PRIVACY
Privacy Policy
Last updated: September 2026
1. Data Controller
Stephan Waechter
ALTA MIRA – Hospitality & Executive Advisory
Am Spiegelberg 33
14552 Michendorf
Germany
Telephone: +49 (0)170 7176089
Email: s.waechter@alta-mira.de
2. Hosting by STRATO
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you access the website, technically necessary access data are processed. This includes, in particular, the IP address of the device used to access the website.
According to STRATO, visitors’ IP addresses are stored for a maximum of seven days for the detection and prevention of attacks. Within its hosting services, STRATO also makes log files from the previous six weeks available; older log files are not provided there.
Processing is carried out to provide this website securely, reliably and efficiently on the basis of Article 6(1)(f) GDPR. My legitimate interest is the secure and uninterrupted operation of my online presence. Where STRATO processes personal data on my behalf, this is carried out on the basis of a data processing agreement pursuant to Article 28 GDPR.
For live operation, the connection between your browser and this website is established exclusively through encrypted HTTPS/TLS. This protects transmitted data against unauthorized interception while in transit.
3. Contact by Email and Contact Form
If you contact me by email or through the contact form, I process the information you submit in order to handle your inquiry. This may include your name, email address, company or organization, selected service area and the content of your message.
Name, email address, service area, and message are marked as required fields because your inquiry cannot be assigned and answered properly without them. Providing a company or organization is voluntary. There is no statutory obligation to provide the data; without the required information, however, the inquiry cannot be submitted and answered through the contact form.
If your inquiry relates to a potential engagement or an existing engagement, processing is based on Article 6(1)(b) GDPR. Other inquiries are processed on the basis of Article 6(1)(f) GDPR; my legitimate interest is the proper handling and response to communications addressed to me.
The data are deleted once the inquiry has been fully dealt with, unless statutory retention duties, contractual requirements or legitimate interests in continued storage – in particular for the establishment, exercise, or defense of legal claims – require otherwise.
No special categories of personal data within the meaning of Article 9 GDPR are required for the initial contact. In particular, please do not enter health information, information concerning racial or ethnic origin, religious or philosophical beliefs, sex life or sexual orientation in the free-text field, and do not send particularly sensitive or extensive documents. For personal matters, a general description of the support required is sufficient at this stage. If sensitive information should later be necessary, the purpose, legal basis and an appropriate secure method of transmission will be agreed separately in advance. Sensitive information submitted without being requested will not be substantively processed and will be deleted unless there is a legal basis requiring further storage.
The web-hosting and email service providers used by me may process data as recipients or processors where this is technically necessary to provide the form and deliver your message. Your inquiry will not be used for advertising purposes.
4. Technically Necessary Session Information
The technically necessary session identifier ALTA_MIRA_SESSION is used only when the contact
form is submitted in order to limit repeated automated submissions and misuse. The session contains only
technical timestamps relating to form submission; the content of your inquiry is not stored in the session.
The identifier is set as a session cookie with the “HttpOnly” and “SameSite=Lax” safeguards and is additionally
marked “Secure” when an HTTPS connection is used. The cookie is deleted when the browser is closed. The
server-side session information is used for abuse prevention for no longer than 30 minutes.
Where information is stored on or accessed from your device for this purpose, this is based on section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), as the function is strictly necessary to provide the digital service expressly requested by you. The related processing of personal data is based on Article 6(1)(f) GDPR.
5. No Analytics, Marketing or Social-Media Trackers
In the current version of this website, no web analytics or marketing services such as Google Analytics, Meta Pixel or LinkedIn Insight Tag are used. No social-media feeds are embedded and no external web fonts are loaded.
A consent banner for analytics or marketing cookies is therefore not envisaged in the current technical configuration. If corresponding services are added later, the privacy information and, where required, consent management will be updated before they are activated.
This website contains simple external links, currently to my LinkedIn profile, Nicholas Baron’s website at score72.de, and Desender Dressage at desender-dressage.de. Merely visiting this website does not transmit data to the respective operators. Only when you select an external link do you leave this website; the operator of the website you visit is responsible for the subsequent processing of personal data.
No automated decision-making or profiling within the meaning of Article 22 GDPR takes place.
6. Recipients of Data
Personal data are disclosed only where this is necessary to deal with your inquiry or perform an engagement, where a legal obligation applies, or where you expressly request the involvement of another party.
Possible categories of recipients include the web-hosting and email service providers used for technical operation and – only where necessary and legally permissible in the individual case – professional advisors requested by you or involved in delivering the services.
If external lawyers, tax advisors, or other specialist professional advisors are involved at your request, they provide their respective professional services independently and under their own responsibility.
7. Transfers to Third Countries
In the currently envisaged technical configuration of the website, I do not intentionally transfer personal data to countries outside the European Union or the European Economic Area. STRATO states that the data centers used for hosting are operated in Germany.
8. Your Rights
Subject to the applicable statutory requirements, you have, in particular, the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and the right to object to processing based on legitimate interests (Article 21 GDPR).
Where processing is based on consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for my place of establishment is, in particular:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
Telephone: +49 33203 356-0
Email: Poststelle@LDA.Brandenburg.de
10. Changes to this Privacy Policy
This Privacy Policy will be updated if the technical services used, the nature of the data processing or the applicable legal requirements change.