Privacy Policy

This is a translation of our German privacy policy, provided for your convenience. In the event of any discrepancy, the German version prevails.

1. Controller

Representation, register details and e-mail address: see the legal notice.

2. Hosting and server logs

This website is operated on Squarespace. The provider is Squarespace Ireland Limited, Ireland, which acts for us as a processor on the basis of a contract under Art. 28 GDPR. On every visit, Squarespace processes the following in its server logs: IP address, date and time, the URL requested, the volume of data transferred, the page visited beforehand (referrer) as well as details of the browser and the operating system. The purposes are the delivery of the pages and the stability and security of the site. The legal basis is our legitimate interest in a secure and functioning web presence (Art. 6(1)(f) GDPR).

For this purpose, Squarespace engages the US company Squarespace, Inc. as a sub-processor; in the process, data may be transferred to the USA. The basis for this is the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, under which Squarespace, Inc. is certified, and, in addition, the European Commission standard contractual clauses (Implementing Decision 2021/914).

3. Cookies and local storage

We use technically necessary cookies only. When you visit the site, Squarespace sets the session cookie “crumb”; it serves session security, protects against forged requests and is deleted when the browser is closed. The website also places an entry “test” in your browser’s local storage in order to check whether that storage is available; it contains no details about you personally.

The legal basis for storing and accessing this information is Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), and for the processing that follows, Art. 6(1)(f) GDPR. We do not use cookies for analysis, for recognising you across several visits or for advertising purposes.

Because we use only cookies that require no consent under Section 25(2) no. 2 TDDDG, this website shows no consent banner. There is therefore nothing for you to agree to and nothing to withdraw.

4. Audience measurement by Squarespace

Squarespace counts page views for us – without cookies and without recognising you across several visits. The analysis covers aggregated data such as the page viewed, the referring page, the type of device and the approximate region. We use this analysis to improve the website. The legal basis is Art. 6(1)(f) GDPR. You may object to this processing under Art. 21 GDPR (section 7).

5. Getting in touch

If you write to us through the contact form, we process the details you enter there: company, name, country, e-mail address, your enquiry and your message. The transmission runs through Squarespace (section 2); the message is delivered to us by e-mail and stored in our mailbox. The same applies to enquiries you address to us directly by e-mail or by telephone.

The purpose is to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR in so far as the enquiry concerns a contract or the steps leading up to one, and otherwise Art. 6(1)(f) GDPR. Providing these details is voluntary; without them we cannot answer your enquiry.

The recipients are Squarespace as our host and the provider of our e-mail mailbox, both as processors. Beyond that we do not pass your enquiry on.

6. Retention period

Squarespace stores server logs for as long as is necessary for operation and security. We keep enquiries for as long as dealing with them and any follow-up questions require, and delete them afterwards. If business results from an enquiry, the retention periods under commercial and tax law apply (Section 257 of the German Commercial Code, HGB; Section 147 of the German Fiscal Code, AO).

7. Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20).

Right to object: in so far as we process data on the basis of our legitimate interest – this concerns the server logs, the necessary cookies and the audience measurement – you may object to that processing under Art. 21 GDPR. A message in text form sent to the contact details given in section 1 is sufficient.

Automated decision-making, including profiling, does not take place.

8. Complaint to a supervisory authority

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

9. Version

This policy applies from 19 September 2026. We will update it as soon as the processing described here changes.