Legal

Privacy policy

Last updated: 20 October 2026

This page explains what personal data is processed when you visit roeckconsulting.com or email us, why, and what rights you have. The short version: the only third-party tool is Google Analytics, which in the EU, the UK and similar regions only runs if you agree; the site has no forms and no advertising. Questions? Write to info@roeckconsulting.com.

1. Who is responsible

Roeck Consulting is a brand of the controller:

E.S.M.H Consulting FZE
Al Shmookh Business Center, One UAQ
UAQ Free Trade Zone, Umm Al Quwain, United Arab Emirates
License no. 8630 · represented by Max Roeck
Email: info@roeckconsulting.com

2. Visiting the website

When you open a page, your browser automatically sends technical data to our web server: IP address, date and time, the page requested, the referring page, and browser and operating system. The server records this in log files. We use it only to deliver the site, keep it secure and find errors; we do not combine it with other data or use it to identify you. Legal basis: Article 6(1)(f) GDPR (legitimate interest in a secure, working website). Log files are deleted by our host on a short rolling schedule (typically within 14–30 days).

3. Cookies and analytics

We use Google Analytics to understand which pages are useful. How it is switched on depends on where you are, because the law differs:

• In the EU/EEA, the UK and other places that require prior consent (or if we can’t tell where you are): a banner asks first. Google Analytics is not loaded until you click Accept. If you click Decline, or simply ignore the banner, it is not loaded and no analytics cookies are set.
• Everywhere else (for example the UAE or the US): Google Analytics runs by default, and you can switch it off at any time with Turn off in the banner or Cookie settings in the footer.

We work out the region from your device’s time-zone setting. This happens entirely in your browser: no location lookup, and nothing is sent to us. It is only a rough guide, so if your device is set to a different time zone from where you are, the banner may not match your region. Either way, you can switch analytics off at any time. Your choice is remembered in your browser’s local storage (entry roeck_consent) so we don’t ask on every visit; in consent regions we ask again after 12 months. That entry stays on your device and is never sent to us.

When analytics is off, this website sets no cookies, stores nothing in your browser except that choice and the logo note below, and contacts no third party. The typefaces (Archivo and JetBrains Mono) are hosted on our own server, so no font service is contacted either.

Animated logo. The logo at the top of each page draws itself once per browser tab. To remember that it has already played, the site keeps a short note in your browser’s session storage (entry roeck_film_seen, value 1). It is not a cookie, is never sent to us or anyone else, contains nothing about you and is kept only for that tab: your browser removes it when you close the tab (or when the browser session ends). If your device is set to reduce motion, the logo stays still and nothing is stored. Legal basis: § 25(2) no. 2 TDDDG (strictly necessary for the function you asked for) and Article 6(1)(f) GDPR.

When analytics is on, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and its parent company Google LLC, USA. It tells us which pages are visited, how visitors found the site (for example via search or a LinkedIn link), what kind of device they use, and their approximate location (country or city). We only look at aggregated reports to improve the site. Specifically:

• Cookies set: _ga and _ga_2T5VYS25EG, which distinguish visitors and sessions. They expire after 2 years at most, or as soon as you switch analytics off.
• IP addresses: Google Analytics 4 does not log or store IP addresses.
• No advertising: Google signals and ad personalization are switched off, and the advertising consent signals sent to Google stay denied.
• Retention: event-level data is automatically deleted after 2 months.
• Legal basis: in consent regions, your consent (Article 6(1)(a) GDPR and, for storing or reading information on your device, the applicable ePrivacy rules, for example § 25(1) TDDDG in Germany). Elsewhere, our legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR), with the right to switch it off at any time.

You can withdraw your consent or switch analytics off at any time, with effect for the future, via Cookie settings in the footer or right here:

4. Contacting us by email

If you email us, we process your email address, your name and whatever you include in your message (for example details about your SAP system or project) to answer you and, if it comes to that, to prepare and carry out an engagement. Please don’t send passwords, access data or personal data from your SAP system by email; we’ll agree a secure way if that is ever needed.

Legal basis: Article 6(1)(b) GDPR (steps before a contract, or the contract itself) and Article 6(1)(f) GDPR (our legitimate interest in answering business enquiries).

5. Service providers and international transfers

• RoeckNet Webhosting hosts this website on a server in a data centre in Germany and processes the data described in section 2 on our behalf.
• Microsoft Ireland Operations Limited (Microsoft 365 / Exchange Online) provides our mailbox and processes the emails you send us (section 4). Microsoft may process data outside the EU/EEA, including in the US; Microsoft Corporation is certified under the EU–U.S. Data Privacy Framework, and Standard Contractual Clauses apply in addition.
• Google Ireland Limited / Google LLC provides Google Analytics as described in section 3. Google may process this data in the US; Google LLC is certified under the EU–U.S. Data Privacy Framework, and the European Commission’s Standard Contractual Clauses apply in addition.

They process data only on our instructions. We do not sell, rent or share your data with anyone for marketing.

6. How long we keep data

• Server log files: deleted by our host on a short rolling schedule (typically 14–30 days).
• Analytics data: event-level data is deleted by Google after 2 months; the _ga cookies expire after 2 years at most, or immediately when you switch analytics off.
• Your cookie choice: stored in your own browser; in consent regions we ask again after 12 months.
• The logo-animation note (roeck_film_seen): in your browser’s session storage for that tab only, removed when you close the tab.
• Enquiries: up to 24 months after our last correspondence, unless an engagement follows.
• Client correspondence: for the duration of the engagement and up to 7 years afterwards where accounting and tax rules require it.

7. Your rights

Wherever you live, we honour the following rights to the extent your local law grants them (they follow the EU/UK GDPR and are broadly in line with the UAE Personal Data Protection Law):

• Access to the data we hold about you
• Rectification of inaccurate data
• Erasure, subject to legal retention duties
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent at any time, with effect for the future (for analytics: Cookie settings in the footer)
• Complaint to a data protection authority, for example where you live or work

To use any of these rights, email info@roeckconsulting.com. We aim to reply within 30 days.

8. Security

The website is served over HTTPS only. Access to enquiries is limited to Max Roeck. No system is perfectly secure, but we keep the data we hold to the minimum we need.

9. Changes

If we change how the site works (for example by adding a contact form or another tool), we will update this page first. The date at the top shows the latest version.

← Back to home