As at 24 October 2026

Privacy notice

This website gets by on very little data. There are no cookies, no analytics tools, no advertising networks and no content loaded from other people's servers. What does occur is set out below.

01 Controller

02 Visiting the site and server log files

When you visit this website your browser transmits technically necessary data, which our server records in log files:

• the address requested, and the date and time of access
• the volume of data transferred and confirmation of successful retrieval
• browser type and version, operating system used
• IP address

This data is required to deliver the website, to ensure its stability and security and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in secure and uninterrupted operation. This data is not combined with other data sources. Log files are deleted after seven days at the latest.

Hosting

The website runs on a server operated by us at IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The server is located in Germany. A data processing agreement under Art. 28 GDPR is in place with IONOS.

Encryption

All traffic is encrypted end to end via HTTPS. The certificate is obtained and renewed automatically through Let's Encrypt.

03 Enquiry form

If you use the form on this site, we process the details you enter: name, organisation and email address, plus optionally phone number, event, date, location, audience size, preferred format and your message.

The purpose is solely to handle your enquiry and any communication arising from it. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(a) GDPR on the basis of the consent you give in the form. You may withdraw that consent at any time with effect for the future — an informal message to office@koerting-institute.com is sufficient.

We retain your enquiry until it has been dealt with and no statutory retention obligations apply. Enquiries that result in an engagement are subject to commercial and tax retention periods of six and ten years respectively.

To guard against automated submissions we check three things, all on our own server and without involving any third party. The form contains a field invisible to you that only programs fill in. Your browser fetches a signed token when the page loads and returns it on submission — it holds nothing but a timestamp and a checksum, no details about you and no cookie. And the number of submissions is limited, for which your IP address is held briefly in memory and not stored permanently. The server additionally scores the content for typical spam markers. This involves no automated decision about you within the meaning of Art. 22 GDPR — rejected submissions are simply not delivered, and you can always reach us directly by email or phone.

Delivery via SMTP2GO

We use the delivery provider SMTP2GO Ltd to send the form message and your confirmation. The details you enter, along with your email address, are transmitted to that provider, which acts as a processor for us under Art. 28 GDPR. Processing outside the European Union cannot be ruled out; it is safeguarded by the European Commission's standard contractual clauses under Art. 46(2)(c) GDPR.

04 Contact by email and telephone

If you write or call us directly, we process your details in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding to enquiries.

05 What we deliberately do not use

06 Links to other websites and the listening sample

This site links to LinkedIn, Apple Podcasts, Spotify, Libsyn and koerting-institute.com among others. These are plain links: only when you click one does your browser connect to the provider concerned, and that provider's privacy terms then apply. Nothing is transmitted there beforehand.

The listening sample in the podcast section

The podcast section contains a player for one episode. It is played by your browser's own built-in player — no third-party script and no third-party player is embedded. The audio file itself is held by the podcast host Liberated Syndication Inc. (“Libsyn”, 101 Larry Holmes Drive, Easton, PA 18042, USA).

The player is embedded with the no preload setting. As long as you do not press play, your browser requests nothing from there and transmits nothing there — the page loads in full without contacting Libsyn. Only when you press play does your browser connect to Libsyn. Your IP address and technical details about your browser and device are then transmitted to that provider, whose privacy terms apply. This involves processing in the USA.

The legal basis is Art. 6(1)(a) GDPR: pressing play is your consent to that single transmission. If you do not press play, nothing happens. You can instead listen to the episode at any time directly on Apple Podcasts, Spotify or Libsyn, where only that provider's terms apply.

07 Your rights

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

An informal message to office@koerting-institute.com is enough.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

08 Changes to this notice

We update this notice whenever changes to the website or to the law require it. The version available here is the one that applies.