Privacy policy
This translation is provided for information only. The German version is legally binding.
We take the protection of your data seriously. This website does not use cookies in its public area, does not use any advertising or analytics tools and does not embed third-party content. Below we explain which data is nevertheless processed.
1. Controller
Controller within the meaning of the General Data Protection Regulation (GDPR):
Interlok Bahnconsulting
Hermann Schmidtendorf
Bruchsaler Str. 3
10715 Berlin
Germany
Phone: +49 (0)157 8653 9357
Email: office@interlok-bahnconsulting.com
We have not appointed a data protection officer, as there is no legal obligation to do so. For any questions about data protection, please contact us at the email address above.
2. Provision of the website and hosting
This website is operated by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The website application (Cloudflare Workers), the content database (Cloudflare D1) and the storage for images and PDF files (Cloudflare R2) run there; the database and storage are located in data centres in Western Europe. Cloudflare also provides name resolution (DNS) and protection against attacks.
When you visit the website, the following data is necessarily processed for technical reasons:
- IP address of the requesting device
- date and time of access
- the address requested and, where applicable, the previously visited page (referrer)
- browser, operating system and language
- amount of data transferred as well as status and error messages
The purpose is to deliver the website, to ensure stability and security (in particular to defend against attacks) and to analyse errors. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of the website. Technical logs are stored for a maximum of seven days and then deleted automatically.
Cloudflare acts as our processor; a data processing agreement pursuant to Article 28 GDPR is in place with Cloudflare. A transfer of data to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR); the European Commission’s standard contractual clauses also apply (Article 46(2)(c) GDPR).
3. Contacting us
You can contact us via the contact form, by email or by phone. In the contact form, your name, email address and message are mandatory; company, phone number and subject are optional. We also store which language version of the website you used to send the form.
Enquiries sent via the form are stored in our website’s database (Cloudflare, see section 2) and processed there by us. Emails to us are received and stored by our email provider STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.
We process your details solely to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR if your enquiry relates to a contract or its preparation, and otherwise Article 6(1)(f) GDPR (legitimate interest in responding to enquiries). We delete the data once your enquiry has been dealt with in full, unless statutory retention obligations – for example for business correspondence under commercial and tax law – or the assertion of legal claims prevent this (Article 6(1)(c) or (f) GDPR).
4. Protecting the contact form against misuse (Cloudflare Turnstile)
To protect the contact form against automated spam, we use the Cloudflare Turnstile service on the pages containing the contact form (home page and contact page). Turnstile checks in the background whether the input comes from a human; as a rule, no action on your part is required. According to Cloudflare, Turnstile processes only the data strictly necessary for this security function and does not access your form entries. In the process, your IP address, browser and device information and characteristics of the connection in particular are transmitted to Cloudflare.
The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in protection against misuse and spam. Insofar as information on your device is accessed, this is strictly necessary for the use of the form you have requested (Section 25(2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act). Cloudflare processes some of this data under its own responsibility to improve bot detection. For transfers to the USA, see section 2.
5. Cookies, fonts and audience measurement
We do not set any cookies or store any information in your browser in the public area of this website (for the spam protection of the contact form, see section 4). We do not use any advertising, tracking or analytics tools and currently do not carry out any audience measurement. Consent under Section 25(1) TDDDG is therefore not required, and no cookie banner is displayed.
The fonts used are stored on our own server; no connection is made to font providers such as Google Fonts when you visit the website.
In the password-protected administration area (for editors only), a technically necessary cookie is set after login, which maintains the session until you log out or the login expires (Section 25(2) no. 2 TDDDG, Article 6(1)(f) GDPR).
6. Links, videos and advertising banners
This website contains links to other websites, for example to our trade journals, to partners and advertisers, and to videos on YouTube. Videos are not embedded, only linked. Data is only transferred to the respective providers when you click on a link; from then on, their privacy policies apply. The advertising banners on this website are stored on our own server and do not collect any data about you.
7. Your rights
You have the following rights vis-à-vis us with regard to the personal data concerning you:
- right of access (Article 15 GDPR)
- right to rectification (Article 16 GDPR)
- right to erasure (Article 17 GDPR)
- right to restriction of processing (Article 18 GDPR)
- right to data portability (Article 20 GDPR)
You can withdraw any consent you have given at any time with effect for the future (Article 7(3) GDPR). Simply contact us using the details above.
8. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Article 6(1)(f) GDPR (Article 21(1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
9. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
10. No automated decision-making
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.
Disclaimer
The content of this website has been prepared with the greatest care. Despite careful checking by the editorial team, no liability can be accepted for the accuracy, completeness or timeliness of the publications, unless there has been intent or gross negligence. The archive of the former website reflects the situation at the time and is not updated.
The operators of linked websites are solely responsible for their content. No legal violations were apparent at the time the links were set; if we become aware of any, we will remove the link in question immediately.
Copyright
Unless stated otherwise, texts, photos, graphics and documents on this website are subject to the copyright of Hermann Schmidtendorf. The fact that trademarks and rights are not mentioned does not mean that a product or content is not legally protected. Existing rights remain unaffected.
Last updated: October 2026

