1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information

Below we inform you about the nature, scope and purpose of the processing of personal data when you visit this website. Processing takes place within the framework of the GDPR, the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

3. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights:

• right of access (Art. 15 GDPR);
• right to rectification (Art. 16 GDPR);
• right to erasure (Art. 17 GDPR);
• right to restriction of processing (Art. 18 GDPR);
• right to data portability (Art. 20 GDPR);
• right to object to processing (Art. 21 GDPR);
• right to withdraw a consent already given, with effect for the future (Art. 7(3) GDPR).

Right to object: Where your data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing.

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

4. Hosting (Netlify)

We host our website with Netlify. The provider is Netlify, Inc., 2343 3rd Street, Suite 296, San Francisco, CA 94107, USA (hereinafter “Netlify”). Further details can be found in Netlify’s privacy policy: https://www.netlify.com/privacy/.

When you access our website, Netlify collects technically necessary access data (in particular your IP address, the date and time of access, the file requested and the browser type) in order to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a reliable and secure provision).

A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Netlify. As Netlify processes data in the USA, a transfer to a third country takes place. An adequate level of data protection is ensured through the EU-US Data Privacy Framework (Netlify is certified) and supplementary standard contractual clauses pursuant to Art. 46 GDPR.

5. Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are in particular:

• browser type and version;
• operating system used;
• referrer URL;
• host name of the accessing computer;
• time of the server request;
• IP address.

This data is not merged with other data sources. The collection is based on Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free presentation and the security of our website.

6. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar.

7. Cookies and consent management

Our website uses cookies and comparable technologies. Technically necessary cookies that are strictly required for the operation of the website are set on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR without separate consent.

All other cookies and technologies (in particular for analysis purposes) are only used with your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. We manage your consent via a consent banner. You can withdraw or adjust your consent at any time with effect for the future.

8. Contact form

On our website you can contact us via a form that opens as a pop-up (modal). In doing so, we process the data you provide (in particular your name, email address and, where applicable, your message) in order to handle your enquiry.

Before submitting, you confirm your consent to the processing via a checkbox. The legal basis is Art. 6(1)(a) GDPR (consent) and, where your enquiry is aimed at concluding or performing a contract, Art. 6(1)(b) GDPR. You can withdraw your consent at any time with effect for the future.

The form is provided via “Netlify Forms” from our hosting provider Netlify, Inc. (see Section 4). The data submitted through the form is processed and stored on Netlify’s servers in the USA; the safeguards set out in Section 4 apply (data processing agreement pursuant to Art. 28 GDPR, EU-US Data Privacy Framework, standard contractual clauses pursuant to Art. 46 GDPR).

The provision of data is voluntary; however, without a valid email address we cannot process your enquiry.

The data remains with us and with Netlify until the purpose of storage no longer applies (e.g. after your enquiry has been processed) or you request its deletion. Mandatory statutory retention periods remain unaffected.

9. Enquiry by email

If you contact us by email, your enquiry including all personal data resulting from it will be stored and processed by us for the purpose of handling your request. The legal bases are — depending on the context — Art. 6(1)(b), (f) or (a) GDPR. The principles set out in Section 8 apply accordingly to the storage period.

10. Web analytics: Google Analytics 4

Where you have consented, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. The IP address is shortened by default by Google Analytics 4 (IP anonymisation).

The legal basis for its use is your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Consent is voluntary and can be withdrawn at any time via the consent banner with effect for the future.

Third-country transfer: When using Google Analytics, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses pursuant to Art. 46 GDPR are in place with Google. A data processing agreement pursuant to Art. 28 GDPR is also in place with Google.

Storage period: The data stored at user and event level by Google Analytics is automatically deleted after 12 months. Further information on how Google handles user data can be found in Google’s privacy policy: https://policies.google.com/privacy.

11. No automated decision-making

There is no automated decision-making — including profiling — that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

12. Storage period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for erasure or withdraw consent, your data will be deleted unless there are legally permissible grounds for its retention (e.g. retention periods under commercial or tax law).

13. Currency and amendment of this privacy policy

This privacy policy is dated June 2026. As our website develops, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be accessed on this website at any time.