Privacy policy

01Controller

The controller for data processing on this website is:

02General information on data processing

In principle we only process personal data of our users insofar as this is necessary to provide a functioning website as well as our content and services. This website is built to be data-minimal: it uses no tracking cookies and no analytics services.

03Hosting (Cloudflare)

This website is provided and delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. As a processor, Cloudflare processes technical data (including server log data and your IP address) in order to deliver the website securely and quickly.

The legal basis is our legitimate interest in secure and efficient provision (Art. 6 (1) (f) GDPR). A data processing agreement (Data Processing Addendum) pursuant to Art. 28 GDPR exists with Cloudflare. Any transfer to the USA is based on the EU-U.S. Data Privacy Framework (Cloudflare is certified) and additionally on the EU standard contractual clauses. Processing limited exclusively to the EU is not guaranteed in the tariff used.

04Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are usually:

• Browser type and version
• Operating system used
• Referrer URL
• Time of the server request
• IP address (shortened/anonymised where technically possible)

This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR. The operator has a legitimate interest in the technically error-free presentation and security of its website.

05Contact form and email contact

If you send us enquiries via the contact form or by email, your details (name, email address, company if applicable, and the content of your message) are stored with us in order to process the enquiry and in case of follow-up questions.

This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries (Art. 6 (1) (f) GDPR) and on your consent (Art. 6 (1) (a) GDPR) where this was requested.

The contact form submission is processed via a Cloudflare Pages Function. Your enquiry is sent to our mailbox via the email service Resend (Resend, Inc., USA); a data processing agreement including standard contractual clauses exists with Resend, and Resend is certified under the EU-U.S. Data Privacy Framework. Our mailbox, in which enquiries arrive and are stored, is operated with the provider Zoho (Zoho Corporation B.V., EU data centre, zoho.eu) as a processor. Your details remain with us until you ask us to delete them, withdraw your consent, or the purpose for storage no longer applies.

To protect the form against automated misuse (spam, bots) we use Cloudflare Turnstile. Technical information (including IP address and browser characteristics) is transmitted to and evaluated by Cloudflare. Turnstile does without tracking cookies and advertising tracking. The legal basis is our legitimate interest in defending against spam and misuse (Art. 6 (1) (f) GDPR); the mechanisms named under Hosting apply to the transfer to the USA (Data Privacy Framework / standard contractual clauses).

06Duration of storage

We process and store personal data only for the period necessary to achieve the purpose of storage, or as provided for by statutory retention periods.

07Your rights as a data subject

You have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw a given consent (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).

08SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar switching from http:// to https://.

09Cookies

This website uses no tracking or marketing cookies. Only technically necessary settings (e.g. your choice between light and dark design) are stored locally in your browser (localStorage) and are not transmitted to us.

10Currency and changes to this privacy policy

This privacy policy is currently valid. Changes in statutory or regulatory requirements may make it necessary to adapt this privacy policy.