Privacy Policy

Controller

The controller responsible for the processing of personal data on this website is:

TM Risk Advisory & Services
Thomas Müller
Flerzheimer Allee 7
53125 Bonn
Germany

Phone: +49 160 3631744
E-mail: mueller@tm-ras.de

General Information on Data Processing

I take the protection of personal data seriously. Personal data is processed on this website only to the extent necessary to provide a functional website, to communicate with visitors or to comply with legal requirements.

Processing is carried out on the basis of the General Data Protection Regulation (GDPR), in particular Art. 6(1)(f) GDPR, where there is a legitimate interest in the secure and functional provision of this website.

If you contact me, your data will be processed for the purpose of handling your inquiry on the basis of Art. 6(1)(b) GDPR, insofar as your inquiry relates to contractual or pre-contractual communication, and additionally on the basis of Art. 6(1)(f) GDPR.

Provision of the Website and Server Log Files

When this website is accessed, technically necessary data is processed by the hosting provider. This may include in particular:

IP address

Date and time of access

Page or file accessed

Amount of data transferred

Browser type and browser version

Operating system used

Referrer URL

Hostname of the accessing computer

The processing of this data is technically necessary in order to deliver the website, ensure the stability and security of the offering and enable the investigation of misuse or technical disruptions.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and error-free provision of this website.

The data will be deleted as soon as it is no longer required for the purposes stated, unless statutory retention obligations or security interests require longer storage.

Contact by E-mail or Telephone

If you contact me by e-mail or telephone, the personal data you provide will be processed. This may include in particular your name, contact details, the content of your inquiry and any further information provided by you.

The processing is carried out for the purpose of handling your inquiry and communicating with you.

The legal basis is Art. 6(1)(b) GDPR, provided that the contact relates to pre-contractual or contractual measures. In other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. The legitimate interest lies in the appropriate handling of incoming inquiries.

The data will be deleted as soon as it is no longer required for handling the inquiry, unless statutory retention obligations apply.

LinkedIn Link

This website contains a link to my LinkedIn profile. This is a simple external link. Merely visiting this website does not result in any data being transmitted to LinkedIn.

If you click on the LinkedIn link, you will leave this website. LinkedIn is responsible for the subsequent processing of personal data. Further information can be found in LinkedIn’s privacy policy.

Cookies and External Services

According to the current status, this website does not use analytics or marketing cookies and does not use tracking services such as Google Analytics.

If technically necessary cookies are used by WordPress, the theme or the hosting provider, they serve exclusively to provide and secure the website. The legal basis is Art. 6(1)(f) GDPR.

External services such as Google Maps, YouTube, Calendly or embedded social media plugins are currently not used.

Rights of Data Subjects

Under the GDPR, you have in particular the following rights:

Right of access to the personal data processed

Right to rectification of inaccurate data

Right to erasure of personal data

Right to restriction of processing

Right to data portability

Right to object to processing

Right to withdraw consent given with effect for the future

To exercise your rights, you may contact me at any time using the contact details provided above.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

The competent authority is, in particular, the data protection supervisory authority of your place of residence, your workplace or the place of the alleged infringement.

Currency and Amendments to this Privacy Policy

This Privacy Policy may be amended if legal requirements change or if this website is further developed technically or in terms of content.

Last updated: June 2026