Privacy Policy (Datenschutzerklärung)
1. An Overview of Data Protection
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.
Data Recording on This Website
Who is responsible for data recording on this website (i.e., the “Controller”)? The data processing on this website is carried out by the website operator. You can find the individual contact details in the section “Information About the Responsible Party” below.
How do we collect your data?
-
Data you provide to us: This is data you enter into our contact forms, registration fields, or email links.
-
Data collected automatically: Other data is recorded automatically or after your consent by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access).
What do we use your data for? Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze user behavior or process your direct inquiries.
Storage Duration
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (such as statutory retention periods); in the latter case, the data will be deleted once these reasons cease to apply.
Legal Bases for Data Processing on This Website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. If processing is necessary to fulfill a contract or execute pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.
Data processing may also be carried out based on our legitimate interest according to Art. 6(1)(f) GDPR. The specific legal bases for each individual processing case are outlined in the subsequent sections of this privacy policy.
Information on Data Transfer to Non-EU Countries
Our website may use tools from providers based outside the EU (such as the USA). If these tools are active, your personal data may be transferred to these countries and processed there. We point out that a level of data protection comparable to that in the EU cannot be guaranteed in all third countries unless the recipient is certified under an adequacy decision (such as the EU-US Data Privacy Framework) or appropriate standard contractual clauses are signed.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
Right to Log a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to log a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.
Information, Rectification, Restriction, and Erasure
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, the purpose of data processing, and, if necessary, a right to rectification, restriction of processing, or erasure of this data. You can contact us at any time using the address given above.
3. Data Recording on Our Website
Cookies and Tracking Technologies
Our internet pages use so-called “cookies.” Cookies are small text files and do not cause any damage to your end device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device.
-
Necessary Tech: Cookies that are required to carry out the electronic communication process or to provide certain functions you want are stored on the basis of Art. 6(1)(b) GDPR or § 25(2) TDDDG.
-
Consent Tech: Other cookies (e.g., for analysis or marketing) are stored exclusively on the basis of your explicit consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Consent can be revoked at any time via our website’s cookie settings.
Server Log Files
The provider hosting this website automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:
-
Browser type and browser version
-
Operating system used
-
Referrer URL (the site from which you came)
-
Host name of the accessing computer
-
Time of the server request
-
IP address
This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and optimization of this website — the server log files must be recorded for this purpose.
Contact Forms and Direct Inquiries
If you send us inquiries via contact forms or email, your details from the inquiry, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to a contract or pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).
The data you enter will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after processing your inquiry has been completed). Mandatory statutory provisions remain unaffected.
Data Processing
The data collected on this website is stored on the host’s servers. To ensure processing complies fully with data protection regulations, we have concluded a Data Processing Agreement (Vertrag über Auftragsverarbeitung) with our host in accordance with Art. 28 GDPR. Our host processes the data only according to our strict instructions.
5. Security Protocols
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser address bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
