Personal data (hereinafter generally referred to as "data") is processed by us only to the extent necessary for the purpose of providing a functional and user-friendly website, including its content and the services offered on it.
Pursuant to Article 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy policy, we would like to inform you in particular about the type, scope, purpose, duration and legal basis for the processing of personal data, insofar as we alone or jointly with others determine the purposes and means of such processing. We also inform you below about the third-party components we use for these purposes, insofar as third parties process data on our behalf or in their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as controllers
II. Rights of users and data subjects
III. Information on data processing
The controller responsible for this website within the meaning of data protection law is:
For questions regarding data protection, you can reach us at the e-mail address stated above.
We have not appointed a data protection officer, as the legal requirements for doing so do not apply to us.
With regard to the data processing described in more detail below, users and data subjects have the right
The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34, 55116 Mainz, Germany
https://www.datenschutz.rlp.de
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or restriction of processing carried out on the basis of Articles 16, 17 (1), 18 GDPR. However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Right to object: Pursuant to Art. 21 GDPR, users and data subjects also have the right to object at any time to the future processing of data concerning them, insofar as the data is processed by the provider pursuant to Art. 6 (1) (f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.
Your data processed when using our website will be deleted or blocked as soon as the purpose for storage ceases to apply, provided the deletion of the data does not conflict with any statutory retention obligations, and unless otherwise stated below for individual processing procedures.
For security reasons and to protect the transmission of confidential content (e.g. contact requests), our website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar begins with "https://".
Our website is hosted and delivered entirely via the infrastructure of the Cloudflare service (Cloudflare Pages). No separate origin server is used. Cloudflare acts as a hosting platform and content delivery network (CDN) to optimise load times and to secure our website (e.g. protection against attacks and abuse). The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA ("Cloudflare"). For users in the European Economic Area, Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany, may also act as the contracting party and point of contact.
When you access our website, your requests are routed via Cloudflare's servers. In doing so, technically necessary access data is processed, including your IP address, the page(s) accessed, browser type and version, operating system used, referrer URL, date and time of access, and request metadata. This data serves the correct delivery and optimisation of our content, ensuring the functionality of our IT systems, and IT security. We do not combine this data with other data sources for profiling purposes.
Cookies. To ensure security and functionality, Cloudflare sets technically necessary cookies on your device:
| Cookie | Purpose | Retention period |
|---|---|---|
__cf_bm | Distinguishing between human users and automated access (bot detection) | approx. 30 minutes |
cf_clearance | Evidence of a successfully completed security check; only set if such a check has been triggered | as configured, by default approx. 30 minutes |
Since these cookies are strictly necessary for providing the service you have expressly requested, no consent is required pursuant to Section 25 (2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). We do not use any analytics, tracking, or marketing services via Cloudflare.
Legal basis for the processing is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, reliable, and performant provision of our website.
Data processing agreement and third-country transfer. We have entered into a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. Insofar as data is transferred to the USA in this context, this is done on the basis of the Standard Contractual Clauses approved by the EU Commission as appropriate safeguards within the meaning of Art. 46 (2) (c) GDPR. In addition, Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so the transfer can also be based on the adequacy decision of the EU Commission (Art. 45 GDPR).
We would like to point out that the USA does not have a level of data protection comparable to that of the European Union, and in particular that access to the transferred data by US authorities cannot be completely ruled out.
Further information on data protection at Cloudflare is available at https://www.cloudflare.com/privacypolicy/.
For the technical provision and execution of server-side functions of our website, in particular the receipt and forwarding of contact requests, we use Cloudflare Workers, also a service provided by Cloudflare. Cloudflare Workers processes technically necessary data (including IP address and request metadata) on Cloudflare's distributed servers in order to execute the respective function.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the performant and reliable provision of server-side functions of our website.
The information provided in the preceding section on Cloudflare applies accordingly to the data processing agreement and third-country transfer.
When you access our website, general data and information is automatically collected in log files, including browser type and version, operating system used, referrer URL, sub-pages accessed, date and time of access, and IP address. This data serves the correct delivery and optimisation of our content, ensuring the functionality of our IT systems, and IT security. We do not combine this data with other data or draw any conclusions about you as a person.
These access logs are generated exclusively within Cloudflare's infrastructure, as we do not operate a separate origin server. They are stored by Cloudflare only for as long as necessary for the aforementioned purposes, in particular the detection and prevention of attacks, and are then deleted or anonymised. We have no direct influence on the specific retention period at Cloudflare; please refer to Cloudflare's privacy policy for details.
Storage beyond the periods mentioned only takes place if this is necessary to clarify specific security incidents. In this case, the relevant log data is excluded from deletion until the incident has been fully clarified.
The legal basis is Art. 6 (1) (f) GDPR.
If you contact us via the contact form or by e-mail, the data you provide (in particular your name, e-mail address, and the content of your message) will be used to process your request. Providing this data is necessary to process and respond to your request – without it, we may not be able to answer your request, or only to a limited extent.
The legal basis for this processing is Art. 6 (1) (b) GDPR, insofar as your request serves to initiate or perform a contract, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in responding to requests addressed to us.
Your data will be deleted once your request has been conclusively answered and provided that deletion does not conflict with statutory retention obligations, but no later than 6 months after the final response. If a contractual relationship follows, the statutory retention periods apply, in particular pursuant to Section 257 of the German Commercial Code (HGB) (6 or 10 years) and Section 147 of the German Fiscal Code (AO) (generally 10 years).
Contact requests submitted via our contact form are processed via the Web3Forms service before reaching our e-mail inbox. The provider is Web3Creative, Kerala, India ("Web3Forms"). The data provided in the contact form (in particular name, e-mail address, and message content), as well as technical transmission data, is processed in this context.
According to Web3Forms, form submissions themselves are not permanently stored, but are processed and forwarded to our e-mail inbox or the configured endpoint. Server logs may temporarily contain personal data; according to Web3Forms, these are deleted periodically, approximately every two months.
As with the contact request itself, the legal basis is Art. 6 (1) (b) or (f) GDPR respectively.
Processing takes place on Web3Forms' servers in the USA (US-East region). Web3Forms states that it is confident of complying with the GDPR but notes that it cannot make any binding legal representation to that effect. We are not currently aware of a data processing agreement pursuant to Art. 28 GDPR, Standard Contractual Clauses, or a certification under the EU-U.S. Data Privacy Framework having been established with Web3Forms. We would like to point out that the USA does not have a level of data protection comparable to that of the European Union, and that access to the transferred data by US authorities cannot be completely ruled out.
Further information is available at https://web3forms.com/privacy.
For our business e-mail communication related to this website – in particular for processing and responding to contact requests – we use the e-mail mailbox of our provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany ("IONOS"). Data processing takes place on servers within the EU/Germany. Retrieval and sending take place exclusively via transport-encrypted connections. Your messages are not automatically forwarded to third parties or to mailboxes outside this provider.
We have entered into a data processing agreement with IONOS pursuant to Art. 28 GDPR.
The legal basis for the processing is Art. 6 (1) (b) GDPR, insofar as the communication serves to initiate or perform a contract, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in reliable and secure business e-mail communication.
We do not use automated decision-making in individual cases, including profiling, within the meaning of Art. 22 GDPR.
We will adapt this privacy policy as soon as changes to our data processing or the applicable legal framework make this necessary. The version published on this page shall apply.
Last updated: 05 August 2026