Privacy Policy

Section 1

Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to the full Privacy Policy set out below.

Data Collection on this Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator's contact details can be found in the section "Controller" in this Privacy Policy.

How do we collect your data?
Your data is collected in part by you providing it to us — for example, data you enter into a contact form. Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you access this website.

What do we use your data for?
Some data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?
You have the right to receive free information about the origin, recipient, and purpose of your stored personal data at any time. You also have the right to request the rectification or deletion of this data. If you have given consent to data processing, you may withdraw that consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You may contact us at any time with regard to this and any other questions on the subject of data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behaviour may be statistically evaluated, primarily using analytics programmes. Detailed information on these programmes can be found in this Privacy Policy.

Section 2

Hosting

Webflow

We host the content of our website with the following provider: Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow"). When you visit our website, Webflow collects various log files including your IP address.

Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the display of the page, the provision of certain website functions, and for security purposes (necessary cookies).

For details, please refer to Webflow's Privacy Policy: webflow.com/legal/eu-privacy-policy

The use of Webflow is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation possible of our website. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, to the extent that consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. Details: webflow.com/legal/eu-privacy-policy

Data Processing Agreement

We have concluded a Data Processing Agreement (DPA) for the use of the above service. This is a contract required under data protection law which ensures that Webflow processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Section 3

General Information & Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Controller

The controller for data processing on this website is:

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Retention Period

Unless a more specific retention period has been stated within this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will occur after those reasons cease to apply.

Legal Bases for Data Processing

Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of data are processed under Art. 9(1) GDPR. In the case of express consent to the transfer of personal data to third countries, processing is also carried out on the basis of Art. 49(1)(a) GDPR. Where data processing is necessary for the performance of a contract or for pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, it is carried out on the basis of Art. 6(1)(c) GDPR. Processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Data Transfers to Third Countries (USA)

We use tools provided by companies based in the USA or other third countries that do not offer a level of data protection equivalent to that of the EU. Where these tools are active, your personal data may be transferred to and processed in those countries. Please note that no data protection standard comparable to that of the EU can be guaranteed in those countries. US companies may be required to disclose personal data to security authorities without you as the data subject being able to take legal action against this.

Withdrawal of Consent

Many data processing operations are only possible with your express consent. You may withdraw consent already given at any time. The lawfulness of data processing carried out prior to the withdrawal is not affected.

Right to Object — Art. 21 GDPR

Right to Lodge a Complaint

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.

Access, Rectification and Erasure

Within the framework of applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, the right to rectification or erasure of this data. You may contact us at any time with regard to this and other questions on the subject of personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in the following circumstances:

If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data. If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of erasure. If we no longer need your personal data but you need it for the establishment, exercise, or defence of legal claims, you have the right to request restriction of processing instead of erasure. If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of processing.

If you have restricted the processing of your personal data, such data may — apart from being stored — only be processed with your consent or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content — such as enquiries you send to us as the site operator — this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Section 4

Data Collection on this Website

Cookies

Our website uses cookies. Cookies are small data packages that do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently on your device (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or until your browser automatically deletes them.

Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites. Cookies have various functions: many are technically necessary (e.g. shopping cart function, video display). Others may be used to analyse user behaviour or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested, or to optimise the website (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. Where consent to the storage of cookies has been requested, processing is carried out exclusively on the basis of that consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); consent may be withdrawn at any time.

You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, and to activate the automatic deletion of cookies when the browser is closed. If cookies are disabled, the functionality of this website may be limited.

Google Analytics

This website uses services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use these services and the associated collection of personal data (in particular IP addresses) based on our legitimate interest in presenting, analysing, and improving our website and adapting potential advertising to your needs (Art. 6(1)(f) GDPR).

Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transferred to and stored on a Google server in the USA.

We have concluded a Data Processing Agreement with Google for the use of Google Analytics and fully implement the strict requirements of the German data protection authorities in using these services.

Demographic Features in Google Analytics

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain information about the age, gender, and interests of website visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be attributed to any specific individual. You can disable this function at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described above.

Contact Form

If you send us enquiries via the contact form, the information you provide in the enquiry form, including the contact details you enter there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.

Enquiries by Email, Telephone, or Fax

If you contact us by email, telephone, or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent may be withdrawn at any time.

The data you send us via contact enquiries will remain with us until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

Section 5

Plugins & Tools

Google Maps

This website uses the map service Google Maps provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transferred to and stored on a Google server in the USA. The operator of this website has no influence on this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online services and easy location of places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as consent includes the storage of cookies or access to information on the user's device within the meaning of the TTDSG; consent may be withdrawn at any time.

Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. For details, see: privacy.google.com/businesses/gdprcontrollerterms and privacy.google.com/businesses/gdprcontrollerterms/sccs.

For more information on the handling of user data, please refer to Google's Privacy Policy: policies.google.com/privacy