Legal

Privacy Policy

In accordance with the EU General Data Protection Regulation (GDPR)

1. Controller

Rimkus Assets GmbH
Kurfürstendamm 45, 10719 Berlin
Email: hello@juozasrimkus.com

2. Hosting

This website is hosted on a server operated by netcup GmbH, Karlsruhe, Germany. Server log files are processed on the legal basis of Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Logs record IP address, date and time of request, requested page, referrer, browser and operating system. They are deleted after 14 days.

3. Business Check enquiry form

When you send the Focused Business Check enquiry form, I process the data you enter: your name, the business name, your email address, the business type, country and city, and your description of the main problem. Optionally, and only if you choose to provide them: a website or business profile, the number of locations, the booking or contact tools you use, which records are available, and your preferred reply channel. A phone number is asked for and stored only if you choose a phone or messaging reply.

Purpose: to assess whether a focused review is a good fit and to answer your enquiry.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract).
Retention: enquiry data is kept for 24 months, then deleted, unless a contractual or statutory retention period applies.
Recipients: the enquiry is stored on the server named in section 2 and sent to my email inbox at hello@juozasrimkus.com via the provider named in section 4. It is not used for marketing, not added to any mailing list, not published and not passed to any other third party.
Protection against automated submissions: the form uses a hidden field and a timing check instead of a third-party CAPTCHA; no data is sent to any other service for this purpose. Your IP address is stored with the enquiry and used to limit repeated submissions.

3a. Project intake form

When you submit the project intake form, I process the data you enter: your role, the type of asset, city and address, the description of your decision, financial range, deadline, name, email address, any uploaded files, and your answer regarding media permission.

Purpose: to assess and answer your enquiry.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Retention: enquiry data is kept for 24 months, then deleted, unless a contractual or statutory retention period applies.
Recipients: the data is sent to my email inbox at hello@juozasrimkus.com. It is not passed to any other third party.

3b. Records reviewed during a paid engagement

If we agree a paid Business Performance Check, that is a separate processing situation from the enquiry above. The scope document names, before any paid work begins, exactly which business records are needed for the agreed question.

These may include booking or appointment records, an enquiry log, basic sales or pricing information, workflow descriptions, screenshots of settings in software you already use, and comparable operational information. Only what is relevant to the agreed question is requested.

Purpose: to carry out the engagement you have commissioned and to produce the written brief.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
What I do not ask for: customer or patient identities, health data, payment card details, passwords or access credentials, and full bank statements. Please do not send them. If a record cannot be usefully anonymised before it is shared, we agree a different way to look at it.
How it is transferred: not through the public enquiry form. A suitable channel is agreed in writing for each engagement.
Retention: the records you supply are deleted when the engagement closes. The scope document and the brief I produce are kept as my own business records for as long as German commercial and tax law requires.
Recipients: nobody. These records are not passed to any third party, are not used to train any model, and are not used for any other client or purpose.
Publication: nothing about the engagement is published. If a case study is ever discussed, that requires separate written permission from you, given after the work, and it can be refused or withdrawn.

4. Sending of enquiries

To deliver form submissions to my inbox I use Resend (Resend Inc., 2261 Market Street, San Francisco, CA 94114, USA). The data and attachments you enter are transmitted for this purpose. Legal basis: Art. 6(1)(f) GDPR. Transfer to the US is based on the EU Standard Contractual Clauses; processing takes place in the EU region (Ireland).

5. Cookies and analytics

This website sets no cookies and uses no analytics or tracking services.

6. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). To exercise these rights, contact me at the address above.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

7. Changes

This privacy policy was last updated in September 2026.

Section 3b was added when the first paid engagements were prepared. It has not yet been reviewed by a lawyer.