Privacy information
Controller-approved privacy information, last updated 2026-10-10. Provider contracts and international-transfer safeguards are maintained separately in the processor register.
Controller
Christopher Rehm, Rehm KI Consulting
Alpenstr. 3, 86836 Klosterlechfeld, Deutschland
car2187bus@pm.me
Purpose and legal basis
We process business contact data for direct marketing of our own consulting services and software products to businesses, and to manage the business relationship with prospects and customers.
The products and services we currently offer:
- Consulting
- LearnWohl
- LeGuild.art
- notes-world
Legal basis: our legitimate interest in business-to-business direct marketing (Art. 6(1)(f) GDPR) for prospects; for customers, the performance of the contract (Art. 6(1)(b) GDPR).
You can object to direct marketing at any time (Art. 21(3) GDPR). An objection ends all marketing to you, for every product and service, not just the one you were contacted about.
Processing activities
EngCRM is an internal B2B CRM for research, contact management and human-approved outreach.
- Lead management: business/contact details, research notes, interaction history, AI fit scores, and which of our products each contact was offered and how far that has got.
- Outreach and inbox: recipient details, draft and sent messages, replies and opt-out records.
- Staff accounts: name, email, password hash, role, authentication and audit data.
- Business-card capture: card images, extracted contact details and optional capture location.
Sources for indirectly collected data
Business and contact data can be collected from public company websites, directories, business cards and public venue listings. We record the source where technically available.
Recipients and international transfers
The following processors may receive data when their feature is enabled. Applicable agreements and transfer safeguards are maintained in the controller's processor register.
- IONOS (Germany) — hosting and database
- Proton (Switzerland) — business email
- Anthropic (United States) — AI-assisted extraction and drafting
- Google Maps / Places (United States) — venue research
- Expo (United States) — staff-device push notifications
- Bright Data (Israel) — website retrieval, where enabled
Retention
The application enforces configured deletion periods for leads, inbox messages, AI data, interaction records, audit records and stale push tokens. A deletion or erasure request removes directly linked CRM data; backups expire under the separately documented backup schedule.
Your rights
You may request access, rectification, erasure, restriction, objection to processing, and data portability, and may lodge a complaint with a supervisory authority. To exercise a right or object to outreach, contact car2187bus@pm.me.
Cookies and tracking
The web application uses only the session cookie required for authenticated operation. It does not use analytics, advertising or tracking cookies.