Privacy Policy

1. General Information and Principles of Data Processing

We are pleased that you are visiting our website. The protection of your privacy and of your personal data during the use of our website is important to us.

Personal data within the meaning of Art. 4 No. 1 GDPR is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, and your IP address.

Data that cannot be linked to your person (e.g. through anonymization) is not personal data. Processing (e.g. collection, storage, use, transmission or erasure) under Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data is erased as soon as the purpose of the processing has been achieved and no statutory retention obligations exist.

This privacy policy applies only to this website. It does not apply to other websites to which we link. We cannot accept responsibility for the confidential handling of your personal data on such third-party websites.

2. Responsible Body

3. Provision and Use of the Website / Server Log Files

a) Type and Scope of Data Processing

This website is hosted by Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, USA). When you use this website without otherwise transmitting data to us, technically necessary data is automatically transmitted to Netlify's servers via server log files, including:

• IP address
• Date and time of the request
• Name and URL of the file accessed
• Referrer URL
• Access status / HTTP status code
• Browser type, language and version
• Operating system

b) Purpose and Legal Basis

This processing is technically necessary to display our website to you. The data also serves the security and stability of the website. The legal basis for this processing is Art. 6 (1) (f) GDPR. The processing serves the legitimate interest in the secure provision of the website.

Netlify is certified under the EU-US Data Privacy Framework and thus guarantees an adequate level of data protection in accordance with Art. 45 GDPR. For more information: netlify.com/privacy.

c) Storage Period

As soon as the personal data mentioned is no longer required for displaying the website, it will be deleted. Further storage may take place in individual cases if required by law.

4. External Fonts (Google Fonts)

This website uses web fonts provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for the uniform display of fonts. When you access the page, your browser loads the required fonts directly from Google servers. In the process, Google is made aware of your IP address.

The legal basis for use is Art. 6 (1) (f) GDPR (legitimate interest in a uniform and appealing presentation). For more information, see Google's privacy policy: policies.google.com/privacy.

5. Data Transmission

We pass on your personal data to third parties only if:

• you have given your express consent under Art. 6 (1) (a) GDPR,
• this is legally permissible and required under Art. 6 (1) (b) GDPR for the fulfillment of a contractual relationship,
• there is a legal obligation pursuant to Art. 6 (1) (c) GDPR (e.g. towards tax authorities),
• the disclosure under Art. 6 (1) (f) GDPR is necessary to safeguard legitimate business interests,
• we use external service providers (processors) in accordance with Art. 28 GDPR, who are obliged to handle your data carefully.

Specifically, the following processors are used within the scope of this website:

• Netlify, Inc. (USA) – Hosting provider (cf. Section 3)
• Google Ireland Limited (Ireland) – Provision of Google Fonts (cf. Section 4)

6. Contact by Email and via Contact Form

a) Type and Scope of Data Processing

On our website you can contact us by email or via the contact form. When you use the contact form, your local email program opens with a pre-filled message. The actual transmission therefore takes place via your email provider, not via the server of this website.

The following personal data is processed:

• Name
• Company (optional)
• Email address
• Content of the message

b) Purpose and Legal Basis

The purpose of the data processing is to properly respond to your inquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures or contract fulfillment) and Art. 6 (1) (f) GDPR (legitimate interest in processing your request). Your data will not be passed on to third parties.

c) Storage Period

The data you transmit will remain with us until you request its deletion, withdraw your consent or the purpose of the data storage no longer applies (e.g. after completion of your inquiry). Mandatory statutory retention periods, in particular under the German Commercial Code (HGB) or the Fiscal Code (AO), remain unaffected.

7. Tracking and Analysis Tools

This website does not use any tracking, analysis or social media tools. No user analysis, no profiling and no personalized advertising takes place. The website does not set cookies.

Only the Google Fonts described in Section 4 are loaded externally – but exclusively for font display, not for tracking.

8. Data Security

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take technical and organizational security measures that are regularly reviewed and adapted to technological progress.

This includes in particular the use of recognized encryption procedures (SSL/TLS). You can recognize an encrypted connection by the "https://" before the URL and the lock symbol in your browser bar. Data revealed unencrypted, for example by unencrypted email, may be read by third parties. We have no control over this.

9. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy as necessary to ensure that it always complies with current legal requirements or to reflect changes to our services in the privacy policy. The new privacy policy will apply to your next visit.

10. Your Rights

You have extensive rights regarding the processing of your personal data. Details can be found in Articles 7, 15–22 and 77 GDPR. To exercise your rights, please contact the responsible body listed in Section 2.

Right to Withdraw Consent (Art. 7 (3) GDPR)

You may withdraw consent to the processing of your personal data at any time with future effect. The lawfulness of processing carried out until the withdrawal remains unaffected.

Right to Information (Art. 15 GDPR)

You have the right to obtain confirmation as to whether we process personal data concerning you, as well as information about that data and further information (e.g. processing purposes, categories, recipients, planned storage duration).

Right to Rectification and Completion (Art. 16 GDPR)

You have the right to demand the immediate correction of inaccurate data and the completion of incomplete data.

Right to Erasure (Art. 17 GDPR)

You have the right to erasure of your data insofar as processing is no longer necessary, you have withdrawn consent, or the data has been processed unlawfully.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to restrict processing, e.g. if you believe the personal data is inaccurate.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format.

Right to Object (Art. 21 GDPR)

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you.

No Automated Decision-Making (Art. 22 GDPR)

Decision-making based solely on automated processing – including profiling – does not take place.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority at any time. The competent authority for ANIB is: