Skip to content
MS-STRATEGY & CONSULTING LTD

Legal

Privacy policy

Draft, as of 12 October 2026, legal review in progress.

This policy explains which personal data is processed when you visit this website, for what purpose and on which legal basis. Personal data is any data that can be used to identify you personally. It is based on the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

This is a translation for convenience. In case of doubt, the German version applies: Datenschutzerklärung (German)

1. Data controller

MS-STRATEGY & CONSULTING LTD Georgiou Karaiskaki 11-13, CARISA SALONICA, Office 102 7560 Pervolia, Larnaca, Cyprus (EU) Registration number: HE 487829

Represented by: Maik Schwede, Director Email: support@ms-strategy-consulting.com Phone: +357 97 478421

2. What this website does and does not do

This website uses Google Analytics via Google Tag Manager, but only if you agree in the cookie banner. Without your consent nothing loads from Google and no analytics cookies are set. It uses no advertising pixels and no fonts from third-party servers. There is no contact form and no newsletter sign-up.

Data is only processed in these places:

  • when pages are loaded (hosting with Cloudflare, section 4)
  • when you send us an email (section 5)
  • when you use the calendar on the booking page (Calendly and Stripe, sections 6 and 7)
  • on the confirmation page after a booking (section 8)
  • for statistics with Google Analytics, only with your consent (section 9)
  • Art. 6(1)(a) GDPR: consent, here for statistics with Google Analytics
  • Art. 6(1)(b) GDPR: performance of a contract and pre-contractual measures, for example booking an appointment and enquiries about our services
  • Art. 6(1)(f) GDPR: legitimate interest, for example the secure and stable operation of this website and answering other enquiries

4. Hosting with Cloudflare

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) and delivered through Cloudflare’s network. Cloudflare is certified under the EU-US Data Privacy Framework.

To deliver the page to you, Cloudflare processes technical access data with every request:

  • IP address
  • browser type and version
  • operating system
  • referrer URL (the page you came from)
  • requested address and the date and time of the request

Cloudflare also sends the ‘Network Error Logging’ standard. If a page fails to load, your browser may send a technical error report to Cloudflare.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, fast and reliable delivery of this website. Details: Cloudflare privacy policy.

5. Contact by email

If you email us, we store the information you provide, including your contact details, to handle your enquiry and for any follow-up questions. We do not share this data without your consent.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or a possible contract, otherwise Art. 6(1)(f) GDPR.

6. Booking appointments with Calendly

You book the intro call through Calendly (Calendly LLC, 3423 Piedmont Road NE, Atlanta, GA 30305, USA). The calendar is embedded on the booking page.

The calendar loads automatically as soon as you scroll near it on the booking page, not only after a click. From that moment your browser connects to Calendly’s servers. Calendly receives at least your IP address and the technical data of your browser. If you reach the booking page through a link with campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), we pass these parameters on to the calendar so we can see which channel a booking came from.

When you book an appointment, Calendly collects your name, your email address, your phone number if applicable, and the selected time.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Which data Calendly itself stores, including whether Calendly sets cookies in the calendar window, is described in Calendly’s privacy policy.

7. Payment with Stripe

The intro call costs 199 euros and is paid with Stripe directly in the calendar. You enter your payment details in the payment window that Calendly embeds through Stripe. This website itself does not see or store any payment data.

The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

8. Confirmation page after booking

After a booking, Calendly may redirect you to our confirmation page. Calendly adds your name, the appointment time and a booking ID to the address. The page reads this information only in your browser, to greet you by first name, show the appointment and build the links for rescheduling or cancelling. We do not store this information on the page. As part of the requested address, however, it passes through Cloudflare like any other page request (section 4).

On this page you can add the appointment to your calendar. The calendar file (‘Apple / iCal’) is created in your browser. If you click ‘Google Calendar’ or ‘Outlook’, the Google or Microsoft website opens with the appointment details, and the privacy policy of that provider applies there.

The legal basis is Art. 6(1)(b) GDPR.

9. Statistics with Google Analytics and Google Tag Manager

If you click ‘Accept’ in the cookie banner, we use Google Analytics 4 to measure which pages are visited, where visitors come from and how long they stay. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics is integrated via Google Tag Manager from the same provider. Both only load after you have agreed. Before that, your browser does not connect to Google. Once you agree, Google receives your IP address and technical data about your browser when they load.

Google Analytics then sets cookies and processes, for example, pages visited, time on site, where the visit came from, device type, browser and approximate location. According to Google, IP addresses are neither logged nor stored in Google Analytics 4 (Google help on IP addresses). We keep the data for 14 months. Google Signals and advertising features are switched off. Data may also be transferred to Google LLC in the USA.

We store your choice in your browser’s local storage (localStorage) so that the banner does not appear on every visit.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future: click ‘Cookie settings’ at the bottom of the page and then ‘Decline’. You can delete cookies that have already been set in your browser. Details: Google privacy policy.

10. Your rights

Under the GDPR you have these rights:

  • Access (Art. 15 GDPR): which data we store about you
  • Rectification (Art. 16 GDPR): correction of inaccurate data
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR) to processing based on our legitimate interest

To exercise them, write to support@ms-strategy-consulting.com.

11. Complaint to a supervisory authority

If you believe that we process your data in breach of the GDPR, you can lodge a complaint with a data protection supervisory authority.

Competent authority in Cyprus: Office of the Commissioner for Personal Data Protection Kypranoros 15, 1061 Nicosia, Cyprus (P.O. Box 23378, 1682 Nicosia) www.dataprotection.gov.cy

12. Encryption

This website uses SSL/TLS encryption. You can recognise it by ‘https://’ in the address bar and by the lock icon in your browser.

13. Status and changes

Status: November 2026. If this website or the legal situation changes, we will update this privacy policy.