1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information

We process your personal data only to the extent necessary to provide a functional website and to answer your enquiries. Processing is based on Art. 6(1) GDPR, in particular the performance of pre-contractual measures or a contract (point b), compliance with legal obligations (point c), our legitimate interests (point f) or, where applicable, your consent (point a).

3. Hosting and server log files

This website is hosted by the following provider: STRATO. We have concluded a data processing agreement with this provider in accordance with Art. 28 GDPR.

When you visit the website, the server automatically records technical data transmitted by your browser: IP address, date and time of the request, the page requested, the referring page, browser type and version, and operating system. This data is required to deliver the website securely and reliably (Art. 6(1)(f) GDPR) and is deleted after a short period unless it must be retained to investigate a security incident.

4. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

5. Contact form and enquiries

If you send us an enquiry via the contact form, by email or by phone, we process the data you provide (name, company, email address, phone number, service of interest and the content of your message) in order to handle your enquiry and any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or to pre-contractual measures, and otherwise our legitimate interest in responding to enquiries addressed to us (Art. 6(1)(f) GDPR).

Enquiries sent via the form are stored in our system and forwarded to us by email. We do not store your IP address together with the enquiry. The data is deleted as soon as it is no longer required for the purpose for which it was collected, unless statutory retention obligations apply (e.g. under § 257 HGB or § 147 AO where the enquiry leads to a business relationship).

To protect the form against automated submissions (spam) we use technical measures that do not require cookies or external services.

6. Cookies

The design of this website does not set its own cookies and does not load fonts, scripts or content from third-party servers. Information is only stored on, or read from, your device where this is strictly necessary to provide the service you requested (§ 25(2) TDDDG) or where you have given your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

If we use cookies or services that require consent, detailed information and the option to give or withdraw your consent at any time are available in our cookie manager and, where applicable, in our cookie policy.

7. Recipients and transfers to third countries

We only pass your data on to third parties where this is necessary for the purposes described (e.g. to our hosting or email provider), where we are legally obliged to do so, or where you have given your consent. No transfer of data to countries outside the European Union or the European Economic Area is intended.

8. Your rights

With regard to your personal data you have the following rights at any time and free of charge:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): where processing is based on our legitimate interests (Art. 6(1)(f) GDPR), you may object to it at any time on grounds relating to your particular situation.

To exercise your rights, simply contact us using the details given in section 1. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is that of the German federal state in which we have our registered office.

9. Obligation to provide data and automated decision-making

You are not obliged to provide us with personal data. However, we cannot process your enquiry without the fields marked as required in the form. We do not use automated decision-making or profiling (Art. 22 GDPR).

10. Changes to this policy

We may update this privacy policy to reflect changes in the law or in our services. The version published at the time of your visit applies.