Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General Information on Data Processing

As a matter of principle, we process personal data of our users only to the extent necessary to provide a functioning website together with our content and services, or where you have given your consent. Data is shared with third parties only within the scope of the purposes described below and on the basis of the legal grounds stated.

3. What Data We Collect

a) Server log files

When you access our website, our hosting provider automatically collects information in so-called server log files that your browser transmits. These include in particular:

• IP address (usually shortened/anonymised)
• date and time of access
• page accessed / file requested
• browser and operating system used
• referrer URL (previously visited page)

This data is not merged with other data sources and serves solely the technical operation, security and stability of the website.

b) Contacting us

If you contact us by email or via a contact form, the information you provide (e.g. name, email address, message) is stored in order to process your request.

c) Cookies

Our website uses cookies. Cookies are small text files stored on your device. Technically necessary cookies are required to operate the site. We store your cookie consent (the choice „Accept all" or „Essential only") locally in your browser (localStorage) in order to respect your decision. We set optional cookies only with your explicit consent, which you can withdraw at any time with effect for the future (e.g. by deleting your browser data).

4. Legal Bases for Processing

• Art. 6 (1) (a) GDPR – consent (e.g. for optional cookies).
• Art. 6 (1) (b) GDPR – performance of a contract and pre-contractual measures (e.g. order processing, enquiries).
• Art. 6 (1) (f) GDPR – legitimate interest (e.g. secure and stable operation of the website, server log files).

5. Hosting

Our website is hosted by an external service provider: [HOSTING-ANBIETER, z.B. Hetzner / Vercel / Netlify]. On our behalf, the provider processes the data generated when the website is accessed (in particular server log files). The basis for this is a data processing agreement pursuant to Art. 28 GDPR. Processing is carried out on the basis of our legitimate interest in the reliable provision of the website (Art. 6 (1) (f) GDPR).

6. Storage Period

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods (e.g. up to 10 years under commercial and tax law). Server log files are generally deleted or anonymised after a short time (usually a few days to weeks). Enquiries by email are deleted as soon as their storage is no longer necessary.

7. Your Rights as a Data Subject

Under the GDPR you have, in particular, the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent with effect for the future (Art. 7 (3) GDPR)
• right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to [EMAIL@DOMAIN.DE] is sufficient.

This English text is a courtesy translation and is a draft containing placeholders. The German version is legally binding. Have it reviewed by a qualified professional before launch.