Privacy Policy

01.Introduction

With the following privacy policy, we would like to inform you about which types of your personal data (hereinafter also referred to as 'data') we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as the 'online offering'). The terms used are not gender-specific.

02.Controller

03.Overview of Processing

04.Relevant Legal Bases

Consent (Art. 6(1)(a) GDPR); performance of contracts (Art. 6(1)(b) GDPR); legitimate interests (Art. 6(1)(f) GDPR); BDSG and applicable state-specific regulations apply.

05.Security Measures

Technical and organizational measures including SSL/TLS encryption and IP masking per legal requirements.

06.Transfer of Personal Data

Data may be transferred to processors, IT service providers, payment and logistics providers per DPAs.

07.Data Processing in Third Countries

Per Art. 44 et seq. GDPR, based on adequacy decisions or Standard Contractual Clauses.

08.Deletion of Data

Data deleted per legal requirements when consents revoked or purposes lapse. Commercial/tax law retention periods (6–10 years) remain unaffected.

09.Use of Cookies

Session cookies are deleted after the browser is closed. Permanent cookies remain stored even after the browser is closed. Consent management tool manages revocation. Opt-out via browser settings or aboutads.info, youronlinechoices.com.

10.Provision of Online Offering and Web Hosting

Usage data, meta/communication data collected via server logs recording domain, IP, date/time, browser, OS, referrer URL. A content delivery network (CDN) is used to improve speed and reliability.

11.Blogs and Publishing Media

IP addresses stored for unlawful content defense. Profile pictures via Gravatar (Automattic Inc.) when emails provided.

12.Contact and Inquiry Management

Master/contact/content data for handling inquiries via form, email, phone, social media. Legal basis: contract performance (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f)).

13.Newsletter and Electronic Notifications

This website currently offers no newsletter or comparable electronic notification service and therefore processes no personal data for this purpose.

14.Web Analysis, Monitoring and Optimization

No web analytics or tracking tools are currently used on this website.

15.Presence in Social Networks

The company currently maintains no own profiles in social networks (e.g. Facebook, LinkedIn, Xing, Twitter/X, YouTube).

16.Plugins and Embedded Functions

Google Fonts, Google Maps, YouTube videos (enhanced privacy mode). Legal basis: legitimate interests or consent.

17.Changes and Updates

Regular review and adjustments to this privacy policy as needed.

18.Rights of Data Subjects

• Right to object (Art. 21 GDPR)
• Right of withdrawal for consents (Art. 7(3))
• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure and restriction (Art. 17 & 18)
• Right to data portability (Art. 20)
• Right to lodge complaint with supervisory authority (Art. 77)

19.Definitions