This policy explains what personal data this website collects, why, and what your rights are. It complies with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Who is responsible
- Controller: Bernhard Schieber
- Tax ID (NIE): X2339036M
- Address: Avenida del Monte, 56, 28250 Madrid, Spain
- Email for privacy matters: mail@bernhardschieber.com
2. What data, for what purpose, on what basis, for how long
Newsletter
- Data: your email address, the date and source of your subscription, and delivery and interaction data generated by the email service (for example, whether an email was delivered).
- Purpose: to send you The Debrief. Nothing else — no profiling, no resale, no third-party advertising.
- Legal basis: your consent (Art. 6(1)(a) GDPR), given when you subscribe.
- Withdrawal: at any time, with the “unsubscribe” link included in every email, or by writing to the address above. Withdrawal does not affect sends made before it.
- Retention: while you remain subscribed. When you unsubscribe, you stop receiving emails immediately; the email service keeps a record that you unsubscribed so that you are not emailed again. You can ask for that record to be deleted as well.
Executive Insight Briefs — earlier reading access
- What changed: until 8 October 2026, closed briefs could be opened by confirming an email address. That access has ended, and no addresses are collected this way anymore. The full collection is now requested through the contact form (see below).
- Data: for addresses confirmed before that date, your email address, the date of your request and of your confirmation, the brief from which you made it, and the record of your consent. They are stored on this website.
- Cookie: a small cookie (bs_reader) may remain in your browser from that access. It is no longer used. It contains a code derived from your address, not the address itself, and expires two years after it was set. You can delete it in your browser at any time.
- Purpose: to send you The Debrief, which you agreed to receive. Nothing else — no profiling, no resale, no third-party advertising.
- Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box on the form.
- Withdrawal: at any time, with the “unsubscribe” link included in every issue of The Debrief, or by writing to the address above. Withdrawal does not affect processing carried out before it.
- Retention: while you remain subscribed. When you unsubscribe, your address is removed from the list of readers; a record that you unsubscribed is kept so that you are not emailed again. You can ask for that record to be deleted as well.
Contact form
- Data: name, email, organization (if given), the content of your message and, if you choose to attach it, the map produced by the self-guided audit Run the comparison. The audit itself runs in your browser and sends nothing unless you attach its map to a message.
- How: your message is sent from this website to my mailbox. The website does not store it. You receive a short confirmation by email.
- Purpose: to answer your message — including a request for the collection of Executive Insight Briefs — and, if you ask for it, to arrange a conversation.
- Legal basis: your consent, and steps taken at your request before any agreement (Art. 6(1)(a) and (b) GDPR).
- Retention: for as long as the conversation lasts, and up to twelve months after the last exchange, unless a professional relationship follows — in which case the retention periods required by Spanish tax and commercial law apply.
Browsing
Reading this website does not require you to provide any personal data. The web server records technical data (such as IP address and browser type) for security and to keep the site working, on the basis of legitimate interest (Art. 6(1)(f) GDPR). These logs are kept for a short period by the hosting provider.
3. Who receives your data
Your data is not sold or shared for advertising. It is processed only by the service providers needed to run this website:
- Hosting, email and newsletter delivery: IONOS Cloud S.L.U., Calle Madre de Dios 21, 26004 Logroño (La Rioja), Spain. Your data stays within the European Union.
Data may also be disclosed where the law requires it.
4. Your rights
You can, at any time and free of charge:
- access your data;
- rectify it if it is inaccurate;
- erase it;
- restrict or object to its processing;
- receive it in a portable format (portability);
- withdraw your consent, without affecting processing carried out before.
Write to mail@bernhardschieber.com with the subject “Data protection” and the right you wish to exercise. I will answer within one month. I will only ask for proof of identity if there is a reasonable doubt that the request comes from you.
If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
5. Security
Appropriate technical and organizational measures are in place to protect your data. No system connected to the internet is completely secure; if a breach affecting your data occurs, you will be informed as the law requires.
6. Minors
This website is intended for professionals. It is not directed at people under 14, and their data is not knowingly collected.
7. Changes
This policy may be updated when the law or the services used change. The date below shows the current version.
Last updated: 8 October 2026