Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information

The protection of your personal data is important to us. We process your data exclusively on the basis of statutory provisions, in particular the GDPR, the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Below we explain which data we collect, for what purpose, and what rights you have.

Personal data is any information that can be used to identify you personally, such as your name, address, e-mail address or telephone number.

3. Hosting

This website is hosted by an external service provider:

Data collected on this website is stored on the provider's servers. These servers are located exclusively in Germany. No personal data is transferred to third countries outside the European Union in the course of hosting.

The data concerned may in particular include IP addresses, contact enquiries, meta and communication data, website access data and other data generated via a website.

The hosting provider is used for the purpose of fulfilling contracts with our prospective and existing clients, and in the interest of secure, fast and efficient provision of our online services by a professional provider. The legal basis is Art. 6 (1) (b) and (f) GDPR. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

4. Server log files

The provider of this website automatically collects and stores information in what are known as server log files, which your browser transmits automatically. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing device
• time of the server request
• IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in the technically error-free presentation and the security of our website. Log files are deleted automatically after 7 days.

5. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://". When encryption is active, the data you transmit to us cannot be read by third parties.

6. Cookies and consent management

Our website uses cookies. Cookies are small text files stored on your device. Technically necessary cookies required for the operation of the website are set without your consent on the basis of Section 25 (2) TDDDG and Art. 6 (1) (f) GDPR.

All other cookies, as well as the loading of external content, occur exclusively on the basis of your express consent pursuant to Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future via the settings in the consent banner.

To manage your consent we use Real Cookie Banner, a service provided by devowl.io GmbH, Tannheimer Straße 51, 87700 Memmingen, Germany.

Your consent is logged so that it can be demonstrated to supervisory authorities. This log records your consent decision, the time of consent, an anonymised form of your IP address, and information about your browser and device. Storage takes place locally on our own server; no transfer to third parties occurs. The legal basis for this logging is Art. 6 (1) (c) GDPR in conjunction with the obligation of proof under Art. 7 (1) GDPR.

7. Contact form

If you send us enquiries via the contact form, the details you provide in the form, including the contact details you enter there, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or to pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us pursuant to Art. 6 (1) (f) GDPR, or on your consent pursuant to Art. 6 (1) (a) GDPR.

The data you enter in the contact form remains with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing it no longer applies. Mandatory statutory provisions, in particular retention periods under commercial and tax law, remain unaffected.

8. Enquiries by e-mail

If you contact us by e-mail, your enquiry including all resulting personal data will be stored and processed by us for the purpose of handling your request. The same legal bases and deletion periods apply as described in section 7.

9. Fonts

To ensure consistent presentation of typefaces, this website uses fonts stored locally on our own server. No connection to third-party servers, in particular to Google, takes place.

10. Instagram

Our website contains a link to our Instagram profile. Only when you actively click this link are you forwarded to the platform of the provider, Meta Platforms Ireland Limited. No data is transmitted to Instagram merely by visiting our website.

11. Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose of processing no longer applies.

If you assert a justified request for deletion or withdraw your consent, your data will be deleted, provided we have no other legally permissible grounds for storing it. In the latter case, deletion takes place once those grounds no longer apply.

12. Your rights

You have the following rights with regard to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)

An informal message to the contact details given above is sufficient to exercise these rights.

13. Right to object

Where data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

14. Right to lodge a complaint with a supervisory authority

In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.

15. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or in order to reflect changes to our services. The version in force at the time will apply to your next visit.