Privacy Policy and Cookies Policy

[1] Controller

Krusche & Company GmbH

St.-Pauls-Platz 9, 80336 Munich, Germany

E-Mail: [email protected]

Phone: +49 89 41617569 01

This privacy notice explains how we process personal data when you visit our website, contact us, or interact with K&C in a professional or business context.

[2] Purpose and Legal Basis

We process personal data only as needed to provide and improve our website, respond to inquiries, manage business relationships, and ensure technical security.

Processing is based on the EU General Data Protection Regulation (GDPR):

• Art. 6(1)(f) GDPR – our legitimate interest in operating a secure, user-friendly website and in managing and developing professional business relationships,
• Art. 6(1)(b) GDPR – when you use forms to request information, apply for a job, or where processing is necessary for contractual steps, and
• Art. 6(1)(a) GDPR – when you give consent for cookies or analytics tools.

[3] What Data We Process

Depending on how you use our site or interact with us, we may process:

• Technical data: IP address, browser type, device information, date and time of access (for server logs and security)
• Contact form data: name, email address, message text
• Job-application data (if you apply via the career page): see our Candidate Privacy Notice
• Business contact and communication data (see section 4 below)
• Cookie and analytics data (see section 7 below)

We do not combine these data sets to create user profiles.

[4] Business Contacts and Professional Communication

We process professional contact information and business communications relating to customers, prospective customers, suppliers, partners, and their representatives.

This may include name, company, professional role, business email address, business phone number, professional profiles, and relevant communication and relationship history.

We use this information to communicate with business contacts, manage and develop business relationships, administer contracts and projects, respond to inquiries, identify relevant potential business contacts, and conduct business development activities where legally permitted.

Processing is generally based on our legitimate interests under Art. 6(1)(f) GDPR in managing and developing professional business relationships and preserving relevant business relationship history. Where applicable, processing may also be necessary for contractual steps or legal obligations.

We may obtain professional contact information directly from you, from your organization, from professional or publicly available sources, business events, referrals, or B2B information services.

Business contact and relationship data is retained for as long as reasonably relevant to an existing or potential business relationship. Where processing relates to contractual or accounting records, retention follows the applicable statutory retention obligations under German commercial and tax law (e.g. §257 HGB, §147 AO), which may require retention of up to 10 years.

[5] Data Recipients and Hosting

Our website is hosted by GDPR-compliant service providers within the European Union.

Service providers may access data only as needed to maintain or secure the system and act under a data-processing agreement in accordance with Art. 28 GDPR.

External analytics and marketing providers (LinkedIn Insight Tag and Google Analytics) may process personal data as processors or controllers depending on the respective service. Details are provided in the applicable cookie settings.

[6] Retention

Server logs are stored for security reasons for up to 90 days and then deleted automatically. Contact-form messages are kept only as long as needed to handle your request. Business contact and relationship data is retained as described in section 4. Cookies and analytics data follow the retention period listed in the cookie settings on our website.

[7] Cookies and Analytics

We use essential cookies that are necessary for technical operation and security.

We may also use analytics or marketing cookies to measure site usage or improve performance. In accordance with Art. 6(1)(a) GDPR and Section 25 TDDDG (Telecommunications-Digital-Services-Data-Protection Act), these are set only with your consent via the cookie banner.

You can change or withdraw your cookie consent at any time by using the “Cookie Settings” link at the bottom of our website.

If we use analytics tools, they are listed in the cookie settings with details about provider, purpose, and storage duration.

[8] Data Transfers Outside the EU

If we transfer personal data to a country outside the EU or EEA (for example, when using cloud-based services), we use EU Standard Contractual Clauses (SCCs) or rely on an adequacy decision by the European Commission to ensure an adequate level of protection.

[9] Your Rights

You have the following rights under the EU General Data Protection Regulation:

• Access to your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (“right to be forgotten”) (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interest (Art. 21 GDPR)

Direct Marketing Objection You may object to the processing of your personal data for direct marketing purposes at any time by contacting [email protected]. Following an objection, we will no longer use your personal data for direct marketing purposes.

To exercise your rights, contact us at [email protected]. You may also lodge a complaint with your local data-protection authority.

[10] Security

We use SSL/TLS encryption and appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

[11] Updates

We may update this privacy notice from time to time to reflect changes in our website or legal requirements. The latest version is always available here. Last updated: September 2026

[12] Privacy Notice for Candidates

All information about Candidate data can be found in Privacy Notice for Candidates – K&C