Drummond Consulting
Privacy notice
How we handle information when you visit Drummond Consulting’s website or contact us.
Last updated: 27 October 2026
Who is responsible
Felipe Drummond, trading as Drummond Consulting, based in Portugal, is responsible for the personal data processed for operating this website and handling enquiries.
You can contact us at info@drummond-consulting.com, +49 176 871 56 942 or +351 929 456 101. Please use the same email address for privacy questions and requests.
For further business identification or invoicing information, please contact info@drummond-consulting.com.
Hosting and server logs
Our website is hosted in Germany by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes hosting data on our behalf under a data-processing agreement.
When a page is requested, technical connection and request data are processed, including the visitor’s IP address and information about the requested page, time, browser and referring page. This enables delivery of the website, troubleshooting and protection against attacks. The legal basis is our legitimate interest in operating a reliable, secure website under Article 6(1)(f) GDPR.
STRATO states that visitor IP addresses used to detect and prevent attacks are retained for no more than seven days. Downloadable access logs have anonymized client IP addresses or hostnames and are available for six weeks. Error logs are available in our account for the last five days. These are different records with different retention periods.
Administrative sign-in security
We use Limit Login Attempts Reloaded to limit repeated failed WordPress sign-in attempts. Its local security logs in this website’s WordPress installation contain IP addresses and attempted login usernames. Email alerts notify the website owner about repeated lockouts.
Jetpack remains connected to Automattic for administrative security and site management. It synchronizes relevant site content and configuration, registered-user information and login-event data. We retain access to historical Jetpack reports; collection of new visitor statistics through Jetpack is disabled.
Jetpack’s login protection processes IP addresses, attempted usernames or email addresses, and technical request information to help prevent unauthorized access. A completed login security challenge may create a cookie lasting one day. Account Protection checks for compromised passwords and may require email verification. Administrative changes and login events are recorded in its activity log.
The purpose is to protect administrative access and the website against unauthorised use. The legal basis is our legitimate interest in maintaining website security under Article 6(1)(f) GDPR. These plugin records are separate from the STRATO server logs described above.
STRATO website statistics
STRATO also provides reports derived from server access data, such as page requests, visits, requested URLs, referring pages and browser types. We use these aggregate reports to understand website usage and improve our content and the reliability of the website. STRATO makes graphical statistics available for several years; this does not mean identifiable visitor IP addresses are kept for that entire period.
Where personal data is processed for these reports, we rely on our legitimate interests in understanding aggregate use and improving this website under Article 6(1)(f) GDPR. You can object to processing based on legitimate interests as explained under “Your privacy rights”.
Email and telephone enquiries
If you contact us, we process the contact details and information you provide so that we can respond and discuss or deliver our services. You decide what to share, but we need sufficient information to answer your request. This website has no contact form.
For steps requested before a contract or for fulfilling a contract with you, the legal basis is Article 6(1)(b) GDPR. For other business correspondence, it is our legitimate interest in responding to enquiries under Article 6(1)(f). Legal recordkeeping obligations may require retention under Article 6(1)(c).
We keep correspondence for as long as necessary to handle the enquiry or manage the business relationship. We retain information beyond that only where needed to meet applicable statutory obligations or establish, exercise or defend legal claims. Email and telephone service providers process communications as needed to deliver those services.
Language preference and external links
Without an explicit language parameter in the page URL, drummond-consulting.de opens in German and drummond-consulting.com opens in English. You can select any of the four supported languages using the language selector. The selection is included in the page URL (lang=en, de, pt-BR or es-ES) and carried through internal links. An explicit language selection takes precedence over the domain default. The language selector does not create a cookie or save a preference in browser local storage.
The fonts and images used in the website’s design are served locally. The LinkedIn link opens an external website when selected. LinkedIn then processes data under its own privacy information.
No sale of data
We do not sell visitors’ personal data or website statistics to advertisers, data brokers or other third parties.
Hosting, statistics and communications involve processing by the service providers described in this notice. Providers may also process data for purposes they determine independently, as explained in their own privacy information.
Service providers
Information is handled by the service providers needed to host the website, provide the STRATO reports described above, support administration and security through Automattic’s Jetpack, and deliver email and telephone communications. Jetpack synchronizes the site, registered-user and login-event data described above to Automattic. STRATO acts as processor for the processing covered by our agreement. Providers may also have their own legal responsibilities for processing they determine independently.
Your privacy rights
Subject to the GDPR’s conditions, you may request access, correction, deletion, restriction of processing or a portable copy of your data. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal.
Contact info@drummond-consulting.com to exercise your rights. Requests are normally answered within one month. Where a permitted extension is needed, we will explain it within that month. We may request proportionate information to verify your identity.
You may complain to a data-protection authority, including Portugal’s Comissão Nacional de Proteção de Dados (CNPD), or the authority in the EU country where you habitually live or work.