Privacy policy

Note: the legally binding version of this policy is the German one at /datenschutzerklaerung/. This English version is a convenience translation. Have it reviewed by counsel before relying on it commercially.

1. Controller

The data controller for processing on this website is:

The Chameleon Way IT GmbH
Dormagen, Germany
E-mail: info@thechameleonway.com

Full provider identification is in the imprint.

2. What we don't do

This site uses no cookies (other than strictly required ones; currently none), no tracking, no analytics, and no third-party scripts. There is no automated profiling. Fonts and stylesheets are served from the same origin — there is no connection to Google Fonts, Cloudflare, jsDelivr, or similar.

3. Server log files

Our hosting provider (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany) records the following on each page request:

• anonymised IP address (last octet truncated)
• timestamp of the request
• URL requested
• referrer URL (if transmitted)
• browser and operating system
• HTTP status code and bytes transferred

These data are processed to ensure operations (legal basis: Art. 6(1)(f) GDPR — legitimate interest in stable, secure operation of the website) and deleted after 14 days. They are not combined with any other data sources.

4. Contact form / e-mail enquiries

The contact form on /en/contact/ currently opens the visitor's e-mail client. There is no server-side processing of the form's contents — data leaves the website only when the visitor manually sends the e-mail.

If you contact us by e-mail (e.g. info@thechameleonway.com) we process the data contained in the e-mail to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and / or Art. 6(1)(f) GDPR (legitimate interest in answering your enquiry). Data are deleted once the enquiry is concluded, unless statutory retention periods apply.

5. Hosting

The website is hosted on servers operated by Hetzner Online GmbH in Germany. A data-processing agreement under Art. 28 GDPR is in place. Data does not leave the European Economic Area.

6. Your rights

You have the following rights regarding your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority. Competent authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany.

7. Changes to this policy

We update this policy when the underlying processing changes. The current version is always available at /en/privacy/.

8. Liability Seal of Exali AG

This English version is a convenience translation; the German version at /datenschutzerklaerung/ is binding. The legal-basis references (Art. 6 Abs. 1 lit. f DS-GVO, § 2 Abs. 11 DL-InfoV) are kept in their original German wording because they refer to German law.

1. Description and scope of the data processing

This site embeds the liability seal of Exali AG. The graphical element of the seal is loaded from servers operated by Exali AG. Due to the technical design of the internet, your IP address is processed in order to transmit the image to your browser.

If you click on this seal, you leave our website and are redirected to servers operated by Exali AG.

For more information, see Exali's privacy policy: https://www.exali.de/Ueber-exali/Rechtliches/Datenschutzerklaerung,100401.php#Verwendung/Einbindung%20des%20exali.de-Haftpflicht-Siegels

2. Legal basis for the data processing

The legal basis for this data processing is Art. 6 Abs. 1 lit. f) DS-GVO (legitimate interest).

3. Purpose of the data processing

The data processing serves the purpose of providing visually appealing evidence of the statutorily required information on professional liability insurance (§ 2 Abs. 11 DL-InfoV).

4. Legitimate interest

Our legitimate interest in this data processing arises from the goal of offering a visually appealing online presence and discharging our information obligations in a visually attractive manner.

As of: 2026-05-04