Privacy Policy

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws is:

2. General Information on Data Processing

Personal data refers to any information relating to an identified or identifiable natural person. We process personal data only to the extent necessary to provide a fully functional website, to handle inquiries, to provide our services, or to comply with legal obligations, or where appropriate consent has been given.

The following sections explain what personal data is processed, for what purpose the processing takes place, and on what legal basis it is based.

The legal bases include, in particular, Article 6(1)(a) of the GDPR in the case of consent, Article 6(1)(b) of the GDPR in the case of contractual or pre-contractual measures, Article 6(1)(c) of the GDPR for legal obligations, and Article 6(1)(f) of the GDPR for legitimate interests.

3. Hosting

This website is hosted by the following provider:

HOSTINGER operations, UAB
34 Švitrigailos St.
LT-03230 Vilnius
Lithuania

When you visit our website, the hosting provider processes technical access data. This may include, in particular, the IP address, the date and time of access, the page or file accessed, the amount of data transferred, the browser type and version, the operating system, the referrer URL, and other technical information.

Data processing is carried out, in particular, to ensure the secure, stable, and technically error-free operation of the website, based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

To the extent that Hostinger processes personal data on our behalf, such processing is based on a data processing agreement pursuant to Article 28 of the GDPR.

For more information, see the Hostinger Privacy Policy .

4. Cloudflare

To improve the security, availability, and performance of our website, we use services provided by:

Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107
United States

Among other things, Cloudflare provides a Content Delivery Network (CDN) and security features. This means that data traffic between your browser and our website can be routed through Cloudflare's infrastructure.

In particular, your IP address and technical information regarding your access, your browser, your device, and the content you view may be processed. The purpose of this processing is primarily to ensure the secure and fast delivery of the website and to detect and prevent unauthorized access and attacks.

Data processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, reliable, and high-performance operation of our website.

To the extent that Cloudflare processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 of the GDPR.

Personal data may also be processed in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework. For such international data transfers, Cloudflare also uses the Standard Contractual Clauses approved by the European Commission.

For more information, see the Cloudflare Privacy Policy .

5. SSL or TLS Encryption

For security reasons and to protect the transmission of confidential information, this website uses SSL or TLS encryption.

One way to recognize an encrypted connection is that the address bar of your browser displays „https://.“ When encryption is enabled, the data transmitted between your browser and our website cannot be easily intercepted by third parties.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies. This may involve storing information on your device or reading information that is already stored there.

To the extent that the storage of information or access to information already stored is absolutely necessary for the provision of a digital service that you have expressly requested, this is done in accordance with Section 25(2) of the TDDDG without prior consent.

For cookies or similar technologies that are not strictly necessary, we obtain your consent prior to their use in accordance with Section 25(1) of the TDDDG. To the extent that personal data is processed in this context, such processing is based on Article 6(1)(a) of the GDPR.

You can change or revoke any consent you have given at any time, effective for the future, through the cookie settings on our website or by revoking it.

For an overview of the cookies and similar technologies currently in use, please see our Cookie Policy .

7. Cookiebot Consent Management Platform

We use Cookiebot CMP to manage and document your consent to cookies and similar technologies. The provider is:

Usercentrics A/S
39 Havnegade
1058 Copenhagen
Denmark

Cookiebot allows us to obtain, store, and document your consent, as well as to manage non-essential services according to your selections.

When loading the consent banner, Cookiebot processes, in particular, the URL of the website being accessed, the browser language, the user agent, and the IP address. According to the provider, this information is used exclusively to ensure the consent banner is displayed correctly and to determine the applicable geographic or legal region, and is not stored after this processing is complete.

Once you have made a selection, Cookiebot processes, in particular, the website URL, the user agent, and the consent status you selected. Cookiebot also generates a consent ID and stores it along with your consent status in order to document and verify your decision.

The processing of your consent decision for administrative and documentation purposes is carried out, in particular, to fulfill data protection-related documentation and accountability obligations pursuant to Article 6(1)(c) of the GDPR in conjunction with Article 5(2) and Article 7(1) of the GDPR.

To the extent that Cookiebot stores or reads information on your device that is technically necessary for storing and managing your consent decision, this is done in accordance with Section 25(2) of the TDDDG.

According to Usercentrics, end-user data related to consent management is routinely deleted after 12 months.

To the extent that Usercentrics processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 of the GDPR.

You can review, change, or revoke your preferences at any time via the cookie settings on our website, effective for the future.

For more information, see the Cookiebot Privacy Policy .

8. Google Tag Manager

We use Google Tag Manager to manage website tags. The provider for users in the European Economic Area is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Tag Manager allows us to centrally integrate and control the services used on our website. For example, Tag Manager can be used to manage analytics services such as Google Analytics .

Google Tag Manager is integrated into our consent management system. Non-essential services and tags are controlled in accordance with the consent decision you have made.

To the extent that personal data is processed in this context, the legal basis depends on the specific service integrated via Google Tag Manager. Services that require consent to be used will only be used in accordance with the consent you have provided.

As part of the service provision, data may also be processed by Google LLC in the U.S. Google LLC is certified under the EU-U.S. Data Privacy Framework.

For more information, see the Google Privacy Policy .

9. Google Analytics 4

Provided you have given your consent, we use Google Analytics 4 to analyze website usage statistics.

The provider for users in the European Economic Area is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics allows us to understand how visitors use our website. In particular, this may involve processing information about pages viewed, the time and duration of page views, interactions with the website, clicks, technical information about the browser and device, the approximate geographic region, and information about the origin of a website visit.

For users in the European Union or the European Economic Area, Google states that it uses the IP address exclusively to determine an approximate geographic region. The IP address is discarded before the data is logged or stored in Google Analytics.

Google Analytics is activated on our website only after you have given your consent. The processing is based on your consent pursuant to Article 6(1)(a) of the GDPR and, to the extent that information is stored on or read from your device , in accordance with Section 25(1) of the TDDDG.

The retention period for user-related data in our Google Analytics property is 2 months.

As part of the data processing, data may also be processed by Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework.

You can change or withdraw your consent at any time via the cookie settings on our website, effective for the future.

For more information, see the Google Privacy Policy .

10. Contact Form

If you contact us via the contact form, we will process the information you provide in order to handle your inquiry. This may include, in particular, your name, your email address, and the content of your message.

If your inquiry relates to an existing contract or is intended to facilitate precontractual measures, the processing is based on Article 6(1)(b) of the GDPR.

In all other cases, processing is based on our legitimate interest in the proper and efficient handling of incoming inquiries in accordance with Article 6(1)(f) of the GDPR.

The data submitted via the contact form will be deleted as soon as your inquiry has been fully processed and there are no statutory retention requirements, contractual claims, or other legal grounds requiring further storage.

11. Storing Contact Requests with Flamingo

To reliably manage inquiries received through our contact form, we use the Flamingo plugin on our WordPress website.

As a result, the data submitted via the contact form may be stored in our website's database. This includes, in particular, the information you provided in the contact form and the content of your message.

The data is stored for the purpose of processing and documenting incoming inquiries. The legal basis corresponds to the respective legal basis for establishing contact, specifically Article 6(1)(b) of the GDPR for contract-related or pre-contractual inquiries, or Article 6(1)(f) of the GDPR for other inquiries.

The stored data will be deleted as soon as it is no longer needed for processing and documenting your inquiry, and provided that no statutory retention requirements or other legal grounds prevent its deletion.

12. Sending Emails via Brevo

To ensure reliable delivery of emails from our website, we use Brevo. The provider is:

Sendinblue SAS (Brevo)
9–17 Salneuve Street
75017 Paris
France

Brevo is used primarily for the technical sending of emails related to inquiries submitted through our website .

In particular, the following information required for sending the message —email address, name, message content, and technical sending and delivery information—may be processed.

If the communication relates to an existing or intended contractual relationship, the processing is based on Article 6(1)(b) of the GDPR. In all other cases, the processing is based on our legitimate interest in secure and reliable communication pursuant to Article 6(1)(f) of the GDPR.

To the extent that Brevo processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 of the GDPR.

For more information, see the Brevo's Privacy Policy .

13. Contact via Email or Phone

If you contact us by email or phone, we will process the personal data you provide in connection with your inquiry in order to address your request.

If your inquiry relates to a contract or to precontractual measures, the processing is based on Article 6(1)(b) of the GDPR.

In other cases, processing is based on our legitimate interest in effectively handling incoming inquiries in accordance with Article 6(1)(f) of the GDPR.

The data will be deleted as soon as your request has been fully processed and there are no statutory retention requirements, contractual claims, or other legal reasons that require further storage of the data.

14. Retention Period

Unless a more specific retention period is specified in this Privacy Policy, we store personal data only for as long as is necessary for the respective purpose of processing.

Data will be deleted as soon as the purpose of the processing no longer applies and there are no statutory retention requirements, contractual claims, or other legal grounds that preclude deletion.

If there are statutory retention requirements, the relevant data will be stored for the duration of the respective retention period and subsequently deleted, provided there is no other legal basis for storage.

15. Your Rights

Subject to the statutory requirements, you have, in particular, the following rights regarding your personal data:

• Right of Access under Article 15 of the GDPR
• Right to rectification under Article 16 of the GDPR
• Right to erasure under Article 17 of the GDPR
• Right to Restriction of Processing under Article 18 of the GDPR
• Right to Data Portability under Article 20 of the GDPR
• Right to object pursuant to Article 21 of the GDPR, provided that the statutory requirements are met

Withdrawal of Consent

If the processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

Right to Object

To the extent that we process personal data based on Article 6(1)(e) or (f) of the GDPR, you have the right, under the conditions set forth in Article 21 of the GDPR, to object at any time to the processing.

Right to File a Complaint with a Regulatory Authority

If you believe that the processing of your personal data violates data protection laws, you have the right to file a complaint with a data protection supervisory authority .

For Saxony, you can contact the following agency in particular:

Saxon Commissioner for Data Protection and Transparency
17 Maternistraße
01067 Dresden
Germany

Phone: +49 351 85471-101
Email: [email protected]

16. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if changes to our website, the services we use, or legal requirements make it necessary.

The version published on this website at any given time is the valid one.