Privacy policy
Last updated: 19 October 2026. This page explains which data I process when you use this website or fill in the Practice Check, and what rights you have. The German version is legally binding.
1. Controller
Robert Kosse (RoKinc)Florastraße 70, 13187 Berlin, Germany
Email: r.kosse@rokinc.de
2. Summary
- Visit statistics with Google Analytics only run if you expressly consent (section 4). Without consent, no analytics or advertising cookies are set.
- The website’s fonts and scripts are loaded from my own server.
- Other external services only come into play when you open and complete the Practice Check (sections 6 and 7).
3. Hosting and server log files
The website is hosted by Alfahosting GmbH in Germany. Each time a page is accessed, the server automatically processes data transmitted by your browser: IP address, date and time, page visited, referrer URL, browser type and operating system. This is technically necessary to deliver the website and keep it secure. The legal basis is my legitimate interest under Art. 6(1)(f) GDPR. A data processing agreement is in place with the host.
4. Visit statistics with Google Analytics (consent only)
On your first visit, a notice asks whether you allow visit statistics. Only if you click “Allow statistics” does the website load Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics then sets cookies (_ga and _ga_11CFX1YT87) and processes usage data such as pages visited, time on page, source of the visit (for example a search engine or a linking website), approximate location at country and city level, device type, operating system, browser and screen size. Google Analytics 4 does not store IP addresses. Google signals and advertising features are disabled.
The purpose is to understand how the website is used and to improve it. The legal basis is your consent under § 25(1) of the German TDDDG and Art. 6(1)(a) GDPR. The cookies expire after 13 months at the latest; event data is deleted in Google Analytics after 14 months at the latest. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. A data processing agreement is in place with Google.
You can withdraw your consent at any time with effect for the future via “Cookie settings” at the bottom of every page. I store your choice in your browser’s local storage (entry rokinc-consent-v1) so the notice does not appear on every visit. This entry is technically necessary (§ 25(2) no. 2 TDDDG); you are asked again after twelve months.
5. Contact by email
If you write to me, I process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR where a possible collaboration is concerned, otherwise Art. 6(1)(f) GDPR.
6. Practice Check (Tally)
The questionnaire on the Practice Check page is provided via the form service Tally (Tally BV, Belgium). When you open this page, your browser connects to Tally's servers and your IP address is transmitted.
When you fill in the questionnaire, I process your answers and the details you provide voluntarily: name, email address and, if you like, your website or Instagram profile. The purpose is to prepare your personal analysis and contact you about it. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request). If you additionally consent to receiving updates and offers by email, the legal basis is Art. 6(1)(a) GDPR. You can withdraw this consent at any time.
Some questions concern your professional workload and how you experience your working life. Only answer what you want to share. Please do not enter health data or information about your clients.
7. Analysis and automation
I use the following services for the analysis:
- Make (automation platform, processing in an EU data centre) passes your answers on to the services below.
- OpenAI (AI models) creates a draft of the analysis. For this, your answers and the publicly available text of the website you provide are processed. I review every analysis personally before sending it. No automated decision-making within the meaning of Art. 22 GDPR takes place.
- Google Sheets and Gmail (Google Ireland Limited): your details and the analysis are stored in a spreadsheet so that I can work on them, and I receive an internal email notification.
- I send you the reviewed analysis by email via my email provider.
Where data is transferred to countries outside the EU, in particular the USA, this is done on the basis of appropriate safeguards under Art. 44 et seq. GDPR, such as the EU-US Data Privacy Framework or EU standard contractual clauses. Data processing agreements are in place with the providers.
8. Links to social networks and other websites
This website links to Instagram, LinkedIn, YouTube and other websites. These are plain links without embedded content. Data is only transferred to the respective provider once you click a link; its privacy policy then applies.
9. Storage period
I only store personal data for as long as necessary for the purposes stated or as required by statutory retention obligations. You can ask me to delete your data at any time.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. An informal email to r.kosse@rokinc.de is enough.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.