Privacy Policy

Last updated: 10 October 2026


1. Controller

The controller responsible for the processing of personal data described in this Privacy Policy is:

- dk Consulting GmbH operating under the brand anchorcurve
- Address: Diehlgasse 47/25, 1050 Vienna, Austria
- Company register number: FN 676885w
- Company register court: Handelsgericht Wien
- VAT identification number: ATU83232618
- Email: office@anchorcurve.com

2. Scope of this Privacy Policy

This Privacy Policy explains how dk Consulting GmbH, operating under the brand anchorcurve (“anchorcurve”, “we”, “us” or “our”), collects, uses, stores and otherwise processes personal data in connection with:

- visits to anchorcurve.com
- enquiries submitted through our website
- communications with us
- appointment scheduling
- downloads and other resources
- participation in surveys or similar activities
- business development and internal analysis
- marketing communications where applicable
- and other interactions with our website and services

Separate privacy information may apply to specific services or platforms where this is indicated.

3. Categories of Personal Data We Process

Depending on how you interact with us, we may process the following categories of personal data.

Website and Technical Data: When you visit anchorcurve.com, technical information may be processed automatically.

This may include:

- IP address
- date and time of access
- requested pages and files
- referring website or URL
- browser type and version
- operating system
- device information
- language settings
- technical identifiers
- and server, security or diagnostic information

Contact and Enquiry Data: When you submit a contact form or otherwise contact us, we may process information including:
‍
- first name
- last name
- work email address
- job title
- LinkedIn profile, where voluntarily provided
- telephone number, where voluntarily provided
- company name
- company website, where voluntarily provided
- the service or topic in which you are interested
- the content of your message
- and any other information you voluntarily provide

Company and Professional Information: Information submitted in connection with an enquiry, appointment, survey or business relationship may include

- employer or organisation
- industry
- company size
- business function
- professional role
- AI-related objectives
- challenges and areas of interest
- organisational requirements
- and other business-related information.

Appointment Data: Where you schedule an appointment with us, we may process:

- name
- email address
- job title
- company or organisation
- reason for your enquiry
- preferred communication language
- appointment date and time
- and subsequent communication relating to the appointment

Communication Data: Where you communicate with us by email or other channels, we may process:

- your contact details
- message content
- attachments
- correspondence history
- and information necessary to respond to or manage the communication

Marketing and Preference Data: Where you subscribe to marketing communications or otherwise provide valid marketing consent, we may process:

- name
- email address
- company information
- communication preferences
- consent records
- subscription status
- and information necessary to manage your communication preferences

4. Purposes and Legal Bases for Processing

Where the General Data Protection Regulation (“GDPR”) applies, we process personal data on one or more of the following legal bases.

Operation, Security and Maintenance of the Website: We process technical data where necessary to operate, maintain and secure anchorcurve.com, detect misuse, prevent fraud, troubleshoot technical problems and protect our systems.

Legal basis: Article 6(1)(f) GDPR – our legitimate interest in providing and maintaining a secure and functional website.

Responding to Enquiries: Where you submit a contact form or contact us regarding our services, we process your information to understand and respond to your request, communicate with you and, where applicable, discuss a potential engagement.

Legal basis: Article 6(1)(b) GDPR where the processing relates to steps taken at your request before entering into a contract.

Where Article 6(1)(b) GDPR does not apply, processing may be based on Article 6(1)(f) GDPR – our legitimate interest in managing business communications and responding to enquiries.

Lead and Business Relationship Management: We may use information submitted through our website or communications to manage prospective business relationships, understand the organisation making the enquiry, determine the relevance of our services and maintain appropriate records of our communications.

Legal basis: Article 6(1)(f) GDPR – our legitimate interest in operating and developing our business and managing prospective client relationships.

Internal Analysis and Improvement of Our Services:We may analyse information received through enquiries, forms, appointments and other interactions to:

- understand the types of organisations that engage with anchorcurve
- identify recurring AI-related challenges and needs
- understand demand for particular services
- analyse industries, roles and customer segments
- improve existing services
- develop new services, products and educational content
- improve website content
- and support our overall business and market analysis.

Where possible and appropriate, we use aggregated or anonymised information for such analysis.

Legal basis: Article 6(1)(f) GDPR – our legitimate interests in understanding our market, improving our services, developing relevant offerings and operating our business effectively.

We do not use this processing to make decisions producing legal or similarly significant effects about individuals.

Publication of Aggregated Insights: We may use aggregated or anonymised information derived from enquiries, surveys, research or similar activities to create statistics, analyses, reports, articles or other professional content.

For example, we may publish aggregated observations regarding AI adoption, organisational challenges or market trends.

We do not intend to identify individual respondents or disclose the identity of a company through such publications unless separate permission has been obtained.

Information that has been genuinely anonymised so that individuals can no longer reasonably be identified is no longer treated as personal data under this Privacy Policy.

Appointment Scheduling: We process appointment and contact information where necessary to allow you to book, manage and attend meetings with us.

Legal basis: Article 6(1)(b) GDPR where the appointment relates to steps taken at your request before entering into a contract.

Otherwise: Article 6(1)(f) GDPR – our legitimate interest in organising business meetings and communications.

Client and Contractual Relationships: If an enquiry results in a professional engagement, we process information necessary to establish, manage and perform that engagement.

Legal basis: Article 6(1)(b) GDPR.

Where processing is required to comply with tax, accounting, corporate or other legal requirements: Legal basis: Article 6(1)(c) GDPR.

Marketing Communications: We may send newsletters, insights, updates or other electronic marketing communications where we have obtained the required consent or another applicable legal basis permits the communication.

Where processing is based on consent: Legal basis: Article 6(1)(a) GDPR.

Consent may be withdrawn at any time.

Submitting a general contact form does not by itself constitute consent to receive an ongoing marketing newsletter.

Website Analytics: We use Cloudflare Web Analytics to obtain aggregated statistics about the use of anchorcurve.com, such as page views, referring websites, countries and device types. Cloudflare Web Analytics does not use cookies, does not store or read information on your device and does not create individual user profiles. Further details are provided in Section 11.

Legal basis: Article 6(1)(f) GDPR – our legitimate interest in understanding the use of our website in aggregated form and improving its content.

Protection Against Spam and Misuse: We use Cloudflare Turnstile to protect our contact form against spam and automated misuse.

Legal basis: Article 6(1)(f) GDPR – our legitimate interest in protecting our website and forms against misuse.

Technologies Requiring Consent: We do not currently use technologies that require your consent, such as advertising cookies, marketing pixels or embedded external media. Should we introduce such technologies in the future, they will only be activated after you have given your consent (Article 6(1)(a) GDPR), and we will update this Privacy Policy accordingly.

5. Webflow and Website Hosting

We use Webflow to design, host and operate anchorcurve.com. In connection with the operation of the website, Webflow may process technical and website-related information necessary to provide its services. Where you submit a Webflow form, the information entered into that form is transmitted to and stored by Webflow. Webflow therefore processes personal data on our behalf in connection with website hosting and form functionality. Webflow may engage subprocessors in providing its services. Where personal data is transferred internationally, applicable transfer safeguards are used as required by data-protection law.

Depending on the relevant processing, these may include participation in the EU-U.S. Data Privacy Framework and European Commission Standard Contractual Clauses.

Webflow delivers website files such as images, style sheets, scripts and fonts through content delivery networks, including Amazon CloudFront (Amazon Web Services) as a subprocessor of Webflow. When you visit our website, your browser connects to these servers, which process your IP address in order to deliver the content. The fonts used on our website are hosted within our Webflow environment. No connection to Google Fonts servers is established.

6. Webflow Forms

We use Webflow Forms to receive enquiries and other information submitted through anchorcurve.com.

Our current contact form may request:

- first name
- last name
- work email address
- job title
- LinkedIn profile, optionally
- telephone number, optionally
- company name
- company website, optionally
- services or topics of interest
- and a free-text message

Webflow stores form submissions within our Webflow environment.

We also receive email notifications relating to submitted forms.We use form information to:

- respond to enquiries
- understand prospective clients and their needs
- assess how we may be able to assist
- conduct internal business analysis
- improve our services and offerings
- and maintain appropriate business records

We do not sell submitted form information. We may share access to personal data with service providers processing the information on our behalf where this is necessary to operate our website and business.

7. Microsoft 365, Outlook, SharePoint, OneDrive and Excel

We use Microsoft 365 for business communications, document management, data storage and internal business administration.

Personal data submitted to us or generated through communications may therefore be processed through Microsoft services including, where applicable:

- Outlook
- Exchange Online
- SharePoint
- OneDrive
- Excel
- Microsoft Bookings
- and other Microsoft 365 functionality

For example, information submitted through Webflow Forms may be received by email through Microsoft 365 and relevant business information may subsequently be stored in Excel files, SharePoint or OneDrive for internal lead management, analysis or business administration. Access to this information is restricted according to our internal access arrangements and business needs.Microsoft provides data-protection and international-transfer mechanisms for its enterprise cloud services.

8. Appointment Scheduling / Microsoft Bookings

Our website contains a “Book a Call” button that links to our booking page on Microsoft Bookings. The booking page is not embedded in our website. No connection to Microsoft is established and no data is transmitted to Microsoft until you actively click the button. After clicking, you are redirected to a page operated by Microsoft, where Microsoft’s privacy terms additionally apply. When you book an appointment, the information you submit may include your name, email address, job title, company, the reason for your enquiry, your preferred communication language and the requested date and time.

Microsoft Bookings stores booking information within the Microsoft 365 environment, including Exchange Online. We use this information only as necessary to arrange, manage and follow up on the relevant appointment and, where appropriate, to manage the resulting prospective or existing business relationship.

9. Internal Business Analysis

We maintain internal business records using tools such as Microsoft Excel, SharePoint and other Microsoft 365 services. Information from enquiries and interactions may be organised and analysed for purposes such as:
‍
- lead management
- demand analysis
- market analysis
- service development
- assessment of recurring client needs
- evaluation of industries and organisational functions engaging with anchorcurve
- and improvement of our content and offerings.

Where identifiable information is not necessary for an analysis, we seek to use aggregated, pseudonymised or anonymised information where reasonably practicable. We do not sell these internal datasets.

10. YouTube

We may provide links to videos hosted on YouTube or embed YouTube videos directly into anchorcurve.com. YouTube is a service provided by Google.

Links to YouTube: Where our website contains an ordinary link to YouTube, merely displaying that link does not by itself require us to transmit your form or contact information to YouTube. If you follow the link, you leave anchorcurve.com and your interaction with YouTube is subject to Google’s applicable privacy terms.

Embedded YouTube Content: Where YouTube videos are embedded directly into anchorcurve.com, we aim to use privacy-enhancing configurations where technically available and to treat embedded YouTube content as optional external media where consent is required. Where consent is required, the embedded content will not be activated until you choose to load or consent to the relevant external media. After activation, a connection to YouTube/Google may be established and information such as IP address, browser or device information and interactions with the video may be processed by Google. Google may process such information for its own purposes in accordance with its privacy terms.

11. Cloudflare (Web Analytics and Turnstile)

We use services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”).

Cloudflare Web Analytics: A script loaded from Cloudflare's servers records aggregated information about website usage, such as the page visited, the referring website, browser, operating system and device type, screen size, country and page load time. Your IP address is processed only to deliver the script and to derive your country. According to Cloudflare, it is not used to track you, and no cookies, local storage or fingerprinting are used. We only see aggregated statistics, not data about individual visitors.

Cloudflare Turnstile: On our contact page, Cloudflare Turnstile checks whether a form is submitted by a human or an automated program. For this purpose, technical information such as your IP address and browser and device characteristics is processed by Cloudflare.

Legal basis: Article 6(1)(f) GDPR – our legitimate interests in aggregated website analytics and protection against misuse. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Where applicable, European Commission Standard Contractual Clauses are used as an additional safeguard.

12. Cookies and Similar Technologies

anchorcurve.com does not currently use cookies or similar technologies that store or read information on your device, neither for analytics nor for marketing purposes. For this reason, our website does not display a cookie banner. Should we introduce technologies that require your consent in the future, we will ask for your consent before they are activated and will update this Privacy Policy accordingly.

13. Service Providers and Recipients

We may disclose or make personal data accessible to service providers where necessary to operate our website, systems and business. Depending on the relevant processing, these recipients may include:

- Webflow, for website hosting and form processing
- Microsoft and Microsoft 365 services, for email, storage, collaboration and appointment scheduling
- Cloudflare, for website analytics and spam protection
- Google/YouTube, where external YouTube content is activated or used
- IT, hosting, security and infrastructure providers
- professional advisers including accountants, tax advisers and legal advisers
- and public authorities where disclosure is required by law

Service providers processing personal data on our behalf are required to process that information in accordance with applicable contractual and data-protection requirements. We do not sell contact-form or client information to third parties.

14. International Data Transfers

Some service providers used by anchorcurve are established in or may process information in countries outside Austria or the European Economic Area (“EEA”). Where personal data is transferred outside the EEA and applicable law requires safeguards, we rely on an appropriate transfer mechanism. Depending on the relevant provider and processing activity, these mechanisms may include:

- an adequacy decision adopted by the European Commission
- participation by the recipient in the EU-U.S. Data Privacy Framework
- European Commission Standard Contractual Clauses
- or another lawful transfer mechanism

Where required, additional safeguards may be applied.

15. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy and to comply with applicable legal obligations.

Enquiries and Prospective Clients: Where an enquiry does not result in a client relationship, we generally retain identifiable enquiry and lead information for up to 24 months after the last substantive interaction, unless a longer period is justified by ongoing discussions, a legal requirement or the establishment, exercise or defence of legal claims.

Webflow Form Submissions:We generally retain form submissions for up to 24 months after the last relevant interaction unless the information has become part of an ongoing client relationship or another legal basis justifies longer retention.

Appointment Information: Appointment and related prospective-client information is generally retained for up to 24 months after the relevant interaction unless an ongoing business relationship develops or longer retention is otherwise necessary.

Client and Contract Information: Where a professional relationship is established, relevant records are retained for the duration of the relationship and thereafter for as long as necessary to comply with contractual, tax, accounting and legal obligations and to establish, exercise or defend legal claims.

Accounting and Tax Records: Documents subject to Austrian statutory accounting or tax retention requirements are generally retained for at least seven years, and longer where legally required.

Marketing Information: Marketing contact information is retained until consent is withdrawn, the subscription is terminated or another applicable reason requires us to stop processing it.

We may retain limited evidence of consent or withdrawal where necessary to demonstrate compliance with applicable law.

Internal Analysis: Identifiable information used for internal analysis is retained only while identification remains reasonably necessary for the relevant business purpose. Where information is subsequently anonymised so that individuals can no longer reasonably be identified, anonymised statistical information may be retained for longer periods.

16. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures are selected taking into account the nature of the data, the processing activities and the risks associated with the processing. No method of internet transmission or electronic storage can guarantee absolute security.

17. Your Rights under the GDPR

Where the GDPR applies and subject to the applicable statutory requirements and exceptions, you may have the right to:
‍
- obtain information regarding the processing of your personal data
- obtain access to your personal data
- request correction of inaccurate or incomplete personal data
- request deletion of personal data
- request restriction of processing
- object to processing based on legitimate interests
- receive certain personal data in a portable format
- withdraw consent at any time where processing is based on consent
- and lodge a complaint with a competent supervisory authority

Where you object to processing based on our legitimate interests, we will assess the objection in accordance with applicable law. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. Requests regarding your personal data may be submitted to: office@anchorcurve.com

18. Austrian Data Protection Authority

You have the right to lodge a complaint with a competent data-protection supervisory authority. The Austrian supervisory authority is: Österreichische Datenschutzbehörde Barichgasse 40–42 1030 Vienna Austria. Email: dsb@dsb.gv.at

19. Automated Decision-Making and Profiling

We do not currently use personal data collected through anchorcurve.com to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning individuals. We may use information internally to organise and understand enquiries, but final business decisions are not made solely through automated decision-making based on website submissions.

20. Electronic Marketing

Submitting an enquiry or booking an appointment allows us to communicate with you in relation to that enquiry, appointment or prospective business relationship. It does not automatically subscribe you to a general marketing newsletter.Where consent is required for electronic marketing, we will request such consent separately. Marketing consent is voluntary and may be withdrawn at any time. Where applicable law permits electronic marketing without separate consent in specific circumstances, we may rely on such provisions only within the limits permitted by law.

21. Children

anchorcurve.com and our professional services are intended primarily for adults and business users. We do not knowingly collect personal data from children through our general website. Paid services and products are intended for persons aged 18 or older unless expressly stated otherwise. If we become aware that personal data from a child has been collected in circumstances where it should not have been collected, we will take appropriate steps to delete it.

22. United States Privacy Information

If you are located in the United States, applicable state privacy laws may provide additional rights depending on your state of residence and whether the relevant law applies to dk Consulting GmbH. Depending on applicable law, such rights may include the right to:

- confirm whether we process personal information
- request access to personal information
- correct inaccurate personal information
- request deletion
- obtain a portable copy of certain information
- opt out of certain sales of personal information
- opt out of certain sharing or targeted advertising
- opt out of certain profiling
- and appeal certain decisions concerning privacy requests

These rights differ by state and may be subject to statutory thresholds, limitations and exceptions. Requests may be submitted to: office@anchorcurve.com. We may take reasonable steps to verify your identity before processing a request. Where applicable law allows an authorised agent to submit a request on your behalf, we may request evidence of that authorisation.

23. California Privacy Information

This section supplements the remainder of this Privacy Policy for California residents.

Categories of Personal Information: Depending on your interaction with us, the categories of personal information we may collect include:

- identifiers, including name, email address, telephone number and IP address
- professional or employment-related information, including employer, job title and business function
- internet or electronic activity information, including website and device information
- commercial or business relationship information
- correspondence and information submitted through website forms
- and other information you choose to provide

Sources: We collect personal information:

- directly from you
- automatically through your interaction with our website
- through communications and appointments
- and from service providers used to operate our website and business

Purposes: We use personal information for the purposes described throughout this Privacy Policy, including:

- operating and securing our website
- responding to enquiries
- managing prospective and existing business relationships
- scheduling appointments
- internal analysis
- improving our services and content
- complying with legal obligations
- and, where legally permitted, marketing and communications

Disclosure to Service Providers: We may disclose personal information to service providers used to operate our website, communications, storage and business systems. We do not currently sell personal information for monetary consideration. We do not currently operate a business model based on selling personal information. Do Not Track and Similar Signals. Some browsers provide a legacy “Do Not Track” (“DNT”) signal. Because there is no universally accepted standard for interpreting legacy DNT signals, anchorcurve.com does not currently alter its general website operation solely in response to a legacy DNT signal. Where applicable privacy law requires us to recognise a legally qualifying universal opt-out preference signal for processing that we conduct, we will implement and honour such requirements as applicable.

Non-Discrimination: Where applicable law grants you privacy rights, we will not unlawfully discriminate against you for exercising those rights.

24. Third-Party Websites

anchorcurve.com may contain links to third-party websites, platforms or services. Once you leave anchorcurve.com or independently interact with a third-party service, the processing of personal data by that third party is subject to its own privacy policy and terms. We are not responsible for the independent privacy practices of third-party websites or services.

25. Changes to this Privacy Policy

We may update this Privacy Policy to reflect:

- changes to our website
- new services or functionality
- changes to the technologies we use
- changes to our processing activities
- changes to applicable legal requirements
- or changes to our business operations

Material changes will be reflected by updating the “Last updated” date above and, where required, by providing additional notice or obtaining new consent.

26. Contact

For questions regarding this Privacy Policy or our processing of personal data, or to exercise applicable privacy rights, please contact:

- dk Consulting GmbH, Diehlgasse 47/25, 1050 Vienna, Austria
- Email: office@anchorcurve.com