Privacy policy

This translation is provided for information only. The German version is legally binding: Datenschutzerklärung (German version)

At a glance

• No cookies and no browser storage.
• No tracking and no analytics tools.
• No third-party content: fonts, scripts and graphics are served by this website itself.
• No contact form. You write to me by email if you wish.
• Filters and selection fields work only in your browser.

1. Controller

Name

Yassine Ruschkowski
Numidea Advisory – Inh. Yassine Ruschkowski

Address

Neufertstr. 14, 14059 Berlin

Phone

+49 176 72298196

Email

yassine@numidea.com

Numidea Advisory and Erlöswerk are trading names of my sole proprietorship. This policy applies to both areas of the website.

No data protection officer has been appointed because the legal requirements for doing so are not met.

2. Principle

This website sets no cookies, uses no tracking or analytics tools and does not load any third-party content such as fonts, scripts or maps. There is no contact form. Links to other websites are explained in section 9.

3. Provision of the website (hosting)

The website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When the website is accessed, the host processes technically necessary data in log files: IP address, date and time, the address accessed, the amount of data transferred and the browser identifier. If your browser sends the previously visited page, this is logged as well.

The purpose is to deliver the website and to fend off attacks. The legal basis is my legitimate interest in a secure and functional website pursuant to Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

Processing may take place in the USA. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework. This transfer is therefore covered by the European Commission’s adequacy decision pursuant to Art. 45 GDPR. In addition, standard contractual clauses pursuant to Art. 46 GDPR form part of the contract with the host.

The retention period for log data is determined by the host; it deletes or anonymizes the data as soon as it is no longer needed for the stated purposes. I do not store these logs myself or pass them on to other services.

4. Features that work only in your browser

Some pages contain features such as filters, expandable sections and animations. They work exclusively in your browser.

• Your selection is neither stored nor transmitted.
• The website uses no browser storage: no cookies, no local storage, no database in the browser.
• Under the security policy, scripts may not open any network connections (connect-src 'none').
• Pre-filled emails open in your email program. Nothing is sent until you send it yourself.

Security policy in full

default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'none'; worker-src 'none'; object-src 'none'; base-uri 'self'; form-action 'none'; frame-ancestors 'none'

The website sends this policy with every page; your browser enforces it.

5. Language versions

Which language version you see depends solely on the address you open. Your language choice is not stored. There is no automatic redirect based on your browser’s language settings.

6. Contact by email or phone

If you write to me or call me, I process your details to answer your inquiry. The legal basis is Art. 6(1)(b) GDPR where an engagement is concerned, and otherwise Art. 6(1)(f) GDPR.

The email mailbox is operated using the Private Email service provided by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. Processing takes place under a data processing agreement pursuant to Art. 28 GDPR; transfers to the USA are governed by the European Commission’s Standard Contractual Clauses pursuant to Art. 46 GDPR.

I delete inquiries once they have been dealt with. I keep business correspondence and documents relating to engagements for as long as commercial and tax law require, usually six to ten years.

7. Contact by letter and via LinkedIn (Erlöswerk division)

I occasionally write letters to managing directors and department heads of energy utilities. Before the first letter, I usually send a connection request on LinkedIn; this request contains no offer and no advertising. The following information corresponds to the data protection notice pursuant to Art. 14 GDPR printed on the back of every letter.

Which data

Your name, your academic title where applicable, your position, your company and its business address; where published, your business phone number or email address; plus the date and content of my letters to you.

Source of the data

Exclusively publicly accessible sources, such as the company’s legal notice and website, annual reports, press releases, the German company register (Unternehmensregister), municipal investment reports and the trade press, as well as your publicly visible LinkedIn profile.

Purpose

I inform you, in your professional capacity, about my service (reconciliation between billing and the general ledger) and offer you a conversation. This is direct marketing to businesses.

Legal basis

Art. 6(1)(f) GDPR. My legitimate interest is direct marketing of my service to businesses by letter (Recital 47 GDPR). If you reply, I process your details to handle your inquiry and, where applicable, to prepare a contract (Art. 6(1)(b) and (f) GDPR).

Recipients

I do not pass your data on to third parties. Letters are delivered by a postal service provider; section 6 applies to the mailbox. LinkedIn is an independent controller for processing on its platform (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland); LinkedIn’s privacy notice applies there. I only transfer data to countries outside the EU in connection with the email service (section 6).

Retention period

I store your data for the duration of this series of letters (no more than three letters within about six weeks). If you do not reply, I delete it no later than twelve months after my last letter. After that, I keep only your name, your company and the note “do not contact again”, for no longer than three years, so that I do not write to you a second time. If you object, I delete all other data and keep only this note in a suppression list for as long as necessary to respect your objection. Statutory retention obligations remain unaffected.

8. Data from engagements

This policy covers the website and how you contact me. For data I process on behalf of a client, the respective data processing agreement pursuant to Art. 28 GDPR applies. That agreement governs whether and how artificial intelligence services are used; the principles are set out on the page AI and data protection.

This policy does not cover Algerian law. For engagements with clients in Algeria, the respective contract governs data protection separately. What needs to be clarified before first access is set out in the list of points to clarify for Algeria.

9. Links to other websites

This website links to third-party offerings, for example to the sources of the articles. When you click such a link, the respective operator receives at least your IP address. Your browser does not send the address of the page you are coming from; this website is configured that way.

I have no influence on processing by the respective operator; their privacy notice applies.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). An informal message to the address above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

11. No automated decision-making

There is no automated decision-making, including profiling (Art. 22 GDPR).

As of November 2026

Legal notice