Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and regulations is:

1. General information on data processing

We take the protection of your personal data very seriously and treat it confidentially in accordance with statutory data protection regulations, in particular the GDPR and the German Federal Data Protection Act (BDSG). This privacy policy explains the nature, scope and purpose of the processing of personal data on our website.

2. Hosting and technical provision

Our website is provided via Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare acts as a Content Delivery Network (CDN) and provides security and performance services. When you visit our website, data is automatically collected in server log files transmitted by your browser:

• IP address of the requesting device
• Date and time of the request
• Page accessed / URL
• Browser and operating system used
• Referrer URL (previously visited page)

This data is processed to ensure the secure and stable provision of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure provision of the website).

Cloudflare may also process data in the USA. The transfer is based on the EU Commission's Standard Contractual Clauses. Further information can be found in Cloudflare's Privacy Policy.

3. Contact via email

You can contact us by email at [email protected]. The data you provide (e.g. name, email address, message content) will be processed for the purpose of handling your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). No third-party services are used for email delivery.

4. Cookies

Our website uses only technically necessary cookies. For details, please refer to our Cookie Policy.

5. Web analytics (Google Analytics)

We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable analysis of your use of our website. These cookies are only set with your explicit consent via our cookie banner. The legal basis is Art. 6(1)(a) GDPR (consent). The information generated by the cookie is usually transmitted to a Google server in the USA. We have activated IP anonymisation, so your IP address is truncated within the EU. You can revoke your consent at any time by deleting the cookie_consent cookie in your browser. Further information: Google Privacy Policy.

6. Fonts

This website uses the fonts "Playfair Display" and "Inter". The font files are hosted locally on our server (Cloudflare). No connection to Google servers or other third-party providers takes place. No personal data is transmitted to third parties in connection with the display of fonts.

7. No disclosure for advertising purposes

We do not share your personal data with third parties for advertising or marketing purposes. Data is only disclosed as described in this privacy policy or as required by law.

8. Data security

We employ technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access. Our website is delivered via HTTPS (SSL/TLS encryption). Our security measures are continuously improved in line with technological developments.

9. Data retention

We store personal data only for as long as is necessary for the respective processing purpose or as required by statutory retention obligations. Contact enquiries are deleted after final processing and expiry of any applicable retention periods.

10. Your rights as a data subject

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You may request confirmation as to whether personal data is being processed and obtain information about such data.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided no statutory retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you may request the restriction of processing of your data.
• Right to data portability (Art. 20 GDPR): You may request that your data be provided to you in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR): You may object to the processing of your data at any time if processing is based on Art. 6(1)(f) GDPR.
• Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit).

11. Minors

Our services are not intended for persons under the age of 16. We do not knowingly collect personal data from minors. Should we become aware that data of a minor has been collected, it will be deleted immediately.

12. Changes to this privacy policy

We reserve the right to amend this privacy policy as needed to reflect changes in legal requirements or changes to our services. The version published on our website shall apply.

13. Contact

If you have any questions about data protection or wish to exercise your rights, please contact us using the details provided in our Imprint.