Privacy policy
Controller
Bernd Best
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Deutschland
Contact for privacy enquiries: box@berndbest.com
In short
This website uses no advertising or analytics tools. To protect the contact form, it uses a necessary security cookie lasting up to two hours and Cloudflare Turnstile. The Turnstile script is loaded when you submit an enquiry. Fonts and other website assets are hosted locally.
Hosting and server log data
The website is hosted by a web hosting provider (Namecheap, Inc.). When you visit, the server processes technically necessary data: IP address, date and time, page requested, amount of data transferred, browser and operating system. This serves secure and stable operation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). How long the log data is kept depends on the settings of the hosting provider.
Strategy check
The strategy check runs entirely in your browser. Your answers are neither stored nor sent to me or to third parties. Only if you select “Include my check answers” in the contact form do the answers become part of your message.
Contact form and email
If you use the form, I process your name, email address, your message and, optionally, company and check answers in order to reply to you. Your details are submitted from the server to the separate strategy form in HubSpot and an internal email is sent to box@berndbest.com. Google Workspace operates the mailbox. HubSpot is used only to handle and document your enquiry and internal follow-up tasks. An enquiry does not create a newsletter subscription or marketing consent. Processors include HubSpot Ireland Limited and Google Ireland Limited. Processing is governed by data processing agreements. Processing outside the EEA relies on applicable adequacy decisions or EU Standard Contractual Clauses. Further information: HubSpot privacy and Google privacy. This website embeds no HubSpot scripts or tracking cookies. The legal basis is your consent under Art. 6(1)(a) GDPR, and for enquiries about a contract Art. 6(1)(b) GDPR. The data is deleted once your request has been dealt with and no statutory retention duties apply. You can withdraw your consent at any time with effect for the future, an informal email is enough.
External links
Links to LinkedIn, X, Instagram, Facebook and Threads lead to external services. Your browser contacts those services only when you follow a link. Their privacy notices then apply.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to box@berndbest.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the alleged infringement.
Last updated
October 12, 2026
Strategy enquiries and roles
Enquiries through berndbest.com are handled in Bernd Best’s strategy role. Contact and reply address: box@berndbest.com. An enquiry does not subscribe you to a newsletter or marketing emails. Strategy-check answers are sent only when you select the relevant checkbox yourself.
Protection against automated enquiries
When you submit the form, Cloudflare Turnstile checks your browser in invisible mode. Cloudflare processes technical information such as your IP address, browser and device characteristics for this security check. Your name, email address and enquiry text are not included in our Turnstile verification request. The server verifies the result before forwarding an enquiry to HubSpot or email. A signed form token, a minimum preparation time of three seconds, a limit of five attempts per IP address in a rolling hour and duplicate detection provide additional protection. The necessary cookie is Secure, HttpOnly and SameSite=Strict. Local security records contain keyed hashes and timestamps, without plain-text IP addresses or enquiry content. Duplicate suppression applies for 24 hours; old security records are periodically removed after 48 hours. Further details: Cloudflare Turnstile Privacy Addendum.