Privacy Policy

The controller within the meaning of the GDPR is:

SaJo Consulting GmbH
Provinzialstraße 103
66806 Ensdorf
Germany

Phone: +49 6831 501 599 0
Email: info@sajoconsulting.de

Represented by Sascha Jostock, Managing Director.

We have appointed an external data protection officer:

heyData GmbH
Schützenstraße 5
10117 Berlin

Email: datenschutz@heydata.eu

You have the following rights against us with regard to the personal data concerning you: the right of access (Article 15 GDPR), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20) and a right to object to the processing (Article 21).

If you have given us consent, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority is the Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany.

Each time our website is accessed, your browser automatically sends information to the server, where it is stored in so-called log files. The following is recorded: the page accessed, the date and time, the volume of data transferred, notification of successful retrieval, browser type and version, operating system, referrer URL and the IP address.

This data is not combined with other data sources. It is not evaluated for advertising purposes or to create usage profiles.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the technical provision, stability and security of the website and in defending against attacks.

Retention period: the log files are deleted automatically after seven days. They are retained longer only where this is necessary to investigate a specific security incident; the data concerned is deleted as soon as the incident has been conclusively resolved.

Our website is hosted by:

Alfahosting GmbH
Edmund-von-Lippmann-Straße 13–15
06112 Halle (Saale)
Germany

The servers are located exclusively in Germany. A data processing agreement pursuant to Article 28 GDPR is in place with the provider.

The legal basis is Article 6(1)(f) GDPR — our legitimate interest in providing this website securely and reliably.

This website contains no contact form. You can contact us by email or by phone. If you contact us, we process the information you provide in order to deal with your enquiry and in case of follow-up questions.

What is processed is the data you tell us yourself — usually your name, your email address or phone number, your company where applicable, and the content of your message. You decide which information to provide.

Recipients: your message arrives in our email mailbox. We use Microsoft 365 (Microsoft Ireland Operations Limited) for email operations. No storage takes place in the database of this website.

The legal basis is Article 6(1)(b) GDPR where the enquiry is aimed at entering into a contract, and otherwise our legitimate interest in answering your enquiry pursuant to Article 6(1)(f) GDPR.

Retention period: 365 days, unless statutory retention periods apply or the data is still required for the performance of a contract.

You can send us your application by email. We process the data submitted — in particular contact details, CV, references and other information — exclusively in order to carry out the application procedure.

The legal basis is section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Article 88 GDPR and Article 6(1)(b) GDPR.

Retention period: if no employment relationship comes about, we delete the documents no later than six months after the procedure has been concluded. This period takes into account possible claims under the German General Act on Equal Treatment. For longer retention we obtain your express consent.

This website operates without any cookies requiring consent. For this reason no consent banner appears either. Technically necessary cookies may be set in individual cases; the legal basis is section 25(2) no. 2 TDDDG in conjunction with Article 6(1)(f) GDPR. Details can be found in our cookie policy.

In order to understand which content on this website is in demand, we use Burst Statistics. The software runs entirely on our own server. No data is transmitted to third parties, in particular not to the maker of the software.

What is collected: the page accessed, the time and duration of the visit, the page visited previously, device type, browser and operating system, and the country of origin.

No cookies, no fingerprinting. We operate the software in cookieless mode. No cookies are set and no information is read from your device. In order to distinguish two page views within the same visit, the software generates an irreversible check value from your IP address and your browser details, which changes every day. It allows no conclusions to be drawn about you as a person and expires after one day at the latest. Your IP address itself is not stored in the statistics; it serves solely to determine the country of origin. No recognition across several days and no profiling take place.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in a data-minimising statistical evaluation that allows us to improve this website. Consent pursuant to section 25(1) TDDDG is not required, because no information is stored on your device or read from it.

Retention period: the data collected is deleted after 24 months at the latest.

Objection: you may object to the processing at any time pursuant to Article 21 GDPR. A message to the address given above is sufficient. Independently of this, the software respects your browser’s “Do Not Track” setting.

Beyond this we use no further analytics or tracking services. In particular we use neither Google Analytics nor Google Tag Manager, neither Google Ads nor remarketing, neither Meta Pixel nor LinkedIn Insight Tag, Microsoft Clarity or comparable services. Nor do we embed map services, videos, social media plugins, a content delivery network or a captcha service.

The fonts used on this website are stored locally on our server and delivered from there. No connection to servers operated by Google or other providers is established in the process; no personal data is transferred to third parties.

We pass on your data only to the extent necessary for the purposes stated. The following are used:

Alfahosting GmbH, Halle (Saale) — web hosting and server operations, servers in Germany.

Microsoft Ireland Operations Limited, Dublin — email operations via Microsoft 365.

Data processing agreements pursuant to Article 28 GDPR are in place with both. No disclosure to third parties beyond this takes place unless we are legally obliged to do so.

Where processing takes place outside the European Union in the course of email operations via Microsoft 365, this is based on the EU-US Data Privacy Framework and, in addition, on the European Commission’s standard contractual clauses.

Beyond this, no personal data is transferred to third countries.

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that your browser’s address bar begins with “https://”.

This privacy policy is currently valid. As our website develops further, or as a result of changed statutory requirements, it may become necessary to amend it.

Version: September 2026