Privacy Policy

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

The following overview summarizes the types of data processed, the purposes of processing, and the categories of data subjects.

The processing of personal data is based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR)
• Contract fulfillment / pre-contractual measures (Art. 6(1)(b) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR), particularly in the secure, stable, and user-friendly provision of the website

We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to ensure a level of protection appropriate to the risk.

These include measures to ensure the confidentiality, integrity, and availability of data, as well as protection against unauthorized access.

The entire website is transmitted encrypted using SSL/TLS technology (HTTPS).

This website is served statically via Netlify. Contact requests are processed through Netlify Functions; pseudonymized per-IP and aggregated hourly/daily abuse-prevention counters are processed through Netlify Blobs. For technical audience measurement, we use Netlify Web Analytics based on server and CDN logs generated by Netlify.

• Server location: depends on the respective service and CDN node
• Data transfers to third countries: may occur depending on the service used; where required, they are based on appropriate safeguards, especially contractual data protection agreements

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical provision, security, stability, and audience measurement of the website)

This website does not use tracking cookies and does not request statistics consent. Only necessary or user-friendly local storage for language, display preferences, and PWA update status is used. Netlify Web Analytics is based on server and CDN logs and does not set cookies or local browser storage. Simple Analytics is embedded as privacy-friendly, cookieless audience measurement and does not create personal profiles.

Hosting, form processing, and email infrastructure

We use external service providers to operate the website, provide technical audience measurement, process contact requests, and provide privacy-friendly client-side statistics. Advertising, retargeting, or social media pixels are currently not integrated.

• Providers: Netlify, Inc. (hosting, Netlify Web Analytics, form processing, and pseudonymized/aggregated abuse-prevention data), Resend, Inc. (email delivery), Simple Analytics (client-side web analytics)
• Server location/data transfer: depends on the provider; individual services may process data outside the EU
• Legal bases: Art. 6(1)(f) GDPR (operation, security, abuse prevention, technical audience measurement, and improvement of the online offering), Art. 6(1)(b) GDPR (pre-contractual measures), and Art. 28 GDPR (data processing agreement)

Netlify Web Analytics is generated server-side from server and CDN logs and does not set browser cookies. Contact-form protection uses no external CAPTCHA or challenge cookies. Simple Analytics is used without cookies, fingerprinting, user/device IDs, full event URLs, marketing, retargeting, or session replay.

Fonts (local embedding)

This website uses the Inter font, which is embedded locally on our server.

No connection to external provider servers occurs and no data is transferred to third parties.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent presentation of the online offering)

Services not used

This website does not use:

• Google Analytics or Google Tag Manager
• Social media pixels
• Advertising or retargeting services
• Newsletter signup on the website

Confirmation emails and internal notifications for contact requests are sent via the Resend service.

Service provider: Resend, Inc.

Data transmitted:

• Email address
• Name and company
• Email content or information from the contact request

Processing: based on the provider's data protection agreements; transfers to third countries may occur and are secured by appropriate safeguards where required

Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (data processing agreement)

More information: resend.com/legal/privacy-policy

When contacting us (e.g., by email), the following data is processed:

• Name
• Company
• Email address
• Phone number where requested
• Information from selection fields about situation, goals, timeline, or requested service
• Language and source of the request

Purpose: Processing of the inquiry

Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR

Storage duration: until the inquiry is fully processed and in accordance with statutory retention periods

Unless a more specific storage duration is stated in this privacy policy, we only process and store personal data for as long as necessary to achieve the respective purposes or as required by statutory retention periods.

The provision of personal data is neither legally nor contractually required.

However, without the provision of certain data (e.g., email address when contacting us), requests cannot be processed.

Automated decision-making, including profiling pursuant to Art. 22 GDPR, does not take place.

Data subjects have the following rights in particular:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Revocation of given consents
• Complaint to a supervisory authority

We reserve the right to adapt this privacy policy to comply with legal or technical changes. The current version is always available on this website.