Privacy policy
This privacy policy informs you about the nature, scope and purpose of processing personal data when you visit this website or contact us.
Controller
Controller within the meaning of the GDPR:
General information
Personal data are any data that can personally identify you. We process data only to the extent required to provide the website, communication, or contract performance.
No automated decision-making or profiling takes place.
- Art. 6(1)(b) GDPR – to initiate and perform contracts or to handle inquiries.
- Art. 6(1)(f) GDPR – legitimate interest in secure and stable operation of the website and abuse prevention.
- Art. 6(1)(a) GDPR – consent, e.g. for a newsletter (if offered).
Hosting
This website is hosted on our own server (no external hosting provider).
When you access the website, the server automatically processes the following data:
- IP address
- Date and time of access
- Requested page/file
- Referrer URL
- User agent (browser and operating system)
- HTTP status code
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation and abuse prevention).
Server-side reach measurement
We use a self-hosted, server-side reach measurement without cookies to technically analyze usage and improve content.
- Requested page and, where applicable, campaign parameters (utm_campaign)
- IP address to distinguish unique visitors
- Time of page view
Data are stored for a maximum of 400 days and then deleted automatically.
Legal basis: Art. 6(1)(f) GDPR.
Contact
If you contact us via contact form or email, we process your details to handle the request and follow-up questions.
- Name
- Email address
- Phone (optional)
- Subject (optional)
- Message
Additionally, IP address, time and user agent may be stored for abuse prevention.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR.
Client portal
This website links to the client portal (login). When you open it, you leave this website; separate privacy information applies there and processing takes place for contract performance.
Open client portalNewsletter (if offered)
If you subscribe to our newsletter (if offered), we use your data exclusively for sending it.
- Email address
- Time of subscription and confirmation (double opt-in)
- IP address for proof
Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time.
Cookies
This website currently does not use tracking or marketing cookies. Technically necessary cookies (e.g. for language selection or in the client portal) may be used.
Recipients and third-country transfers
We only share data where necessary for contract performance, handling inquiries or legal obligations. Technical service providers (e.g. email providers) act as processors. Transfers to third countries only occur where necessary in individual cases and in accordance with GDPR requirements.
Retention
We store personal data only as long as necessary for the respective purposes. Statutory retention periods remain unaffected.
Your rights
- Access to the processed data
- Rectification of inaccurate data
- Erasure or restriction of processing
- Data portability
- Objection to processing based on legitimate interests
- Withdrawal of consent at any time
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
Security
We use technical and organizational measures and TLS/SSL encryption to protect your data.
Updates
We update this privacy policy when processing changes or legal requirements make it necessary.
