Data protection notice

1. Controller

2. Legal bases & purposes

Data is processed solely under the GDPR/BDSG. Relevant bases: Art. 6(1)(b) (contract/pre-contract), (c) (legal duty), (f) (legitimate interests) GDPR.

Purposes: secure delivery of this site, error/security analysis, and handling enquiries sent by email.

3. Server logs (legitimate interest)

The hosting provider automatically records page requests (URL, timestamp, data volume, referrer, browser/version, OS, IP address – stored in truncated form). Processing serves technical delivery, stability, and security (Art. 6(1)(f) GDPR). Logs are stored briefly and deleted unless required for security investigation.

4. Cookies

This website currently uses only technically necessary cookies (if any) for essential functions such as session handling. No tracking or marketing cookies are used.

5. Email contact

When you contact us by email we process the data you provide (address, content, name) to answer the enquiry (Art. 6(1)(b)/(f) GDPR) and delete it once handling is complete unless retention duties apply.

6. Newsletter

No newsletter is currently offered. If one is launched, we will explain procedures, legal basis, logging, and opt-out (double opt-in per Art. 6(1)(a) GDPR).

7. Third-party content

No external services (fonts, maps, video, etc.) are embedded at present. Any future integration will only occur after transparent information on provider, data types, legal basis, and opt-out options.

8. Processing / hosting

The site is hosted within the EU. Where required we have a data processing agreement pursuant to Art. 28 GDPR. Processing occurs exclusively inside the EU/EEA.

9. Retention

Personal data is kept only as long as necessary for the stated purposes or statutory retention periods; afterwards it is deleted or anonymised.

10. Security

Transmission is encrypted (TLS/HTTPS). We employ appropriate organisational and technical measures to protect data.

11. Your rights

• Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consent with future effect (Art. 7(3))
• Complaint to a data protection authority (Art. 77)

Send a simple request to the email address above to exercise your rights.

12. Transfers to third countries

Data is not transferred outside the EU/EEA.

13. Minors

This site is not directed at minors. Persons under 16 should not send personal data without parental consent.

14. Updates

We update this notice if regulations, processing activities, or services change. Status: 03 Sep 2025.