Peter Oliver GrezaTua Res Consulting

Privacy policy

This English version is provided for convenience. The German version is legally binding. Last updated: 2 November 2026

Controller

The controller responsible for data processing on this website is:

Tua Res Consulting
Peter Oliver Greza
Pfleghofstr. 6
72070 Tübingen, Germany
Email: info@tra-consulting.org

Overview and legal bases

I process personal data only to the extent necessary to operate this website, answer your enquiries and prepare or carry out assignments. Legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract or pre-contractual measures), (c) (legal obligations) and (f) (legitimate interests, e.g. secure and stable operation of the website). Transfers to countries outside the EU/EEA (in particular the USA) are based on the EU-US Data Privacy Framework where the recipient is certified, or on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Hosting and server log files (Netlify)

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA, which also runs the website’s server-side functions (Netlify Functions), data storage (Netlify Blobs) and form handling (Netlify Forms). When you visit the website, Netlify automatically processes technical data sent by your browser (IP address, date and time, page requested, referrer, browser and operating system). This is technically necessary to deliver the website and keep it secure (Art. 6(1)(f) GDPR). I do not analyse these log files myself. More: netlify.com/privacy.

Fonts

The fonts used on this website are hosted locally. No connection is made to Google or other font providers.

Browser storage, no cookies

This website does not set cookies and uses no tracking technologies. Session storage keeps your conversation with the AI assistant while the browser tab is open; local storage remembers whether you paused the animation on the homepage. This is strictly necessary for functions you explicitly request (§ 25(2) no. 2 TDDDG).

Contact form, email and phone

If you use the contact form, I process your name, email address, optionally your organisation and your message to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Submissions are received and stored by Netlify Forms and forwarded to me by email. A hidden honeypot field and Netlify’s automatic spam filter protect against spam. I delete enquiries once they have been dealt with, unless statutory retention obligations apply.

Appointment booking via Google

To book an initial call, I link to the Google Calendar booking page (Google Ireland Limited, Dublin, Ireland). The page is not embedded: data is only transferred to Google when you click “Book an intro call”. Google processes your name, email address, the selected slot and any other details you enter under its own terms; data may also be transferred to the USA. I have not concluded a data processing agreement with Google for this. I use the booking data solely to hold the call (Art. 6(1)(b) GDPR). Google’s privacy policy: policies.google.com/privacy. Without Google: you can also arrange a call via the contact form, by email or by phone.

AI assistant (Claude by Anthropic)

You can ask an AI assistant about my services. Its use is voluntary; its answers are generated automatically, may contain errors and are not binding offers.

  • Data processed: your questions and the answers in the current conversation, the language and the page where the conversation started.
  • Masking: email addresses, phone numbers and IBANs in your messages are replaced with placeholders before the message is processed, sent to Anthropic or stored. Please still do not enter sensitive personal data.
  • Abuse protection: to limit the number of requests, a hash of your IP address is computed with a secret key that changes daily. Only this hash and a counter are stored, and deleted after two days at the latest. Your IP address itself is not stored and not sent to Anthropic.
  • Transfer to Anthropic (USA): your (masked) question and the conversation so far are sent from my server via an API to Anthropic, PBC, San Francisco, USA, acting as my processor, and processed by the “Claude” language model. Under Anthropic’s commercial API terms, the data is not used to train AI models and is deleted within 30 days by default. The transfer is based on the EU Standard Contractual Clauses in Anthropic’s Data Processing Addendum. More: anthropic.com/legal/privacy.
  • Conversation logs: conversations are stored in Netlify Blobs without IP address or device identifier and with contact details masked, to improve the assistant. As free text may contain other personal details, I treat them as personal data. Only I can access them with a password; they are deleted automatically after 180 days.
  • AI notice: the assistant is an AI system; this is disclosed directly at the chat window (Art. 50(1) Regulation (EU) 2024/1689).
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing quick information, protecting the assistant against abuse and improving it), and Art. 6(1)(b) GDPR where your question relates to an assignment.

Links to other websites

This website contains links to other websites (e.g. LinkedIn, Xing, partners). Data is only transferred when you click a link; the respective provider’s privacy policy then applies.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to withdraw consent at any time (Art. 7(3)), and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Chat logs contain no identifier linking them to you; to request access or erasure, please tell me the date, approximate time and content of your question (Art. 11 GDPR). You may also lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. Simply email info@tra-consulting.org.