Last updated: 10 August 2026
Privacy policy
This policy explains how personal data is processed when you visit this website or contact GBM Consulting.
1. Controller
GBM Consulting
Represented by Dr. med. Mustafa Gerçek
Jägerstraße 101A, 47228 Duisburg, Germany
2. Website delivery and server logs
When you access this website, technical connection data may be processed automatically. This can include your IP address, date and time of access, requested resource, referrer, browser, operating system and response status.
The processing is necessary to deliver the website securely, maintain its technical stability and investigate misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure and reliable operation of this website.
3. Hosting and recipients
The website is hosted using OpenAI Sites and associated technical infrastructure. Service providers involved in website delivery may process technical connection data on our behalf. Infrastructure may include services provided by OpenAI and Cloudflare. Data can be processed outside the European Economic Area where permitted safeguards apply.
Technical log data is retained only for as long as necessary for delivery, security and error analysis, subject to the operational retention periods of the hosting providers.
4. Cookies, analytics and tracking
This website does not use analytics, advertising tracking, profiling or non-essential cookies. We do not use Google Analytics or comparable marketing services. A consent banner is therefore not displayed.
5. External links
The website links to the Apple App Store, Microsoft Store, PubMed, DOI services and social-media platforms. Data is transmitted to those providers only when you follow a link. Their own privacy policies apply after you leave this website.
6. Contact by email
If you contact us by email, we process the information you provide to answer your request. Depending on the request, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. Correspondence is deleted when it is no longer required, unless statutory retention obligations apply.
7. Your rights
Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction, objection and data portability. You may also lodge a complaint with a data-protection supervisory authority.
The competent supervisory authority is generally the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. Website: www.ldi.nrw.de.
8. Changes to this policy
We may update this privacy policy when the website, hosting arrangement or legal requirements change. The current version is always available on this page.