Privacy Policy

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult the Data Protection Declaration below.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under “Information about the responsible party” below.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance, be information you enter into our contact form. Other data may be recorded by IT systems automatically or after consent during your website visit, primarily technical information such as browser, operating system, or time of access.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyze user patterns.

What rights do you have as far as your information is concerned?

You have rights to information about stored personal data and, where applicable, rectification, erasure, restriction of processing, revocation of consent and complaint to a competent supervisory authority. Please contact us if you have questions about data protection.

2. Hosting

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (“Strato”). When you visit the website, Strato records server log files, including IP addresses. Strato is used on the basis of Art. 6(1)(f) GDPR due to the legitimate interest in reliable website provision. Where consent is required, processing is based on Art. 6(1)(a) GDPR and the applicable rules governing access to information on the user’s device.

3. General information and mandatory information

Data protection

The operators of this website take the protection of personal data seriously and handle it confidentially and in accordance with statutory data protection regulations. Internet transmission, including e-mail communication, can nevertheless have security gaps.

Information about the responsible party (controller)

The controller is the natural person or legal entity that determines the purposes and means of processing personal data.

Storage duration

Unless a more specific storage period is stated, personal data remains with us until the purpose for processing no longer applies. Data may be retained where statutory obligations or other legally permissible reasons require it.

General information on the legal basis for data processing

Depending on the circumstances, processing may be based on consent (Art. 6(1)(a) GDPR), contractual or pre-contractual necessity (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR), or legitimate interests (Art. 6(1)(f) GDPR). Special-category data and transfers to third countries are handled under the applicable GDPR provisions.

Revocation of your consent

You may revoke consent at any time with effect for the future. The lawfulness of processing carried out before revocation remains unaffected.

Right to object in special cases and to direct advertising (Art. 21 GDPR)

If data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object on grounds relating to your particular situation. If personal data is processed for direct advertising, you may object to that processing at any time.

Right to lodge a complaint

In the event of GDPR violations, data subjects may lodge a complaint with a competent supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged infringement.

Right to data portability

You have the right, where the statutory requirements are met, to receive data processed automatically on the basis of consent or a contract in a commonly used, machine-readable format and to request direct transfer where technically feasible.

Information, rectification and erasure

Within the scope of applicable law, you may request information about stored personal data, its origin, recipients and purpose, and may have rights to rectification or erasure.

Right to restriction of processing

You may request restriction of processing in the circumstances provided by law, including while disputed data accuracy is being verified, where processing is unlawful, where data is needed for legal claims, or while an objection is being assessed.

SSL and/or TLS encryption

This website uses SSL/TLS encryption to protect confidential content transmitted to the website operator.

Rejection of unsolicited e-mails

We object to the use of contact information published as part of mandatory legal information for unsolicited promotional and informational material.

4. Recording of data on this website

Server log files

The hosting provider may automatically collect browser type and version, operating system, referrer URL, hostname, time of server request and IP address in server log files. This data is not merged with other data sources and is processed on the basis of Art. 6(1)(f) GDPR for technically error-free website provision and optimization.

Contact form

If you submit an inquiry via the contact form, the information provided and associated contact details are processed to handle your inquiry and possible follow-up questions. Depending on the inquiry, processing is based on Art. 6(1)(b), Art. 6(1)(f), or, where requested, Art. 6(1)(a) GDPR. Data is retained until deletion is requested, consent is revoked, or the processing purpose no longer applies, subject to mandatory retention requirements.

Requests by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request and resulting personal data are processed for the purpose of handling your request and are not passed on without consent. The applicable legal basis depends on whether the inquiry is contractual/pre-contractual, based on legitimate interests, or based on consent.

5. Plug-ins and tools

Google Fonts (local embedding)

The existing privacy policy states that Google Fonts are installed locally so that use of the fonts does not establish a connection to Google’s servers.

6. Analysis tools and advertising

Matomo

The existing privacy policy states that the website uses the open-source analytics service Matomo to analyze website use, including page views and technical log information. It states that Matomo is operated with IP anonymization, configured without cookies, and hosted on the operator’s own servers. Where applicable, processing is based on Art. 6(1)(f) GDPR or consent under Art. 6(1)(a) GDPR and the applicable rules for access to information on the user’s device.

Users may opt out of Matomo tracking where the deployed Matomo installation provides the corresponding opt-out mechanism.