Privacy Policy

1. An overview of data protection

General information

The following information provides an easy-to-navigate overview of what happens with your personal data when you visit this website. “Personal data” comprises all data that can be used to personally identify you. For detailed information, please consult the full Privacy Policy below.

Data recording on this website

Who is responsible? The data on this website is processed by the operator; see “Information about the responsible party (controller)” below.

How do we record your data? Your data are collected when you share them with us (e.g., via a contact form). Other data are recorded automatically or after consent during your visit (e.g., browser, OS, time of access).

What do we use your data for? To ensure error-free provision of the website, analyze user behavior, and – where applicable – handle contract offers, orders, or other enquiries initiated via the website.

Your rights: access, rectification, deletion, restriction of processing, data portability, complaint to a supervisory authority, and revocation of consent.

2. Hosting

Mittwald

Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4‑6, 32339 Espelkamp, Germany. Details: mittwald.de/datenschutz. Legal basis: Art. 6(1)(f) GDPR; with consent: Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Data Processing Agreement

We have concluded a DPA with Mittwald.

3. General information and mandatory information

Data protection

We treat your personal data confidentially and in accordance with applicable law and this Privacy Policy. Internet data transmission may have security gaps.

Information about the responsible party (controller)

Storage duration

Unless specified otherwise, data are stored until the purpose no longer applies or you request deletion/revoke consent. Legal retention remains unaffected.

Legal bases

Processing may be based on Art. 6(1)(a) GDPR (consent), 6(1)(b) (contract), 6(1)(c) (legal obligation), or 6(1)(f) (legitimate interests). Special categories: Art. 9(2)(a). Third‑country transfers based on consent: Art. 49(1)(a). Cookie/device access: § 25(1) TDDDG.

Data Protection Officer

Recipients of personal data

We share data with external parties only if required for contracts, legally mandated, based on legitimate interests, or permitted by law. DPAs/joint processing agreements are in place where required.

Revocation of consent

You may revoke consent at any time; prior processing remains lawful.

Right to object (Art. 21 GDPR)

YOU MAY OBJECT AT ANY TIME TO PROCESSING BASED ON ART. 6(1)(E) OR (F) GDPR, AND TO PROCESSING FOR DIRECT MARKETING.

Right to lodge a complaint

You may lodge a complaint with a supervisory authority. Other remedies remain unaffected.

Data subjects’ rights

Access, rectification, deletion, restriction, portability, and other rights under GDPR.

SSL/TLS encryption

This site uses SSL/TLS. You can recognize it by “https://” and a lock icon.

4. Content Delivery Network

Bootstrap CDN

Provider: NetDNA, LLC (MaxCDN), 3575 Cahuenga Blvd W Suite 330, Los Angeles, CA 90068, USA. Privacy: jsdelivr.com/terms/privacy-policy. Legal basis: Art. 6(1)(f) GDPR.

5. Recording of data on this website

Cookies

We use session/permanent, first‑party/third‑party cookies. Required cookies: Art. 6(1)(f) GDPR; consented technologies: Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can configure your browser accordingly.

Consent with Usercentrics

Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany – usercentrics.com. Data transmitted: consent log, IP, browser/device, timestamp, geolocation. Legal basis: Art. 6(1)(c) GDPR. DPA concluded.

Contact form

Processing based on Art. 6(1)(b) GDPR; otherwise Art. 6(1)(f) or Art. 6(1)(a). Retention until deletion request/revocation/purpose ceases; legal retention unaffected.

Request by e‑mail, telephone, or fax

Processed to handle your request; bases: Art. 6(1)(b)/(f)/(a) GDPR.

6. Analysis tools and advertising

Google Tag Manager

Provider: Google Ireland Limited. Legal basis: Art. 6(1)(f) GDPR; with consent Art. 6(1)(a) GDPR and § 25(1) TDDDG. DPF: participant.

Google Analytics

Consent basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. SCCs: SCCs. Opt‑out: browser add‑on. Info: Help. IP anonymization is active.

Google Ads & Conversion Tracking

Consent basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. SCCs/terms: Frameworks, Controller Terms. DPF: participant.

Meta Pixel

Meta Platforms Ireland Limited. Joint controllership: Controller Addendum. SCCs: EU Data Transfer Addendum. Privacy: Meta Privacy. Opt‑outs: Ad settings, YourOnlineChoices. DPF: participant.

7. Plug‑ins and tools

YouTube (extended privacy mode)

Details: support.google.com/youtube/answer/171780, Privacy Policy.

Google Fonts

Remote: FAQ · Local embedding possible. Privacy: policies.google.com/privacy. DPF: participant.

Google DoubleClick

Consent basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. Info/opt‑out: Technologies, Ad settings.

GStatic

Provider: Google Ireland Limited. Legal basis: Art. 6(1)(f) GDPR.

8. Custom services

Handling applicant data & data archiving period

See details above (legal bases: § 26 BDSG, Art. 6(1)(b)/(a) GDPR; retention up to 6 months, longer with consent or statutory obligations).

9. Our social media appearances

Applies to

Facebook · Instagram · YouTube

Notes on processing, legal basis, responsibility, storage time, and individual networks

As outlined above (joint controllership with platform operators; see the respective privacy policies and agreements).

to the top