1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

DEX Training & Consulting GmbH
Siegburger Straße 280
51105 Cologne
Germany

Represented by the Managing Directors Silke Körner and Jörg Janzen

Phone: +49 221 169 18 467
Email: management@dextraining.de

2. General Information on Data Processing

We process personal data only to the extent necessary to provide our website, handle enquiries, provide our services, or on the basis of consent.

The legal bases are, in particular, Art. 6(1)(a) GDPR where consent has been given, Art. 6(1)(b) GDPR for pre-contractual or contractual measures, Art. 6(1)(c) GDPR for compliance with legal obligations, and Art. 6(1)(f) GDPR where processing is based on legitimate interests.

3. Hosting and Server Log Data

This website is technically provided on hosting infrastructure managed by M8 Medien GmbH at:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Germany

When you access this website, technically necessary server data is processed. This may include, in particular, the IP address, date and time of access, page requested, protocol used, HTTP status code, amount of data transferred, referrer, user agent and host name.

The processing is carried out for the secure and reliable provision of the website on the basis of Art. 6(1)(f) GDPR.

IP addresses in the access logs are stored in anonymised form by the hosting provider. Anonymised access-log data is retained for a limited period. Error logs are likewise retained only for a limited period.

4. Encrypted Transmission

This website uses SSL/TLS encryption. This protects data that you transmit to us against access by third parties while it is being transmitted.

5. Cookies and Consent Management with Borlabs Cookie

We use Borlabs Cookie to manage your consent to technically non-essential cookies and external services.

Borlabs Cookie stores the consent choices you have made. Technically necessary storage is carried out on the basis of the statutory provisions applicable to functions that are strictly necessary. Where consent is required, processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time via the cookie settings on our website.

6. Contact

If you contact us by email or telephone, we process the information you provide in order to handle your enquiry.

Depending on the content of your enquiry, processing is carried out on the basis of Art. 6(1)(b) GDPR for pre-contractual measures or on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in handling enquiries.

We delete data processed in connection with an enquiry once it is no longer required for handling the enquiry and provided that no statutory retention obligations apply.

7. Brevo

Where DEX Training & Consulting GmbH uses the Brevo service to send newsletters or comparable information, the personal data required for this purpose is processed by Brevo on our behalf.

Subscription to a newsletter via this website is currently not offered.

Where such communications are sent on the basis of consent, the legal basis is Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future, in particular via an unsubscribe link contained in the respective newsletter.

Further information about data protection at Brevo can be found here:
Brevo Privacy Policy

8. Wordfence

We use Wordfence Security to protect our website against attacks and unauthorised access.

For the detection and prevention of attacks, Wordfence processes technical and security-related information. This may include, in particular, IP addresses, URLs accessed and HTTP headers.

The processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and IT systems against attacks and misuse.

Further information:
Wordfence Privacy Policy

9. Backups

Technical backups are created regularly to ensure that our website can be restored.

As part of the technical maintenance of the website, complete backup copies of the website and its database may be stored in external cloud storage provided by Dropbox. Depending on the content of the website, these backups may also contain personal data.

Further information about data protection at Dropbox:
Dropbox Privacy Policy

10. Recipients and Processors

Where necessary for the operation of the website or the provision of our services, personal data may be processed by technical service providers engaged by us.

These include, in particular, service providers for hosting, technical website maintenance, backups, email and newsletter delivery, and IT security.

Where these service providers process personal data on our behalf, this is carried out on the basis of appropriate data processing agreements pursuant to Art. 28 GDPR.

11. Storage Period

We generally store personal data only for as long as is necessary for the respective purpose of processing.

In addition, statutory retention obligations may require longer storage. Once the purpose of processing no longer applies and statutory retention periods have expired, the relevant data will be deleted.

12. Your Rights

Subject to the statutory requirements, you have in particular the right to:

  • obtain information about the personal data stored about you,
  • have inaccurate data corrected,
  • have your data deleted,
  • restrict processing,
  • data portability, and
  • object to certain processing activities.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority.

13. Objection to Direct Marketing

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. If you object, your personal data will no longer be used for this purpose.

14. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if the technical procedures used, our services or the legal framework change.

Last updated: September 2026