Privacy
Last updated November 2026
This notice explains what personal data is processed when you visit this website, write to us or work with us, and what rights you have under the General Data Protection Regulation (GDPR).
Who is responsible
Eduard Kostadinov
trading as Vadum Advisory
Neue Mainzer Straße 84
60311 Frankfurt am Main
Germany
[email protected]
Visiting this website
This website is hosted by Cloudflare, Inc., San Francisco, USA. When you open a page, your browser sends technical data to the host, including your IP address, the date and time of the request, the page requested, and your browser and operating system. This data is needed to deliver the website and keep it secure, and is processed on the basis of our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR). Cloudflare processes it on our behalf and keeps it for a limited period. Transfers to the United States rely on the EU–U.S. Data Privacy Framework, with which Cloudflare complies.
This website sets no cookies and uses no analytics, tracking or advertising tools. Fonts are delivered with the website itself; no request is made to third-party font services.
Writing to us
If you email us, we process your address, the content of your message and any details you include, to answer you and, where it applies, to prepare or perform an engagement (Art. 6(1)(b) and (f) GDPR). Email is provided by Microsoft 365 under a data processing agreement. Microsoft may also process email data in the United States; such transfers rely on the EU–U.S. Data Privacy Framework, in which Microsoft takes part. We keep correspondence for as long as it is needed for the enquiry and for any statutory retention period.
Clients and business contacts
When we prepare or carry out an engagement, or stay in touch with business contacts, we process names, business contact details, roles and correspondence. We receive this data from the person concerned, from their employer or our client, or from public sources (Art. 6(1)(b) and (f) GDPR). We keep it for as long as the engagement or business relationship requires and for any statutory retention period.
Video calls
If we hold a video call with you, we use Microsoft Teams or Zoom. We process your name, email address and the audio, video and chat content of the call, to hold the meeting (Art. 6(1)(b) and (f) GDPR). Calls are not recorded. Microsoft and Zoom process this data on our behalf and may transfer it to the United States; such transfers rely on the EU–U.S. Data Privacy Framework, in which both take part. If you join a call hosted by your own organisation, its privacy terms apply.
Recipients
Where needed, data is shared with our tax adviser and legal counsel, and with our office provider, which handles our post.
Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest (Art. 15 to 21 GDPR). To exercise them, write to [email protected].
You may also complain to a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (datenschutz.hessen.de).
Automated decisions
We do not use automated decision-making or profiling.
No obligation
You are not obliged to provide personal data. Without the technical data described above, the website cannot be displayed.
