Privacy Policy

1. Controller

2. Legal Basis for Data Processing

We process personal data only to the extent necessary and where a legal basis under Article 6 GDPR applies. The relevant legal bases include:

• Consent pursuant to Article 6(1)(a) GDPR
• Performance of a contract or pre-contractual measures pursuant to Article 6(1)(b) GDPR
• Compliance with a legal obligation pursuant to Article 6(1)(c) GDPR
• Legitimate interests, such as ensuring the secure, stable and efficient operation of this website, pursuant to Article 6(1)(f) GDPR

3. Server Log Files

When you access our website, our hosting provider automatically processes the following server log data:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing device
• Time of the server request
• IP address

The purpose of this processing is to ensure the technical provision, security and stability of the website. The legal basis is Article 6(1)(f) GDPR. Log data is generally stored for a maximum of seven days and is then deleted or anonymized. This data is not combined with data from other sources.

4. Contact by Contact Form or Email

If you contact us through our contact form or by email, we process the information you provide, such as your name, email address, telephone number and the content of your message, in order to handle your inquiry and any follow-up questions.

• Purpose: communication and handling of your inquiry
• Legal basis: Article 6(1)(b) GDPR for pre-contractual or contractual measures, or Article 6(1)(f) GDPR based on our legitimate interest in efficient communication
• Storage period: until your inquiry has been fully answered and, where applicable, for the duration of statutory retention obligations

5. Cookies

Our website uses technically necessary cookies that are required for basic functionality and the secure operation of the website.

• Purpose: basic functionality, security and preferences within a session
• Legal basis: Article 6(1)(f) GDPR based on our legitimate interest in providing a functional and secure website
• Storage period: for the duration of the session or until the end of your visit

Cookies that are not strictly necessary, such as cookies used for analytics or marketing purposes, will not be set without your prior consent.

5.1 Consent Management with Real Cookie Banner

We use the consent management tool Real Cookie Banner to manage the cookies and similar technologies used on this website, such as tracking pixels or web beacons, as well as the corresponding consent choices. Further information about how Real Cookie Banner processes data is available at https://devowl.io/rcb/data-processing/ .

The legal bases for processing personal data in this context are Article 6(1)(a) GDPR for consent and Article 6(1)(f) GDPR for legitimate interests. Our legitimate interest lies in the legally compliant management of the cookies and similar technologies used on this website and the corresponding consent choices.

The provision of personal data is neither legally nor contractually required and is not necessary for entering into a contract. You are not obliged to provide personal data. If you do not provide your consent, certain website functions that rely on technologies requiring consent may not be available.

6. Fonts (Google Fonts Hosted Locally)

We use locally hosted web fonts to ensure a consistent presentation of this website. No connection to Google servers is established and no IP addresses are transmitted to Google.

• Purpose: consistent and optimized font display without data transfers to third countries
• Legal basis: Article 6(1)(f) GDPR based on our legitimate interest in an optimized technical presentation

7. Analytics and Tracking Tools

We currently do not use analytics or tracking tools such as Google Analytics. If such tools are introduced in the future, they will only be used on the basis of your consent pursuant to Article 6(1)(a) GDPR. Details will be provided in advance through the consent dialog and in this Privacy Policy.

8. Recipients, Processors and Data Transfers

We only transfer personal data to third parties where this is necessary, legally justified or where you have given your consent.

• Hosting and IT service providers acting as processors pursuant to Article 28 GDPR
• Communication service providers used to provide email infrastructure

Processing generally takes place within the European Union or the European Economic Area. If, in individual cases, a transfer to a third country is required, it will only take place in compliance with Articles 44 et seq. GDPR, for example through Standard Contractual Clauses and, where necessary, additional safeguards to protect your data.

9. Your Rights

Under the GDPR, you have the following rights:

• Access to information about the processing of your personal data pursuant to Article 15 GDPR
• Rectification of inaccurate data or completion of incomplete data pursuant to Article 16 GDPR
• Erasure of your data pursuant to Article 17 GDPR, unless statutory retention obligations prevent its deletion
• Restriction of processing pursuant to Article 18 GDPR
• Data portability pursuant to Article 20 GDPR
• Objection to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR pursuant to Article 21 GDPR
• Withdrawal of consent at any time with effect for the future pursuant to Article 7(3) GDPR
• Lodging a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the place of the alleged infringement, pursuant to Article 77 GDPR

10. SSL and TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the change in your browser’s address bar from “http://” to “https://”.

11. Updates and Amendments to This Privacy Policy

We reserve the right to update this Privacy Policy in the event of changes to our website or applicable legal requirements. The version valid at the time of your visit applies.