Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the GDPR is:

2. General information on data processing

We process personal data of our users only insofar as this is necessary to provide a functional website and our content and services. Processing regularly takes place only with the user's consent (Art. 6 (1) (a) GDPR) or on the basis of statutory permissions (in particular Art. 6 (1) (b), (c) and (f) GDPR).

3. Website provision and server log files

When our website is accessed, your browser automatically transmits information to our hosting provider's server. This is stored temporarily in log files:

• IP address of the requesting device (shortened/anonymised where possible)
• Date and time of access
• Name and URL of the file accessed
• Amount of data transferred and message about a successful call
• Referrer URL, browser used and operating system

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technical provision, stability and security of the website. The data is deleted after 30 days at the latest, unless there is evidence of a security incident that requires longer storage in an individual case.

4. Hosting

This website is operated at a service provider within the European Union that processes the data on our behalf under a data processing agreement (Art. 28 GDPR). The legal basis is Art. 6 (1) (f) GDPR based on our legitimate interest in a secure and efficient provision of the website.

5. Cookies and comparable technologies

This website uses only technically necessary cookies that are required for the operation of the site (e.g. to store settings during your visit). The legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

We do not use tracking, analytics or marketing cookies, nor third-party tracking (e.g. Google Analytics, Meta Pixel). If such services are integrated in the future, this will happen only on the basis of your prior explicit consent under § 25 (1) TDDDG, Art. 6 (1) (a) GDPR via an appropriate consent banner. You can revoke such consent at any time with effect for the future.

You can also control or prevent the setting of cookies through your browser settings. Please note that individual features of the website may then be restricted.

6. Contact

When you contact us by email, phone or via a contact form, the data provided (e.g. name, email address, phone number, content of the enquiry) is processed to handle your request and for any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding).

Your data is deleted as soon as it is no longer required for the purpose of its collection and no statutory retention obligations (in particular under commercial and tax law) apply.

7. Disclosure to third parties

Your personal data is only transferred to third parties where legally permitted, you have consented, or it is necessary for the performance of a contract. Processors (e.g. hosting providers) are contractually bound under Art. 28 GDPR. Data is not transferred to third countries outside the EU/EEA; should this become necessary in the future, it will only take place in compliance with Art. 44 et seq. GDPR.

8. Your rights as a data subject

You have the following rights with regard to personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, an informal message to the contact details listed above is sufficient.

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority (Art. 77 GDPR). The competent authority is:

10. Data security

During your visit to our website we use transport encryption (TLS/SSL) with the highest encryption level supported by your browser. In addition, we take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, loss or unauthorised access.

11. Currency of this privacy policy

This privacy policy is currently valid. As our website evolves or statutory or regulatory requirements change, it may become necessary to adapt this privacy policy. The current version is always available on this page.