Imprint & Data Privacy


Information pursuant to § 5 DDG (Digitale-Dienste-Gesetz)

Mark Lambertz
Augustastr. 36
40477 Düsseldorf
Germany

Contact

Email: mark@marklambertz.de

Responsible for Editorial Content pursuant to § 18 (2) MStV (Medienstaatsvertrag)

Mark Lambertz
Augustastr. 36
40477 Düsseldorf
Germany

Copyright

Unless otherwise indicated, the texts, illustrations and other original content published on this website are protected by copyright.

The rights of third-party authors and creators remain unaffected.

For questions concerning the use or reproduction of content, please contact mark@marklambertz.de.

Privacy Policy

Intelligent Organisations
https://intelligente-organisationen.de

Last updated: 18 October 2026

1. Data Controller

The person responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR / DSGVO) is:

Mark Lambertz
Augustastr. 36
40477 Düsseldorf
Germany

Email: mark@marklambertz.de

This Privacy Policy explains how personal data is collected, used and protected when you visit this website, interact with its content, submit comments or contact me.

2. General Principles of Data Processing

This website provides information, articles, resources and practical insights relating to organisational design, the Viable System Model, systems thinking and management.

I process personal data only where necessary to operate and maintain the website, communicate with visitors, provide interactive functions, protect against misuse or deliver external content requested by visitors.

Depending on the purpose, processing is based on:

  • Article 6(1)(a) GDPR: Consent.
  • Article 6(1)(b) GDPR: Contractual or pre-contractual measures.
  • Article 6(1)(c) GDPR: Compliance with legal obligations.
  • Article 6(1)(f) GDPR: Legitimate interests.

Where processing is based on legitimate interests, these primarily concern the secure and reliable operation of the website, the prevention of spam and abuse, communication with visitors and the provision of accessible content.

Personal data is retained only for as long as necessary for the respective purpose or required by applicable law.

3. Website Hosting and Server Logs

This website is hosted by IONOS SE, Germany.

When you access the website, technical information is transmitted to the hosting infrastructure to deliver the requested content and ensure secure operation.

According to IONOS, information processed in connection with its standard Webhosting service includes:

  • Referrer information (previously visited website).
  • Requested pages and files.
  • Browser type and version.
  • Operating system.
  • Device type.
  • Date and time of access.
  • IP address information, anonymised during collection according to IONOS.

IONOS states that visitor data associated with its standard Webhosting service is retained for eight weeks.

Processing is based on Article 6(1)(f) GDPR. My legitimate interest is providing a secure, stable and technically reliable website.

Further information: www.ionos.de/datenschutzerklaerung

4. IONOS WebAnalytics

The hosting infrastructure includes IONOS WebAnalytics, which provides statistical information about website traffic.

According to IONOS, WebAnalytics uses server log files or a tracking pixel and does not use cookies.

Information processed for statistical purposes may include requested pages, access times, browser and device information, referrer information and anonymised IP address information.

IONOS states that IP addresses transmitted during page requests are immediately anonymised before further statistical processing.

The information is used to evaluate general website usage and improve the technical performance and accessibility of the website.

Processing is based on Article 6(1)(f) GDPR, reflecting my legitimate interest in understanding the general usage of the website and maintaining an efficient online presence.

Further information: www.ionos.de/hilfe/datenschutz

5. Contact by Email

If you contact me by email, I process the personal data you voluntarily provide, including your email address, name and message content, to respond to your enquiry.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns contractual or pre-contractual matters, or Article 6(1)(f) GDPR for other correspondence.

The information is retained only for as long as necessary to handle the enquiry, unless statutory retention obligations or overriding legitimate interests require longer storage.

Contact details provided through ordinary enquiries are not used for unsolicited marketing.

6. Comments on Blog Articles

Visitors may submit comments on selected articles.

When you submit a comment, WordPress processes information entered into the comment form, including your name, email address, optional website address and comment content.

WordPress may additionally process technical information such as your IP address and browser user-agent information to support comment moderation, security and spam detection.

Approved comments and the associated public display name may be visible to other visitors. Your email address is not displayed publicly.

Processing is based on Article 6(1)(f) GDPR. My legitimate interest is enabling constructive discussion while protecting the website from spam and misuse.

Comments and associated information may be retained for as long as necessary for the discussion, moderation and documentation purposes, subject to applicable deletion rights.

If you choose the option to remember your name, email address and website in your browser, WordPress may store optional convenience cookies for approximately one year.

7. Spam Protection with Akismet

This website uses Akismet Anti-spam, a service provided by Automattic, to identify and prevent spam in submitted comments.

To evaluate whether a comment constitutes spam, Akismet may receive information including:

  • Comment content.
  • Submitted name and email address.
  • IP address.
  • Browser user-agent information.
  • Referrer information.
  • Website information.

The legal basis is Article 6(1)(f) GDPR. My legitimate interest is protecting the comment function from automated spam, abuse and malicious activity.

Automattic operates internationally, and processing may involve transfers of personal data outside the European Economic Area. Such transfers are subject to the applicable requirements of Chapter V GDPR.

Further information: https://automattic.com/privacy-notice/

8. Image Optimisation and ShortPixel CDN

This website uses Autoptimize together with ShortPixel image optimisation and content delivery services.

These technologies help deliver images efficiently, reduce file sizes, improve loading times and enhance the performance of the website.

Certain images are delivered through ShortPixel’s content delivery network (CDN), including resources hosted on sp-ao.shortpixel.ai.

When your browser requests an image from the CDN, technical connection information may be transmitted to ShortPixel or its infrastructure providers. This may include your IP address, browser information, requested resources and technical connection data.

The purpose of this processing is to provide images efficiently and reliably.

Processing is based on Article 6(1)(f) GDPR, reflecting my legitimate interest in maintaining a technically efficient and accessible website.

Depending on the infrastructure used by ShortPixel, data processing may involve locations outside the European Economic Area. Applicable international data transfer safeguards must be observed.

Further information: shortpixel.com/privacy

9. Embedded YouTube Videos

Some articles contain videos embedded from YouTube, a service operated by Google.

Embedded videos are integrated using a consent-based loading mechanism. Before you choose to load a video, the external YouTube player remains inactive.

If you consent to loading an embedded video, your browser establishes a connection to Google’s servers.

During this process, technical information, including your IP address, browser information and information about the requested content, may be transmitted to Google.

Google may also use cookies or comparable technologies and process information about your interaction with the embedded video.

The legal basis for consent-dependent processing is Article 6(1)(a) GDPR and, where applicable, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

You can withdraw your consent at any time through the website’s consent management settings.

Google may process data outside the European Economic Area in accordance with its applicable data protection arrangements.

Further information: policies.google.com/privacy

10. Cookies and Consent Management

This website uses WordPress and may employ cookies or comparable technologies that are necessary for its operation, administration, security or functions explicitly requested by visitors.

Optional technologies, including those associated with embedded third-party content, are activated only after the necessary consent has been obtained.

The website uses Complianz to manage consent preferences.

Complianz enables visitors to accept or reject optional services and, where applicable, stores information about their consent decisions to document and respect those preferences.

Where consent is required, the legal basis is Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Strictly necessary storage or access to information on a visitor’s device may fall within the exceptions provided by Section 25(2) TDDDG.

Visitors can change or withdraw their consent at any time using the website’s Manage Consent function.

Further details about individual cookies, services, purposes and storage periods are provided through the website’s Cookie Policy and consent management interface.

11. External Links and Third-Party Websites

This website contains links to external websites, publications, digital services and online platforms.

When you follow an external link, the destination website may process personal data under its own privacy policy.

I do not control the data processing practices of external websites and encourage visitors to review the privacy information provided by the respective operators.

If additional external services are embedded directly into articles in the future, the corresponding data protection information and consent settings will be reviewed and updated before those services are introduced.

12. Data Retention and Recipients

Personal data is retained only as long as necessary for the purposes described in this Privacy Policy or as required by applicable legal obligations.

The relevant storage period depends on the type of information and the purpose of processing.

Where external service providers process personal data on my behalf, appropriate contractual and technical safeguards must be implemented where legally required.

Personal data may be shared with hosting providers, technical service providers and anti-spam services to the extent necessary for the purposes described above.

Personal data is not sold to advertisers.

13. International Data Transfers

Some third-party services used by this website may involve the processing of personal data outside the European Economic Area.

Where personal data is transferred to countries outside the European Economic Area, the relevant requirements of Articles 44 et seq. GDPR apply.

Depending on the provider and destination, transfers may rely on an applicable adequacy decision, such as the EU-US Data Privacy Framework for appropriately certified recipients, or other appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Additional information about specific international transfers and their safeguards may be requested using the contact details provided above.

14. Your Rights Under the GDPR

Subject to the applicable statutory conditions, you have the following rights:

  • Right of access (Article 15 GDPR): You may request information about personal data processed concerning you.
  • Right to rectification (Article 16 GDPR): You may request correction of inaccurate or incomplete personal data.
  • Right to erasure (Article 17 GDPR): You may request deletion of personal data where the legal requirements are met.
  • Right to restriction of processing (Article 18 GDPR): You may request restrictions on certain processing activities.
  • Right to data portability (Article 20 GDPR): Where applicable, you may request personal data in a structured, commonly used and machine-readable format.
  • Right to object (Article 21 GDPR): You may object to processing based on legitimate interests, subject to applicable statutory conditions.
  • Right to withdraw consent (Article 7(3) GDPR): You may withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with a competent data protection supervisory authority under Article 77 GDPR.

The supervisory authority responsible for private-sector data protection in North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

www.ldi.nrw.de

For questions or requests concerning your personal data, please contact:

mark@marklambertz.de

15. Data Security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, accidental loss, alteration or disclosure.

The website uses encrypted HTTPS connections to protect the transmission of information between your browser and the website.

Nevertheless, no method of electronic communication or data storage can guarantee absolute security.

16. Updates to This Privacy Policy

This Privacy Policy may be updated when website functionality, technical infrastructure, service providers, data processing practices or applicable legal requirements change.

The current version is available on this page.

Last updated: 18 October 2026