Privacy Policy

1. Controller (Art. 4 No. 7 GDPR)

The controller responsible for the processing of personal data on this website is:

Further information about the operator can be found in the Imprint (Impressum) in accordance with § 5 TMG.

The controller determines the purposes and means of the processing of personal data.

2. Hosting

This website is hosted by:

The website is hosted on infrastructure provided by Hetzner Online GmbH. Personal data collected on this website may be stored and processed on servers located in Germany.

This may include in particular:

• –IP addresses
• –Technical access information
• –Website requests
• –Timestamps
• –Server log data

The hosting provider processes this data only to the extent necessary to ensure the operation, stability, and security of the website.

The hosting provider processes personal data on our behalf. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the provider.

3. Content Delivery Network and Security Services (Cloudflare)

This website uses services provided by:

Cloudflare is used as a content delivery network (CDN), reverse proxy, and security service to improve the performance, availability, and protection of this website.

When accessing this website, requests are routed through Cloudflare's network. As a result, Cloudflare may process personal data such as:

• –IP addresses
• –Browser and device information
• –Request metadata
• –Requested URLs
• –Security-related event information

The processing is carried out for the purpose of providing website content, protecting against malicious traffic, preventing abuse, and ensuring the stability and security of the website.

Cloudflare may process data on servers located within and outside the European Economic Area (EEA). Where personal data is transferred to third countries, appropriate safeguards pursuant to Art. 46 GDPR are applied, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission.

Further information can be found in Cloudflare's Privacy Policy: https://www.cloudflare.com/privacy/

4. Server Log Files

When accessing this website, technical information is automatically recorded in server log files generated by the web server operating this website.

These may include:

• –IP address
• –Date and time of the request
• –Requested resource (URL)
• –HTTP status code
• –Amount of data transferred
• –Referrer URL
• –Browser type and version
• –Operating system

This data is processed for the purpose of ensuring the security, stability, and proper operation of the website, including the detection and prevention of abuse.

The server log data is not merged with other data sources.

Server log files are generally stored for a maximum of 14 days and are then deleted unless further retention is required for security reasons or legal obligations.

5. SSL / HTTPS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us via forms.

You can recognize an encrypted connection by the “https://” address in your browser’s address bar and the lock symbol in the browser.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

6. Cookies

This website uses only technically necessary cookies. Cookies are small text files that are stored on your device by your browser.

These cookies are essential to ensure the proper functioning, usability, and security of the website. They may be used, for example, to maintain login sessions, enable core website functionality, or support security-related features.

Technically necessary cookies do not require user consent under applicable law.

This website currently does not use any analytics, tracking, or marketing cookies.

If such cookies are introduced in the future, they will only be used after obtaining the user's explicit consent in accordance with Art. 6(1)(a) GDPR.

7. Analytics (GhostlyX)

This website uses the privacy-friendly analytics service provided by GhostlyX.

According to the provider, GhostlyX does not use cookies, does not store IP addresses, does not perform browser fingerprinting, and does not create personal visitor profiles. Analytics information is processed exclusively in aggregated form.

GhostlyX is used to measure the performance, stability, and usage of this website in a privacy-conscious manner.

According to the provider, analytics data is processed exclusively within the European Economic Area (EEA).

8. Contact Form

If you contact us via the contact form on this website, the information you provide will be processed to handle and respond to your inquiry.

The processed data may include:

• –Name
• –Email address
• –Subject
• –Message content
• –Technical request metadata (e.g., IP address or pseudonymized network identifiers)
• –Date and time of submission

The processing of this data is carried out solely for the purpose of responding to your inquiry and ensuring the security and proper functioning of our services.

If you contact us directly via email, the data you provide will also be processed for the purpose of handling your request.

The data will be stored only for as long as necessary to process your request and will typically be deleted after six months, unless legal retention obligations require longer storage.

9. Newsletter

If you subscribe to our newsletter, we process the email address you provide in order to send you updates and information.

To ensure that the subscription is authorized, we use a double opt-in procedure. This means that after registering, you will receive a confirmation email before the subscription becomes active.

During the subscription process, the following data may be processed:

• –Email address
• –IP address used during registration
• –Subscription status
• –Timestamps related to registration and confirmation

You may unsubscribe from the newsletter at any time using the unsubscribe link provided in each newsletter email.

You may withdraw your consent at any time with effect for the future.

Your email address will be stored until you unsubscribe from the newsletter.

10. Email Delivery (Resend)

Emails sent through this website (for example newsletter confirmations or contact responses) are delivered using the external email service provider Resend, Inc.

Resend processes the data required for email delivery on our behalf. This may include:

• –Email address
• –Email content
• –Technical delivery metadata (e.g. timestamps and delivery status)

The processing is carried out solely for the purpose of reliably sending transactional and communication emails related to the operation of this website.

Resend acts as a data processor in accordance with Art. 28 GDPR. A Data Processing Agreement (DPA) has been concluded with the provider.

As Resend is located in the United States, personal data may be transferred to a third country. Such transfers are carried out on the basis of appropriate safeguards in accordance with Art. 46 GDPR, in particular through the use of Standard Contractual Clauses (SCCs) adopted by the European Commission.

11. Administrative Access

Certain areas of this website are restricted to authorized administrators.

For authentication and session management purposes, a temporary authentication cookie may be stored in the administrator’s browser after login. This cookie is used solely to maintain the login session and is automatically invalidated after a limited period of time.

Additionally, limited technical information related to the user interface may be stored locally in the browser to improve usability. This information contains only interface-related settings and does not include personal user data.

12. Abuse Prevention and Rate Limiting

To protect the website and its services from abuse, automated attacks, and excessive requests, technical security measures such as request rate limiting are implemented.

These mechanisms may temporarily process technical network information associated with requests, including IP addresses or pseudonymized network identifiers, in order to ensure the availability, stability, and security of our services.

13. Administrative Logging

For operational security, accountability, and system integrity, certain administrative actions may be logged.

These logs may contain limited information such as:

• –The performed administrative action
• –Timestamp of the action
• –Administrator account identifier

The processing of such information is necessary to detect misuse, ensure accountability, and maintain the proper functioning of the system.

14. Recipients of Personal Data

Personal data will only be shared with third parties if this is necessary for the purposes described in this Privacy Policy, if we are legally required to do so, or if you have given your consent.

Recipients may include in particular:

• –Hosting providers
• –Email delivery service providers
• –Technical service providers necessary for the operation of the website

All service providers processing personal data on our behalf do so on the basis of Art. 28 GDPR (data processing agreements).

15. Data Retention

Personal data will be stored only for as long as necessary to fulfill the purpose for which it was collected.

Once the purpose of processing no longer applies, the data will be deleted or anonymized unless legal retention obligations require continued storage.

16. Children and Minors

This website and its services are not specifically directed at children under the age of 16.

If consent is required for processing, users under the age of 16 may only provide such consent with the approval of a parent or legal guardian.

We do not knowingly collect personal data from children under the age of 16 without parental consent. If we become aware that personal data from a child under 16 has been collected without appropriate consent, the data will be deleted without undue delay.

If you believe that a child has provided personal data on this website, please contact us so that we can take appropriate action.

17. Rights of Data Subjects

Under the GDPR, you have the following rights regarding your personal data:

• –Right of access (Art. 15 GDPR)
• –Right to rectification (Art. 16 GDPR)
• –Right to erasure (Art. 17 GDPR)
• –Right to restriction of processing (Art. 18 GDPR)
• –Right to data portability (Art. 20 GDPR)
• –Right to object to processing (Art. 21 GDPR)

If processing is based on consent, you have the right to withdraw your consent at any time with effect for the future.

18. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

The competent supervisory authority for the federal state of Rhineland-Palatinate, Germany, is:

19. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy in order to reflect changes in legal requirements, technical developments, or our services.

The current version of the Privacy Policy will always be available on this website.

If changes significantly affect the processing of personal data, users will be informed in an appropriate manner where required by applicable law.