Privacy policy

Controller

Website and hosting

The website is hosted on a managed xCloud server in Frankfurt, Germany. Hosting and security logs may contain your IP address, access time, requested URL, browser information and response status. These data are used to deliver the website, diagnose faults and prevent abuse, based on legitimate interests under Article 6(1)(f) GDPR. Logs are retained according to the hosting service’s log rotation and only as long as needed for operation, security and investigation of incidents.

Contact by email

When you submit the contact form, your name, email address and message are transmitted securely to this website’s server and forwarded to the published Google Gmail inbox through xCloud Managed Email (Elastic Email). These details are processed to answer your enquiry or prepare a contract (Article 6(1)(b) GDPR), or to handle other correspondence (Article 6(1)(f) GDPR). The published contact address uses Google Gmail. Correspondence is kept for the duration of the enquiry and any resulting business relationship; contractual or accounting records may be retained where legally required. Providing these details is voluntary, but an email address and message are needed to answer you. The website does not keep a separate archive of form messages. To prevent abuse (Article 6(1)(f) GDPR), it uses a hidden bot field, temporary signed tokens and sending limits. A keyed hash of the IP address is used for short-term limits (15 minutes); token records expire after two hours and anonymous sending timestamps cover the current month to protect the email quota. Expired records are removed when the next submission is processed. Ordinary hosting logs and the email providers’ processing also apply. No third-party CAPTCHA is loaded.

Privacy preferences

Necessary browser storage remembers your privacy choices for up to 180 days. Optional external media and configured analytics require consent under Article 6(1)(a) GDPR and § 25(1) TDDDG. Strictly necessary storage is covered by § 25(2) TDDDG. You can refuse optional categories or withdraw consent at any time using Cookie settings. Withdrawing consent does not affect earlier lawful processing.

External media and recipients

YouTube (Google) and Wistia videos only load after you allow external media. The editor can also include Vimeo and Instagram. Loading an embed sends technical information, such as IP address, device/browser details and the page accessed, to the provider; playback interactions and cookies may also be processed. If you are logged into that provider, it may associate the interaction with your account. Ordinary links to social profiles only navigate to the provider when you click them.

International processing

The hosting server is in Germany. Access by service providers and the use of Elastic Email, Gmail or embedded media can involve processing outside the European Economic Area, including in the United States. The providers’ notices and contractual data protection terms describe their recipients, retention and applicable transfer mechanisms, such as adequacy decisions or standard contractual clauses. Their notices are linked below.

Your rights

Where the legal conditions apply, you may request access, rectification, erasure, restriction and portability under Articles 15–20 GDPR. Under Article 21 GDPR you may object to processing based on legitimate interests for reasons relating to your situation. You may withdraw consent at any time. Send requests to the contact address above. This website does not itself use automated decision-making with legal or similarly significant effects.

Provider privacy notices

Complaints

You may complain to the Berlin Commissioner for Data Protection and Freedom of Information or another competent supervisory authority under Article 77 GDPR. datenschutz-berlin.de