinkedIn (Art. 26 GDPR). Any further processing is the sole responsibility of LinkedIn.

Data may be transferred to LinkedIn Corporation in the USA. The transfer is based on the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR) and, in addition, EU Standard Contractual Clauses.

Retention: depending on the cookie, cookies remain on your device for up to 1 year. According to LinkedIn, information that directly identifies a member is removed within 7 days, and the remaining pseudonymised data is deleted within 180 days.

We store your consent decision in your browser’s local storage (entry “fp_cookie_consent”) so that the notice does not reappear on every visit. This entry contains no personal data and is not transmitted (Section 25(2) no. 2 TDDDG).

You can withdraw your consent at any time via “Cookie settings” at the bottom of every page. Withdrawal applies to the future and does not affect the lawfulness of processing carried out before it. More information: linkedin.com/legal/privacy-policy.

10. Retention

We delete your data as soon as it is no longer needed for its purpose. As a rule, we delete enquiries no later than 12 months after the last contact unless a contract results from them. Statutory retention obligations, for example under commercial and tax law, remain unaffected.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, contact info@forbachandpartners.com.

12. Right to object (Art. 21 GDPR)

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then stop processing your data unless we demonstrate compelling legitimate grounds, or the processing serves the establishment, exercise or defence of legal claims.

13. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Commissioner for Personal Data Protection of the Republic of Cyprus, Iasonos 1, 1082 Nicosia (dataprotection.gov.cy). You can also contact the authority where you live or work, for example in North Rhine-Westphalia the State Commissioner for Data Protection and Freedom of Information NRW.

14. Last updated

October 2026