Privacy notice

Data controller

Module Workbase, Level 9, 37 Gallusanlage, Frankfurt am Main 60329, is the controller for personal data described here. Contact info@module-workbase.digital for privacy questions.

Data we process and why

When you enquire, we may receive your name, email, chosen service, preferred date and the relocation details you type. We use this information to respond, recommend a scope and take steps toward a contract under Article 6(1)(b) GDPR. Contract, invoice and service correspondence is processed to perform the engagement and meet German legal obligations under Articles 6(1)(b) and 6(1)(c).

Please do not submit passport scans, permit numbers, health records, bank details or other sensitive information through the website form.

Basic server logs may include IP address, browser details, requested page and timestamp for security and reliable delivery, based on our legitimate interests under Article 6(1)(f). Optional analytics will only be used with consent if introduced.

Recipients and international transfers

Data may be processed by hosting, email, accounting and secure communications providers acting under appropriate agreements. We disclose data to authorities only where legally required. If a provider processes data outside the European Economic Area, we use an adequacy decision or safeguards such as the European Commission’s standard contractual clauses and assess supplementary protections where required.

Retention

Unconverted enquiries are normally deleted after six months. Consultation working notes are normally retained for two years after completion to answer follow-up and establish what was advised. Invoices and records required under German tax or commercial law are retained for the statutory period, commonly up to ten years. Security logs are kept only as long as operationally necessary, normally no more than 30 days.

Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction, portability or objection. Where processing relies on consent, you may withdraw it for the future. You may complain to a competent data protection authority; in Hesse this is the Hessian Commissioner for Data Protection and Freedom of Information.

Automated decisions and updates

We do not make decisions with legal or similarly significant effects solely by automated means. We may update this notice when our services or legal obligations change; the effective wording will appear on this page.