Fidelio Tata, PhD⎢Data Protection Declaration

This Data Protection Declaration explains how personal data are processed when you visit www.fideliotata.com.

The processing of personal data in connection with my email correspondence and other business contacts is additionally governed by the Datenschutzhinweise für E-Mail- und Geschäftskontakte nach Art. 13 und DSGVO(currently available in German).

1. Controller

Prof. Dr. Fidelio Tata
fidelio tata consulting
Elisabethkirchstr. 2
10115 Berlin
Germany
Telephone: +49 151 64419612
Email: fidelio@fideliotata.com

2. Hosting and technical provision

This website is operated under a contractual arrangement with the following provider:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

IONOS MyWebsite Creator is used to create and technically provide the website. The underlying website platform is provided by Duda, Inc., affiliated companies and their subprocessors.

The processing is necessary to provide this website securely, reliably and efficiently. The legal basis is Article 6(1)(f) GDPR. My legitimate interests consist of providing a functional website, maintaining information security, and identifying and resolving technical faults. Where service providers process personal data on my behalf, this is done on the basis of appropriate data processing agreements.

3. Server log files

Whenever this website is accessed, the hosting and platform providers may automatically process technical access data and store them in server log files. Such data may include in particular:

• the IP address of the accessing device;
• the date and time of access;
• the page or file accessed;
• the volume of data transferred;
• the HTTP status code;
• the previously visited page or referrer URL;
• the browser type and browser version;
• the operating system and device type;
• the requesting internet service provider.

These data are processed to deliver the website, maintain the operation and security of the technical systems, analyse faults and prevent abusive access. The legal basis is Article 6(1)(f) GDPR. I do not combine these data with other data sources.

4. Cookies and similar technologies

Cookies or similar technologies may be used when you visit this website. Cookies are small text files stored in the browser or on the device.

Strictly necessary cookies and comparable storage or access operations are used where required to provide the website and the functions you request, maintain security or save your data protection settings. The storage or access is based on section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act ( Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz , TDDDG). Where personal data are processed in this context, the legal basis is Article 6(1)(f) GDPR.

Where cookies or comparable technologies that are not strictly necessary are used, this will take place only after your prior consent pursuant to section 25(1) TDDDG. Any subsequent processing of personal data is then based on Article 6(1)(a) GDPR.

You may withdraw or change consent at any time with effect for the future through the cookie settings provided on the website. The lawfulness of processing carried out before the withdrawal remains unaffected.

5. Analytics, marketing and social media services

I currently do not use my own cross-site analytics or marketing services or embedded social media plug-ins on this website. The hosting and platform providers may nevertheless compile technical operating and access statistics in order to provide, secure and optimise their services. Where such statistics contain personal data, the processing is based on Article 6(1)(f) GDPR.

6. Contact

This website contains email and telephone links through which you may contact me. No separate contact form is currently provided.

Merely selecting an email link will normally only open the email program configured on your device. Personal data are transmitted to me only when you send a message. The subsequent processing is governed by the Datenschutzhinweise für E-Mail- und Geschäftskontakte(currently available in German).

7. Downloadable files and external links

Documents and other files are made available for download on this website. They may be delivered through the technical infrastructure or content delivery networks of the hosting and platform providers. When a file is accessed, the technical access data described in section 3 are processed.

The website also contains links to external websites and services. Merely displaying this website does not generally transmit data to the provider of a simple external link. Only after you select such a link will your browser establish a connection to the external provider. The respective provider is responsible for the processing of data on its website.

8. Recipients and categories of recipients

In connection with the operation of this website, personal data may be disclosed in particular to the following recipients or categories of recipients:

• IONOS SE as hosting and website service provider;
• Duda, Inc., affiliated companies and technical subprocessors of the website platform;
• providers of data centre, cloud, content delivery, security, monitoring, storage and support services;
• public authorities, courts or other bodies where disclosure is required by law or is necessary for the establishment, exercise or defence of legal claims.

Personal data are not sold or disclosed to third parties for their own advertising purposes.

9. Transfers to third countries

In connection with the technical provision of the website, it cannot be excluded that personal data are also processed by Duda, affiliated companies or subprocessors in countries outside the European Union or the European Economic Area.

Any such transfer takes place only in accordance with Articles 44 et seq. GDPR. It may be based in particular on an adequacy decision of the European Commission or appropriate safeguards such as the European Commission's standard contractual clauses. Supplementary technical and organisational safeguards may also be used. Further information about the safeguards used in a particular case may be requested through the contact details provided in section 1.

10. Storage period

Personal data are stored only for as long as necessary for the relevant processing purpose or for as long as statutory retention obligations apply. In particular, the following criteria apply:

• Technical server and security logs are retained by the hosting and platform providers only for as long as necessary for operation, fault analysis, system security and the prevention of misuse. They are then deleted or anonymised unless further retention is required because of a specific security incident or a legal obligation.
• Session cookies are generally deleted at the end of the browser session. Persistent strictly necessary cookies are deleted after the validity period specified for the relevant purpose has expired.
• Records of consent or withdrawal may be stored for as long as necessary to demonstrate compliance with data protection law.
• The storage periods stated in the separate data protection information apply to data arising from email correspondence and business contacts.

11. Provision of data and automated decision-making

The provision of technical access data is necessary to retrieve and securely provide the website. Without processing these data, the website cannot be provided technically or cannot be provided in full.

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place in connection with this website.

12. Your rights

Subject to the applicable statutory requirements, you have in particular the following rights:

• the right of access under Article 15 GDPR;
• the right to rectification under Article 16 GDPR;
• the right to erasure under Article 17 GDPR;
• the right to restriction of processing under Article 18 GDPR;
• the right to data portability under Article 20 GDPR;
• the right to object under Article 21 GDPR;
• the right to withdraw consent with effect for the future.

You may exercise your rights by contacting me using the contact details provided in section 1.

13. Withdrawal of consent and right to object

14. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. In particular, you may contact the supervisory authority responsible for my place of establishment:

Berlin Commissioner for Data Protection and Freedom of Information
(Berliner Beauftragte für Datenschutz und Informationsfreiheit)
Alt-Moabit 59–61
10555 Berlin
Germany
Telephone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: www.datenschutz-berlin.de

15. Encrypted transmission

This website uses an encrypted connection through HTTPS or TLS. This is intended to protect data transmitted between your browser and the server against unauthorised access by third parties.

16. Updates to this Data Protection Declaration

This Data Protection Declaration will be amended where the data processing carried out through this website, the technical services used or the applicable legal requirements change. The version published on this website at the relevant time applies.

Last updated: 29 June 2026