Privacy Policy

PrimeBrand Solutions – Dr. André Möllersmann · As of 21 October 2026

1. Controller and scope

Protecting your personal data is important to us. This privacy policy explains which personal data are processed when you use our website and contact us, for what purposes this is done and what rights you have.

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Telephone: +49 160 98057200
E-mail: andre.moellersmann@primebrandsolutions.com

Websites: www.primebrandsolutions.de and www.primebrandsolutions.com

This privacy policy applies to the websites listed above, insofar as the same data processing operations take place there.

2. Hosting, server log files and fonts

Our website is operated by the following hosting provider:

When you access our website, STRATO processes technically necessary access data in order to provide the website and ensure its secure and reliable operation. This may include in particular:

• IP address of the accessing device
• date and time of access
• pages and files accessed
• browser type and version
• operating system used
• referrer URL, if transmitted by the browser
• amount of data transferred and technical status messages

The processing serves to provide the website technically, to ensure its functionality and to detect and prevent disruptions, attacks and misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and reliable operation of our website.

Storage period

STRATO stores the IP addresses of website visitors for a maximum of seven days in order to detect and prevent attacks. In addition, depending on the hosting package, STRATO provides anonymised access logs for a period of up to six weeks. According to STRATO, the IP addresses or host names of visitors contained therein are anonymised.

Data processing on our behalf

Insofar as STRATO processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. According to STRATO, data processing within the hosting service takes place in German data centres. Further information on data processing by STRATO is available at www.strato.de/datenschutz.

Fonts

The fonts used on our website are loaded exclusively from our own server. No connection is made to Google Fonts servers or other font providers.

3. Contact by e-mail and telephone

If you contact us by e-mail or telephone, we process the personal data you provide. This includes in particular your name, your contact details, your company affiliation where applicable and the content of your enquiry.

The processing serves to handle your request, for business communication and, where applicable, to prepare or carry out a collaboration.

Insofar as the processing is necessary to take steps prior to entering into a contract or to perform a contract with you personally, it is based on Art. 6(1)(b) GDPR. For other enquiries, in particular communication with contact persons at companies, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in handling business enquiries and in initiating and maintaining business contacts.

We delete the data provided as soon as they are no longer required to handle your request or for the business relationship, unless statutory retention obligations or other legitimate reasons for further storage apply.

4. Communication via WhatsApp

You can also contact us via the WhatsApp messenger service. If you choose this channel, we process the personal data you transmit, in particular your telephone number, your display name, the content of your messages and any files you send.

The processing serves to handle your request and for business communication. The legal basis is Art. 6(1)(b) GDPR insofar as this is necessary to take steps prior to entering into a contract or to perform a contract with you personally. For other business communication, the legal basis is Art. 6(1)(f) GDPR.

When WhatsApp is used, personal data are also processed by the provider of the service:

WhatsApp is part of the Meta group of companies. The provider processes, among other things, information on the use of the service as well as technical connection and communication data. Personal data may also be transferred to countries outside the European Economic Area, in particular to the USA. WhatsApp explains the safeguards and legal bases used for such transfers in its privacy policy: www.whatsapp.com/legal/privacy-policy-eea.

Using WhatsApp is voluntary. Alternatively, you can contact us at any time by e-mail or telephone. Communication data stored by us are deleted as soon as they are no longer required to handle your request or for the business relationship and no statutory retention obligations or other legitimate reasons for longer storage apply.

5. External links and social networks

Our website contains links to external websites and online services of third parties. These include in particular LinkedIn, companies, universities, media outlets, podcasts, interviews and further sources of information.

A regular link does not in itself establish a direct connection to the servers of the linked provider. Only when you follow such a link do you leave our website, and personal data, in particular your IP address and technical usage information, may be processed by the respective provider. We generally have no influence on this processing. The privacy policies of the respective providers apply.

Among other things, our website links to the professional LinkedIn profile of Dr. André Möllersmann. The provider of LinkedIn for users in the European Economic Area is:

Further information on data processing by LinkedIn is available at www.linkedin.com/legal/privacy-policy. If you contact us via LinkedIn, we process the information you provide to handle your request and for business communication. The relevant legal bases correspond to those described in section 3.

6. Embedded videos (YouTube)

On our website you can play selected videos directly in a window on the page. For this purpose we use YouTube’s privacy-enhanced mode (youtube-nocookie.com). The provider is:

No connection to YouTube is made when you visit our website or open the video window. The YouTube player is only loaded once you explicitly click “Load and play video” in the video window. In doing so, your IP address, information about the browser and device used and the referring page in particular are transmitted to YouTube. YouTube may use cookies or similar technologies on your device during playback. A transfer of personal data to the USA cannot be ruled out; according to Google, such transfers are based, among other things, on the EU-U.S. Data Privacy Framework and standard contractual clauses.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give by clicking “Load and play video”. You can withdraw your consent at any time with effect for the future by reloading the page; the video will then only be loaded after another click. Alternatively, you can watch videos directly on YouTube via the “Open original” link.

Further information is available in Google’s privacy policy: policies.google.com/privacy.

7. Podcast player (Acast)

You can listen to podcast episodes directly on our website using our own audio player. The audio file is provided by the hosting provider of the respective podcast, Acast AB, Stockholm, Sweden.

No connection to Acast is made when you open the player. The audio file is only loaded from Acast’s servers once you click “Play”. In doing so, your IP address and information about the browser and device used in particular are transmitted to Acast.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in enabling you, at your request, to listen to the episode directly on our website. Further information is available in Acast’s privacy policy: www.acast.com/privacy.

8. Cookies and similar technologies

Our website itself does not use cookies or similar technologies to store or read information on your device. In particular, we do not use cookies for personalised advertising, audience measurement or user tracking.

If you load a YouTube video, YouTube may use its own cookies or similar technologies (see section 6). Should further technologies of this kind be used in the future, we will update this privacy policy and, where required, obtain your consent beforehand pursuant to Section 25 TDDDG and Art. 6(1)(a) GDPR.

9. Recipients of personal data and transfers to third countries

Personal data are only disclosed insofar as this is necessary for the purposes described, a legal obligation exists or another legal basis permits the transfer.

Recipients include in particular technical service providers, insofar as they are required to provide our website and for business communication. We use the services of STRATO GmbH, based in Berlin, to operate our website. Insofar as service providers process personal data on our behalf, this is done in compliance with the requirements of Art. 28 GDPR.

When individual external services are used, data may also be processed outside the European Economic Area. This applies in particular to WhatsApp (section 4) and YouTube (section 6). Insofar as we ourselves are responsible for such a transfer, we comply with the requirements of Art. 44 et seq. GDPR.

10. Storage period and deletion

We generally store personal data only for as long as is necessary to fulfil the respective purpose. Where statutory retention obligations apply, the data concerned are stored for the duration of those obligations. Storage may also be necessary for the establishment, exercise or defence of legal claims.

Once the respective purpose no longer applies and any retention periods have expired, personal data are deleted. The storage periods described in section 2 apply to server log files.

11. Your rights as a data subject

Subject to the statutory requirements, you have the following rights under the GDPR:

• Access (Art. 15 GDPR): You can request information about which personal data we process about you.
• Rectification (Art. 16 GDPR): You can request that inaccurate personal data be corrected or incomplete data be completed.
• Erasure (Art. 17 GDPR): You can request the erasure of your personal data under the statutory conditions.
• Restriction of processing (Art. 18 GDPR): Under certain conditions, you can request that the processing of your personal data be restricted.
• Data portability (Art. 20 GDPR): Where the statutory conditions are met, you can request to receive your personal data in a structured, commonly used and machine-readable format or to have them transmitted to another controller.
• Objection (Art. 21 GDPR): Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless there are compelling legitimate grounds for further processing as provided by law. You can object to the processing of personal data for direct marketing purposes at any time without giving reasons.
• Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

To exercise your rights, you can contact us at any time at andre.moellersmann@primebrandsolutions.com.

12. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes data protection law, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

Your right to lodge a complaint exists regardless of whether you have contacted us beforehand. You may also contact any other supervisory authority competent under Art. 77 GDPR.

13. Obligation to provide personal data

You can generally use our website without actively providing any personal data. However, the data listed in section 2 are processed when the website is accessed technically.

Contacting us is voluntary. However, to handle your enquiry we need the information required for communication. Within a contractual relationship, the provision of certain personal data may be necessary to perform the contract or to fulfil legal obligations. Without this information, handling or performance may not be possible.

14. Automated decision-making

We do not use automated decision-making, including profiling within the meaning of Art. 22 GDPR, in connection with the use of our website.

15. Data security

Our website is provided via an encrypted HTTPS connection. We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and other unlawful processing.

16. Updates to this privacy policy

We update this privacy policy as necessary, in particular when legal requirements, technical conditions or the services we use change. The version published on our website applies.

This English version is provided for convenience. In case of doubt, the German version applies.