Thank you for your interest in our company. The protection of your personal data is important to us. Below we inform you about the data collected when you visit this website and how we handle it.

1. Controller

The controller responsible for data processing on this website is:

Competitio Consulting GmbH
Hans-Henny-Jahnn-Weg 53
22085 Hamburg
Germany

Represented by the Managing Director Dr. Christoph Pfeiffer
Email: info@competitio.de

2. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the website, Vercel processes, on our behalf, technically necessary data that your browser transmits automatically (see "Server log files"). The legal basis is our legitimate interest in the secure and efficient provision of our online offering (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with Vercel.

Processing may also take place on servers in the USA. Vercel is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.

3. General information and mandatory disclosures

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of processing no longer applies. Statutory retention obligations remain unaffected.

Withdrawal of your consent

Where processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out until withdrawal remains unaffected.

4. Data collection on this website

Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are in particular:

  • IP address
  • date and time of the request
  • page or file accessed
  • browser type and operating system used
  • referrer URL

This data is not merged with other data sources. Collection takes place on the basis of Art. 6(1)(f) GDPR for the technically error-free presentation and security of the website.

Reach measurement (Vercel Web Analytics)

To statistically evaluate the use of our website, we use Vercel Web Analytics, a service of our hosting provider Vercel Inc. This reach measurement is cookieless: no cookies are set and no cross-site or cross-device recognition (no cross-site tracking) takes place. Only aggregated, anonymous statistics are derived from the request data (e.g. pages viewed, referrer, approximate region of origin); your IP address is processed only briefly for this purpose and is not stored long-term. No conclusions can be drawn about individual persons. The legal basis is our legitimate interest in a data-minimising analysis and improvement of our online offering (Art. 6(1)(f) GDPR).

Cookies and local storage

Your choice in the cookie notice is stored locally in your browser (localStorage) so that the notice does not appear again on subsequent visits. This storage is technically necessary (Sec. 25(2) TTDSG) and is not transmitted to third parties.

With your explicit consent, we load the visitor tracking service Lemlist (provider: lempire SAS, France). Lemlist recognises returning visitors and attributes visits to our outreach campaigns; for this it may process cookies or comparable technologies and your IP address. The tracking is loaded only after your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TTDSG); without consent, no tracking takes place. You can withdraw your consent at any time with effect for the future by deleting the stored choice in your browser.

B2B company identification (Leadfeeder)

With your explicit consent, we load the Leadfeeder service (provider: Liidio Oy / Dealfront Group GmbH, EU). Leadfeeder matches the IP address of a visit – where possible – to the company operating the internet connection used and shows us company-level information (e.g. company name and pages visited). Individual persons are not identified. The service is loaded only after your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TTDSG); without consent, no company identification takes place. Processing takes place within the EU; a data processing agreement (Art. 28 GDPR) is in place with the provider. You can withdraw your consent at any time with effect for the future by deleting the stored choice in your browser.

Google Ads & Google Analytics (Consent Mode)

We run search ads via Google Ads and analyse the use of the website with Google Analytics 4 (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Measurement is cookieless by default: via Google Consent Mode v2, storage remains disabled ("ad_storage" and "analytics_storage" set to "denied") — without your consent, no cookies are set and no information is stored on or read from your device; conversion signals (e.g. a submitted contact form) are processed in aggregated or modelled form (legal basis: legitimate interest in measuring our advertising, Art. 6(1)(f) GDPR). If you give your consent via the cookie notice, cookies are additionally set to measure reach, user behaviour and ad performance precisely (Art. 6(1)(a) GDPR, Sec. 25(1) TTDSG). Data may be transferred to the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time with effect for the future by deleting the stored website data in your browser.

Microsoft Advertising (UET)

Where activated, we use Universal Event Tracking (UET) from Microsoft Advertising for search ads in the Microsoft advertising network (Bing) (provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Consent Mode applies here as well: without your consent, "ad_storage" remains "denied" — no cookies are set and conversion signals are processed only in limited or modelled form (Art. 6(1)(f) GDPR). With your consent via the cookie notice, UET sets cookies for precise conversion measurement (Art. 6(1)(a) GDPR, Sec. 25(1) TTDSG). Data may be transferred to the USA; Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time with effect for the future by deleting the stored website data in your browser.

Contacting us

If you contact us via the contact form or by email, we process the data you provide (e.g. name, email address, your message) in order to handle your enquiry. For this purpose, the data from the contact form is transmitted to our service provider HubSpot (see below). The legal basis is Art. 6(1)(b) GDPR (initiation/performance of a contract) or Art. 6(1)(f) GDPR (handling your enquiry).

"The Competitor" newsletter

When you subscribe to our newsletter, we transmit the email address you provide to HubSpot and process it for sending the newsletter. Processing is based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time, for example via the unsubscribe link in each issue, thereby withdrawing your consent.

Use of HubSpot

For our forms and newsletter delivery we use the services of HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA. HubSpot processes the transmitted data on our behalf; a data processing agreement (Art. 28 GDPR) is in place. Transfer to the USA may occur; HubSpot is certified under the EU-U.S. Data Privacy Framework. Further information can be found in HubSpot's privacy policy.

Fonts

This website uses fonts stored locally on the server. When the page is rendered, no connection is established to third-party servers (e.g. Google Fonts); no personal data is transmitted to third parties for this purpose.

Linked newsletter issues

In the newsletter archive we link past issues as PDF files that are hosted on the website competitio.de. Only when you open an issue is a connection established to the competitio.de server; the processing described there then applies.

5. Your rights

Within the scope of the statutory provisions, you have the right at any time to:

  • access to your stored data (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • objection to processing (Art. 21 GDPR), and
  • withdrawal of consent given (Art. 7(3) GDPR).

To exercise these rights, please contact info@competitio.de.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 7th floor
20459 Hamburg, Germany

Last updated: June 2026