Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data Collection on This Website

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Controller.”

How do we collect your data? Your data is collected in part when you provide it to us (e.g. via email or contact form). Other data is collected automatically by our IT systems when you visit the website. This primarily includes technical data (e.g. IP address, browser type, time of access).

What do we use your data for? Technical data is collected to ensure that the website is provided without errors.

2. Hosting

We host the content of our website with the following provider:

External Hosting (Vercel)

This website is hosted externally. Personal data collected on this website is processed on the servers of the hosting provider. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access data, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting). Consent can be revoked at any time.

We use the following hosting provider:

Data transfer to the USA: The service provider transfers data to the USA. Data transfer is based on the adequacy decision of the European Commission. Vercel is certified under the EU-US Data Privacy Framework (DPF).

Data Processing Agreement: We have concluded a Data Processing Agreement (DPA) with the above-mentioned provider. This is a legally required contract ensuring that the provider processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

No Use of Cookies

We do not use cookies on our website. No files are stored on your device that are used to recognize you or track your behavior. Since no cookies are set, no cookie banner is required. You can use our website without your privacy being affected by tracking cookies.

Information on the Controller

The controller responsible for data processing on this website is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Data Retention

Unless a more specific storage period has been stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your data (e.g. retention periods under tax or commercial law).

Your Rights (Withdrawal, Access, Deletion)

• Right to withdraw consent: Many data processing operations are only possible with your express consent. You may revoke your consent at any time.
• Right to object (Art. 21 GDPR): If data processing is based on Art. 6(1)(f) GDPR (legitimate interest), you have the right to object at any time for reasons arising from your particular situation.
• Right to lodge a complaint: In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority.
• Right to access, rectification, and erasure: You have the right at any time to obtain information free of charge about your stored personal data, as well as the right to correct or delete this data.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the change in the browser address line from “http://” to “https://” and by the lock symbol in your browser bar.

4. Data Collection on This Website

Server Log Files

The provider of the pages (Vercel) automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation, security, and optimization of the website – for this purpose, server log files must be recorded.

Contact Form / Email / Telephone

If you contact us via contact form, email, or telephone, your inquiry including all resulting personal data (name, request) will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling the requests addressed to us (Art. 6(1)(f) GDPR).

The data you send to us will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions—especially retention periods—remain unaffected.