Privacy Policy

Privacy Policy

The protection of your personal data is an important concern for us. Below, we inform you pursuant to Art. 13 GDPR about the processing of personal data when using our website.

1. Controller

2. General Information on Data Processing

The use of our website is generally possible without providing personal data. Personal data is only collected if you voluntarily provide it to us, for example via a contact form or by email.

We process personal data exclusively within the framework of the legal provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Collection and Storage of Personal Data

a) When Visiting the Website

When you access our website, the hosting provider automatically collects the following data:

• IP address
• Date and time of the request
• Browser type and version
• Operating system
• Referrer URL

This data is used exclusively for technical monitoring and security (Art. 6 para. 1 lit. f GDPR) and is not used to identify you personally.

b) Contact Requests (Form or Email)

If you contact us via contact form or email, the following data will be processed:

• Name (if provided)
• Email address
• Phone number (if provided)
• Content of the message

The processing is carried out to handle your request pursuant to Art. 6 para. 1 lit. b GDPR.

4. Cookies

Our website uses technically necessary cookies. These cookies are required to display the website correctly and to provide its functions.

If additional cookies, such as analytics or marketing cookies, are used, this will only take place after your explicit consent via the cookie banner (Art. 6 para. 1 lit. a GDPR).

5. Cloudflare

This website uses the Cloudflare service (Cloudflare Inc., USA) to secure and optimize the website. Cloudflare processes, among other things, IP addresses.

The use is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in security and performance). Cloudflare is certified under the EU-US Data Privacy Framework.

a) Google Maps

This website uses Google Maps to display interactive maps and to make our location easier to find. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there.

Google Maps is only used after your explicit consent via the cookie consent banner (Art. 6 para. 1 lit. a GDPR).

Google is certified under the EU-US Data Privacy Framework. Further information on how user data is handled can be found in Google’s privacy policy:
https://policies.google.com/privacy

b) Contact Forms (WPForms)

On our website, we use the WordPress plugin “WPForms” to provide contact forms.

If you contact us via a form, the data you enter, such as name, email address, phone number, and message, will be stored and processed to handle your request.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR (pre-contractual measures or handling your request).

The transmitted data remains on our server and will not be passed on to third parties without your consent.

c) Hosting (DigitalOcean)

This website is hosted by DigitalOcean LLC, 101 Avenue of the Americas, 10th Floor, New York, NY 10013, USA.

DigitalOcean processes personal data, such as IP addresses and server log files, as part of the technical provision and security of the website.

Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and reliable operation of the website).

DigitalOcean is certified under the EU-US Data Privacy Framework. Further information can be found in DigitalOcean’s privacy policy:
https://www.digitalocean.com/legal/privacy-policy

6. Disclosure of Data

Personal data is generally not disclosed to third parties unless:

• it is legally required
• it is necessary for contract processing
• you have explicitly consented

7. Storage Period

Personal data is only stored for as long as necessary to process the request or as long as statutory retention periods apply.

8. Rights of the Data Subject

You have the right at any time to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

Please send requests to the contact address stated above.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

10. Data Security

We use technical and organizational security measures to protect your data against manipulation, loss, or unauthorized access.

11. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy in order to comply with current legal requirements.