Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information on data processing

In principle, we process our users' personal data only to the extent necessary to provide a functioning website as well as our content and services. Processing is carried out on the basis of the applicable legal provisions, in particular the GDPR and the German Federal Data Protection Act (BDSG).

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, the host automatically collects information in so-called server log files that your browser transmits. This includes in particular:

• IP address of the requesting device
• date and time of access
• page / file requested
• amount of data transferred and access status
• browser type and operating system, referrer URL

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and stable provision of the website). Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

4. Contact form and email contact

If you contact us via the contact form or by email, we process the data you provide (name, email address, optionally company and phone number, and your message) in order to handle your request.

The legal basis is Art. 6 (1) (b) GDPR where your request is aimed at concluding or performing a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). The data is deleted once the request has been conclusively processed and no statutory retention obligations prevent deletion.

Delivery via Resend

For the reliable delivery of emails resulting from the contact form, we use the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). The data entered in the form is transmitted to Resend and processed there for the purpose of delivery. A data processing agreement is in place; the transfer to the USA is safeguarded by Standard Contractual Clauses.

5. Spam protection (Cloudflare Turnstile)

To protect the contact form against automated submissions (bots), we use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks whether an input is made by a human and processes technical information such as the IP address and browser data for this purpose.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse and spam). The transfer to the USA is safeguarded by Standard Contractual Clauses. Further information: cloudflare.com/privacypolicy.

6. Fonts (Google Fonts)

To display fonts consistently, this website uses so-called Google Fonts provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When a page is accessed, your browser loads the required fonts from a Google server; your IP address is transmitted to Google in the process.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a consistent and appealing presentation). Further information: policies.google.com/privacy.

7. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.

8. Your rights

As a data subject, you have the following rights:

• information about the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority includes the Hessian Commissioner for Data Protection and Freedom of Information.

Last updated: July 2026