Privacy Policy

1. Controller

2. Overview of Processing Activities

The following overview summarises the categories of data processed and the purposes of their processing, and identifies the data subjects concerned.

Categories of data processed

• Master data (e.g. names)
• Contact data (e.g. e-mail addresses)
• Content data (e.g. inputs in contact forms)
• Usage data (e.g. pages visited, access times)
• Meta/communication data (e.g. device information, IP addresses)

Categories of data subjects

• Visitors and users of the website
• Business and contractual partners
• Prospective clients

3. Legal Bases

The legal bases for processing arise from the General Data Protection Regulation (GDPR):

• Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR)
• Consent (Art. 6(1)(a) GDPR)

4. Security Measures

We implement technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons.

Our security measures include:

• Encrypted transmission via HTTPS
• Regular security updates
• Access control to our systems
• Regular data backups

5. Transfer of Data

Your personal data will generally not be transferred to third parties. Exceptions:

• You have given your explicit consent
• Transfer is required by law
• Transfer is necessary to fulfil our contractual obligations

6. Cookies and Tracking

Technically necessary cookies

We use technically necessary cookies for the following purposes:

• Theme preference: Storing your selection between light and dark display mode
• Screen information: Recording technical display data for optimal presentation of the website

These cookies are required for the operation of the website and cannot be deactivated.

7. Contact Form

When you use our contact form, the following data are processed:

• Name
• E-mail address
• Selected topics (if provided)
• Message content
• Time of the enquiry
• Technical connection data (e.g. anonymised IP address)

Purpose and legal basis

Data processing is carried out to handle your contact enquiry and to initiate or conduct business relationships (Art. 6(1)(b) GDPR) as well as on the basis of our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Internal processing

Your contact enquiries are processed internally as follows:

• E-mail notification to our team
• Integration into our project management system (Trello)
• Notification via our team messenger (Slack)
• Logging in our server logs for quality assurance

Important: These data are processed exclusively internally and are not passed on to external third parties.

Retention period

Contact enquiries are stored for the duration of the business relationship or until your enquiry has been fully resolved. After that, data are deleted subject to the statutory retention periods applicable under commercial and tax law.

8. Server Log Files

Each time our website is accessed, the following information is recorded automatically:

• Anonymised IP address
• Date and time of access
• URL requested
• Referrer URL
• Browser and operating system used
• Screen resolution and technical device information
• Response time and cache status

Purpose and legal basis

Processing is carried out to ensure a smooth connection, to ensure a convenient user experience, to evaluate system security and stability, and for administrative purposes (Art. 6(1)(f) GDPR).

Retention period

Log files are stored for a maximum of 30 days and are then automatically deleted.

9. External Services and Content

This website deliberately operates without external content delivery networks (CDN) and without any third-party services. All resources – fonts, stylesheets, and scripts – are served exclusively from our own server in Germany.

As a result, no personal data (e.g. IP addresses) are transferred to third parties when the website is accessed. No tracking, analytics, or advertising services are integrated.

10. Your Rights

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR): You may request information about your personal data that we process
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data
• Right to erasure (Art. 17 GDPR): You may request the deletion of your data
• Right to restriction of processing (Art. 18 GDPR): You may request the restriction of processing
• Right to data portability (Art. 20 GDPR): You may request the transfer of your data in a structured format
• Right to object (Art. 21 GDPR): You may object to processing
• Right to withdraw consent: You may withdraw any consent given at any time

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

12. Changes to this Privacy Policy

We reserve the right to update this privacy policy to reflect changes in the legal situation or changes to our services and data processing practices. The current version will always be available on our website.

13. Contact for Data Protection Enquiries

If you have questions about data protection or wish to exercise your rights, please contact us: