Privacy Policy

The controller responsible for processing personal data on this website under the General Data Protection Regulation (GDPR) is: [[PENDING]], [[PENDING]], [[PENDING]] [[PENDING]], Germany. E-mail: [[PENDING]], phone: [[PENDING]].

We process personal data only as far as necessary to provide this website, to handle your inquiries and to ensure security. Below we inform you under Art. 13 GDPR which data we process, for what purpose and on which legal basis.

This website is hosted by Netlify, Inc., [[address per Netlify privacy policy]], USA ("Netlify"). When you access the website, Netlify processes technically necessary data on our behalf, in particular: IP address, date and time of the request, requested page or file, amount of data transferred, HTTP status code, referrer URL, and browser and operating-system information (server log files).

Purpose: delivering the website, ensuring stability and security, defending against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website). Retention: [[PENDING]].

We have [[a data processing agreement under Art. 28 GDPR with Netlify — confirm]]. Because Netlify is based in the USA, personal data may be transferred to the USA. The basis for this is [[adequacy decision (EU-US Data Privacy Framework) if Netlify, Inc. is certified — verify at dataprivacyframework.gov — OR standard contractual clauses under Art. 46(2)(c) GDPR]]. You can obtain a copy of the safeguards on request via the contact details in section 1.

If you contact us by e-mail or phone, we process your details (e.g. name, e-mail address, phone number, content of the inquiry) to handle your request. Legal basis: Art. 6(1)(b) GDPR where the inquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in effectively handling inquiries). We delete the data once it is no longer needed for its purpose and no statutory retention obligations (e.g. commercial and tax law) apply. Our mailbox is operated by [[PENDING]], which acts as our processor. [[confirm DPA and any third-country transfer of this provider]]

Our contact page offers a form. The data you enter is processed: name, e-mail address, [[selected service, if any]] and your message [[verify which technical metadata Web3Forms also processes, e.g. IP address, and add it here]].

To transmit the form we use the form service Web3Forms ([[operator and address per Web3Forms privacy policy]]). When you submit the form, the data is sent to Web3Forms and forwarded by e-mail to us. [[Verify server location, data processing agreement and legal basis for third-country transfer per Web3Forms and enter them here — this section is incomplete without them.]]

Purpose: handling your inquiry. Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR; where you ticked the privacy-policy checkbox, additionally Art. 6(1)(a) GDPR. You may withdraw any consent at any time with effect for the future (contact: see section 1). Name, e-mail address and message are required so that we can answer your inquiry; without them we cannot process it. Retention: see section 4.

We do not set cookies for analytics or marketing. In your browser's local storage we store only:

– "tmx-cookie-consent": your choice in the consent banner including the time, so the prompt does not reappear at every visit.

The display language is not stored; it is determined solely by the address you open (e.g. "/en" for English).

This storage is strictly necessary to apply your choice, and therefore requires no consent under § 25(2) No. 2 TDDDG. Where personal data is processed in the process, the legal basis is Art. 6(1)(f) GDPR. The data stays in your browser until you delete it; it is not transmitted to us or to third parties. You can change your choice at any time via "Cookie settings" in the footer.

We currently use no analytics, tracking or marketing services and embed no content from third-party servers (e.g. fonts, maps, videos). Fonts are served locally from our own server. Should we use such services in the future, we will obtain your consent beforehand via the consent banner and update this policy.

Recipients of your data are exclusively the service providers named above (Netlify, Web3Forms, [[PENDING]]) as far as necessary for the respective purpose. We do not otherwise disclose data to third parties unless legally obliged.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)). To exercise your rights, a message to the contact details in section 1 is sufficient. You also have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: [[PENDING]].

No decision based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR takes place.

We update this privacy policy when our data processing or the legal situation changes. The version published here applies. Last updated: [[PENDING]].