Legal notice &
Privacy
Legal
Legal notice
Information pursuant to § 5 DDG (German Digital Services Act)
by fair means GbR
Stephanie Hobmeier and Maximilian Hänisch
Bruderhausstraße 3a
83646 Bad Tölz
Represented by
The partners Stephanie Hobmeier and Maximilian Hänisch
Office
Jungmayrplatz 11
83646 Bad Tölz
On-site meetings by appointment
Contact
Phone: +49 176 72 98 90 62
Email: info@byfairmeans.net
VAT ID
DE357492399
pursuant to § 27a UStG (German VAT Act)
Responsible pursuant to § 18 (2) MStV (German Interstate Media Treaty)
Maximilian Hänisch, Bruderhausstraße 3a, 83646 Bad Tölz
Legal
Notes
Consumer dispute resolution
We are neither willing nor obliged to take part in dispute resolution proceedings before a consumer arbitration board.
Liability for content
We create the content of this website with care. However, we cannot guarantee that it is correct, complete and up to date. As a service provider we are responsible for our own content under general law pursuant to § 7 (1) DDG. Under §§ 8 to 10 DDG, however, we are not obliged to monitor third-party information transmitted or stored, or to investigate circumstances that indicate illegal activity. As soon as we become aware of a specific legal violation, we will remove the content in question immediately.
Liability for links
This website contains links to external third-party websites over whose content we have no influence. The respective provider or operator is always responsible for this content. No legal violations were apparent at the time of linking. If we become aware of any legal violations, we will remove the links in question immediately.
Copyright
The content and works on this website are subject to German copyright law. Reproduction, editing, distribution and any kind of use beyond the limits of copyright law require our written consent or that of the respective author. Third-party content is marked as such. Should you nevertheless become aware of a copyright infringement, please let us know.
Image credits
Photos: Tom Schäfer and by fair means. Project images: by fair means or the respective clients.
Legal
Privacy policy
Last updated: October 2026. This is an English translation for your convenience; the German version is legally binding.
Thank you for visiting. Below we explain which personal data we process on this website, for what purpose and on what legal basis.
1. Controller
by fair means GbR, Stephanie Hobmeier and Maximilian Hänisch
Bruderhausstraße 3a, 83646 Bad Tölz
Phone: +49 176 72 98 90 62
Email: info@byfairmeans.net
We are not required to appoint a data protection officer under § 38 BDSG (German Federal Data Protection Act). If you have any questions about data protection, you can reach us using the contact details above.
2. Your rights
You have the right at any time to
- access the data we hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on our legitimate interest (Art. 21 GDPR),
- withdraw consent with effect for the future (Art. 7 (3) GDPR).
An informal message to the contact details above is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, www.lda.bayern.de.
3. Hosting and server log files
This website is hosted by Hostinger operations, UAB, Švitrigailos str. 34, 03230 Vilnius, Lithuania. When you visit the website, the server automatically stores information transmitted by your browser (server log files): IP address, date and time of access, page visited, amount of data transferred, referrer URL, browser and operating system.
This data is technically necessary to deliver the website and ensure its security. The legal basis is Art. 6 (1) (f) GDPR. The log files are only stored for as long as necessary for the secure operation of the website and are then deleted automatically. They are not combined with other data sources. We have a data processing agreement with the host pursuant to Art. 28 GDPR.
Data transmitted between your browser and our server is encrypted via SSL/TLS.
4. Cookies and consent
We use technically necessary cookies that are required to operate the website (§ 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR). We only use all other cookies and similar technologies, in particular for audience measurement, with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).
We obtain your consent via the consent tool Real Cookie Banner (devowl.io GmbH). The tool runs on our own server; no data is transmitted to the manufacturer. We store your choice in a cookie so that we can take it into account on your next visit. To document your consent (Art. 7 (1) GDPR), we record it in our database with a random identifier; we do not store your IP address. The legal basis for this is Art. 6 (1) (c) GDPR. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.
5. Audience measurement with Google Analytics
With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how visitors use our website, for example which pages are viewed and for how long. For this purpose cookies are set and usage data such as pages viewed, time spent, device type, browser and approximate location are processed. Google Analytics 4 does not store IP addresses.
The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Data may also be transferred to servers of Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework; this means an adequacy decision of the EU Commission applies (Art. 45 GDPR). The data is deleted after 14 months. We have a data processing agreement with Google.
You can withdraw your consent at any time via the cookie settings. Further information: policies.google.com/privacy
6. Newsletter with Mailchimp
If you subscribe to our newsletter, we process your email address and, if provided, your name in order to send you the newsletter. Registration uses the double opt-in procedure: after signing up you receive an email with a confirmation link. You are only subscribed once you confirm. We store the time and IP address of registration and confirmation in order to be able to prove consent.
To send the newsletter we use Mailchimp, a service of The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Your data is processed in the USA. Mailchimp is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); EU standard contractual clauses also apply. We have a data processing agreement with Mailchimp.
Our newsletters contain tracking pixels and tracked links. This lets us see whether a newsletter was opened and which links were clicked. This analysis is part of your consent to receive the newsletter.
The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe from the newsletter at any time, for example via the link at the end of every email. After you unsubscribe, we delete your data or block it insofar as we need to prove the unsubscription.
7. Appointment booking via Notion Calendar
For intro calls we use the appointment booking of Notion Calendar. When you click “Book a call”, you are taken to a page of Notion Labs, Inc., 685 Market St., San Francisco, CA 94105, USA. There you enter your name, email address and preferred time, and optionally a message. We use this data to plan and hold the conversation.
The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures). The data is processed in the USA. The transfer is based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) or EU standard contractual clauses. Further information: notion.com/trust/privacy-policy
8. Video calls with Google Meet
We hold intro calls and Compass Sessions online via Google Meet, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your name, email address, image and audio data during the call and technical connection data are processed. The legal basis is Art. 6 (1) (b) GDPR.
Only if you agree beforehand do we have the conversation transcribed and summarised with the note-taking feature of Notion (Notion Labs, Inc., see section 7). In that case the legal basis is your consent (Art. 6 (1) (a) GDPR). We delete the raw transcript no later than 90 days after the summary is created. Any transfer to the USA is based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR).
9. Contact via form, email or phone
If you contact us by email or phone, we process your details in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or its initiation, otherwise Art. 6 (1) (f) GDPR. Our email inbox is operated by Hostinger operations, UAB (see section 3). We delete your data as soon as it is no longer needed, unless statutory retention obligations apply.
Contact form. If you use our contact form, we process the details you provide there: name, email address, optionally your organisation, your topic and your message. Mandatory fields are marked. The form runs on the WordPress plugin Fluent Forms. Your enquiry is stored in our website’s database at Hostinger (see section 3) and also forwarded to us by email. We do not store your IP address. To protect against spam, the form uses an invisible check field (honeypot); no cookies are set for this and no data is transmitted to third parties. As above, the legal basis is Art. 6 (1) (b) or (f) GDPR. We delete stored enquiries as soon as your request has been fully dealt with and no retention obligations apply.
10. Social networks and YouTube videos
On our website we link to our profiles on Instagram and LinkedIn. These are simple links, not embedded plugins. Only when you click a link are you taken to the respective provider’s site, where its privacy policy applies.
YouTube videos. In some project descriptions we embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded once you agree – either in the cookie banner or directly via the button on the video. Only then is a connection to YouTube servers established; among other things your IP address and information about your browser are transmitted, and YouTube may set cookies. Data may also be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), which you can withdraw at any time via the cookie settings. Further information: policies.google.com/privacy
11. Fonts
The fonts used on this website are hosted locally on our server. No connection to third-party servers is established when you visit the site.
12. Storage period
Unless a specific storage period is stated in this policy, we only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods, for example for tax-relevant documents under § 147 AO and § 257 HGB.
Positioning, communication strategy and design
Office:
Jungmayrplatz 11
83646 Bad Tölz
+49 176 72 98 90 62
info@byfairmeans.net
Newsletter – every now and then, never too often.
© 2026 by fair means GbR