Privacy policy

Controller within the meaning of the GDPR:

Personal data are any data that can personally identify you. We process data only to the extent required to provide the website, communication, or contract performance.

No automated decision-making or profiling takes place.

Legal bases

• Art. 6(1)(b) GDPR – to initiate and perform contracts or to handle enquiries.
• Art. 6(1)(f) GDPR – legitimate interest in secure and stable operation of the website and abuse prevention.
• Art. 6(1)(a) GDPR – consent, e.g. for a newsletter (if offered).

This website is hosted on our own server (no external hosting provider).

Server log files

When you access the website, the server automatically processes the following data:

• IP address
• Date and time of access
• Requested page/file
• Referrer URL
• User agent (browser and operating system)
• HTTP status code

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation and abuse prevention).

We use a self-hosted, server-side reach measurement without cookies to technically analyse usage and improve content.

• Requested page and, where applicable, campaign parameters (utm_campaign)
• IP address to distinguish unique visitors
• Time of page view

Data are stored for a maximum of 400 days and then deleted automatically.

Legal basis: Art. 6(1)(f) GDPR.

To statistically analyse website usage we use Google Analytics 4 (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics is only activated if you consent via our consent banner.

Consent Mode v2

We use Google Consent Mode. Without your consent, no analytics cookies are set and no personal identifiers are sent to Google – only a cookieless, aggregated measurement takes place. Only after your consent are cookies set and data processed for reach and performance measurement.

• device and browser information and a truncated IP address
• pages viewed, time on page and interactions
• approximate location (based on the truncated IP address)

Data may be transferred to Google and processed in third countries (e.g. the USA). Google is certified under the EU-US Data Privacy Framework; the Standard Contractual Clauses apply in addition.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time with future effect via “Cookie settings” in the footer.

More about privacy at Google: https://policies.google.com/privacy(opens in a new tab)

If you contact us via contact form or email, we process your details to handle the request and follow-up questions.

• Name
• Email address
• Phone (optional)
• Subject (optional)
• Message

Additionally, IP address, time and user agent may be stored for abuse prevention.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR.

This website links to the client portal (login). When you open it, you leave this website; separate privacy information applies there and processing takes place for contract performance.

Open client portal(opens in a new tab)

If you subscribe to our newsletter (if offered), we use your data exclusively for sending it.

• Email address
• Time of subscription and confirmation (double opt-in)
• IP address for proof

Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time.

Technically necessary cookies (e.g. for language selection or in the client portal) may be used. Statistics cookies (Google Analytics) are only set if you expressly consent via our consent banner. You can change or withdraw your consent at any time via “Cookie settings” in the footer.

We only share data where necessary for contract performance, handling enquiries or legal obligations. Technical service providers (e.g. email providers) act as processors. Transfers to third countries only occur where necessary in individual cases and in accordance with GDPR requirements.

We store personal data only as long as necessary for the respective purposes. Statutory retention periods remain unaffected.

• Access to the processed data
• Rectification of inaccurate data
• Erasure or restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent at any time

You have the right to lodge a complaint with a data protection supervisory authority.

We use technical and organisational measures and TLS/SSL encryption to protect your data.

We update this privacy policy when processing changes or legal requirements make it necessary.