Privacy policy
This policy covers visits to myubk.de and enquiries through its contact channels. Updated: 4 October 2026.
1. Data controller
KCM Kampmann Consulting and Management LLC-FZ
Meydan Grandstand, 6th floor
Meydan Road, Nad Al Sheba
Dubai, United Arab Emirates
Contact: Meik Kampmann, CEO
Email: info@myubk.de
Phone: +49 156 79814792
The controller is based in the United Arab Emirates. The relevant GDPR requirements apply where processing relates to offers directed at people in the EU; being based in Dubai does not exclude this. Applicable UAE data protection rules must also be considered, particularly Federal Decree-Law No. 45 of 2021 within its scope.
2. Website and hosting
The website and contact form are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When a page is requested, the host processes connection and log data, including IP address, time, requested URL, browser, operating system, referrer and response status.
This enables website delivery, error analysis and protection against attacks. The basis is Article 6(1)(f) GDPR and our legitimate interest in secure, reliable operation. STRATO states that visitor IP addresses kept for attack prevention are stored for up to seven days. Relevant information may be needed longer for investigating incidents and pursuing legal claims.
STRATO states that its hosting data centres are in Germany. Further information is available in STRATO information on processing agreements and hosting. The hosting location must be distinguished from possible access by our company in Dubai.
3. Contact form
The form collects your name, email address and message to identify and answer your enquiry. An additional field, not to be filled in by ordinary visitors, detects automated spam.
Submissions are processed on our hosting space and emailed to info@myubk.de. There is no separate form database, file upload or external form service. Technical transmission and log data may arise through hosting and email delivery.
Enquiries about a potential engagement or existing contract are processed under Article 6(1)(b) GDPR. Other enquiries rely on Article 6(1)(f) and our interest in responding. Reading this policy is not additional consent or permission for advertising.
4. Email and phone
For direct contact, we process details you provide, such as name, email, telephone number and message or conversation content, as necessary. Section 3's legal bases apply. The website does not record phone calls.
Emails may also include transmission information and attachments you send. A later engagement may require further data; additional processing and recipients will be explained separately.
5. WhatsApp as an optional contact channel
The WhatsApp button is an external link, not an embedded chat. Simply visiting our site does not connect you to WhatsApp. Clicking leaves our site or opens WhatsApp, whose provider may process technical usage data.
If you message us there, we receive your telephone number, any visible profile name and the message. We use them to handle the enquiry on Section 3's legal bases. You may instead use email, phone or the contact form.
The provider identifies WhatsApp Ireland Limited as responsible for the service in the European region. Processing outside the EEA may also occur. Details are in the WhatsApp privacy policy.
6. Processing in Dubai and international data flows
KCM may handle your enquiry in Dubai. Responsible staff may access messages and contact information there, even though the hosting systems are in Germany.
The European Commission's published list contains no adequacy decision for the UAE. Data protection rules and public authority access may differ from the EU. GDPR applicability to KCM does not replace a separate review of cross-border data flows.
Whether an operation constitutes a transfer under Articles 44 et seq. GDPR depends on the controllers, providers and actual data flow. Such transfers require an applicable transfer basis and, where necessary, additional safeguards. Clicking “Send message” is not explicit Article 49 consent to unprotected transfers to third countries.
For questions about processing in Dubai and safeguards applicable to a particular operation, contact info@myubk.de.
7. Recipients and retention
Only responsible staff handle messages within our company. Hosting and communication providers may receive data needed for their service. A later engagement may involve authorities or specialist advisers; this depends on the assignment and is explained separately. Legally required disclosures remain possible.
Enquiries are kept only as long as necessary for handling, contract preparation or performance, then deleted unless applicable retention duties or justified needs to pursue or defend claims apply. Periods depend on the document and applicable law. Data retained solely for mandatory storage are restricted from other uses.
8. Cookies, Google Analytics and external content
We use Google Analytics 4 only with your voluntary consent to analyse website use and improve our services. Its providers include Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We measure page views, engagement time, scrolling to 90 percent of a page, and clicks on WhatsApp, phone, email and conversation request buttons. A click is not an enquiry actually received. Google processes pseudonymous cookie identifiers and technical device and usage data. Your IP address is needed for the connection; Google states that EU IP addresses are deleted before subsequent storage. We do not send names, email addresses, phone numbers or contact form messages to Analytics. Our integration excludes query parameters and URL fragments from the page address sent.
The legal bases are Article 6(1)(a) GDPR and Section 25(1) German TDDDG, where applicable. Without consent, the Google tag is not loaded and our integration sends no cookieless analytics signals to Google. Advertising features, Google signals and personalised advertising are disabled for this integration.
The necessary cookie kcm_analytics_consent stores your choice, version and date for up to 180 days to implement and document your privacy choice. The legal bases are Article 6(1)(c) together with Article 7(1) GDPR, and Section 25(2)(2) TDDDG, where applicable. Following consent, _ga and _ga_* analytics cookies may be set. We limit their lifetime to 60 days. Analytics user and event data are retained for two months; aggregated standard reports may remain available longer.
You can change or withdraw consent at any time through “Privacy settings” in the footer of every page by choosing “Necessary only”. Further measurement then stops and accessible Analytics cookies for this website are deleted. Withdrawal does not affect the lawfulness of earlier processing.
Google may process data in the USA and elsewhere. Google describes EU-US Data Privacy Framework certification and standard contractual clauses as international transfer safeguards. See Google data processing terms, the Google privacy policy and Google Analytics privacy information.
Images and typography are served locally. We do not embed maps, social feeds, video players or AI chatbots. External sites open only when you click a link; their providers are responsible for processing on those sites.
9. Your data protection rights
Where the GDPR applies, and subject to legal conditions, you have rights to access (Article 15), rectification (16), erasure (17), restriction (18) and portability (20). You may withdraw consent at any time for the future; prior processing remains lawful.
Objection: You may object to Article 6(1)(f) processing under Article 21 GDPR for reasons relating to your situation. You may object to direct marketing at any time.
Contact us using Section 1's details. You may also complain to a competent supervisory authority, particularly where you live, work or suspect an infringement. The BfDI directory of state supervisory authorities helps you choose. Additional mandatory rights under applicable UAE law remain unaffected.
10. Providing data and automated decisions
No contact details are needed just to visit. To answer or advise you, we need the relevant information; without enough details we may be unable to respond. Visiting alone creates no additional obligation to provide data.
This site does not use automated decision-making or profiling with legal or similarly significant effects under Article 22 GDPR.