Privacy Policy

• Master data (e.g. names)

• Contact data (e.g. email addresses, phone numbers)

• Content data (e.g. text you enter in the contact form)

• Usage data (e.g. pages visited, time of access)

• Meta and communication data {e.g. device Information, IP addresses)

4. Legal bases

5. Hosting

This website is built and hosted with the website builder Onepage, provided by Onepage GmbH, Hanauer Landstraße 172, 60314 Frankfurt am Main, Germany. Onepage processes the data generated when you visit the website or use the contact form on our behalf. We have concluded a data processing agreement with Onepage in accordance with Art. 28 GDPR.

Onepage uses sub-processors, in particular Amazon Web Services EMEA SARL (Luxembourg) and Google Cloud EMEA Umited (lreland) with data processing inside the EU, and Cloudflare, lnc. (USA) for content delivery, DNS and protection against attacks. A transfer of data to the USA cannot be ruled out in the case of Cloudflare. Cloudflare is certified und er the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a secure and efficient website (Art. 6 (1) (f) GDPR).

When you visit our website, your browser automatically transmits information such as your IP address, date and time of access, the page requested, the referring URL, browser type and operating system. This data is technically necessary to display the website and to keep it stable and secure (Art. 6 (1) (f) GDPR). lt is not combined with other data sources and is deleted after a short period.

When you send us an enquiry via the contact form, we process the details you enter (name, email address, optionally the service you are interested in, and your message) in order to handle your enquiry and communicate with you. Enquiries are transmitted to us and stored via Onepage’s form system. The same applies if you contact us by email or phone.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). We delete the data as soon as it is no longer needed and no statutory retention periods apply.

Providing your data is nelther required by law nor by contract. Without your name, email address and message, however, we cannot process your enquiry via the form.

We embed videos from YouTube, provided by Google lreland limited, Gordon House, Barrow Street, Dublin 4, lreland. The video is first shown as a preview image only, delivered by our own host. A connection to YouTube’s servers is established only after you have agreed to the category „External media“ in our privacy notice and started the video. Your IP address and Information about your device are then transmitted to Google, and YouTube may use cookies or similar technologies. if you are logged in to your Google account, YouTube can link the playback to your account.

Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), which you can withdraw at any time via the „Cookie settings“ link at the bottom of every page. Google’s privacy policy: policies.google.com/privacy

We do not use analytics or marketing cookies on this website and do not use any tracking services. On your first vlsit, we show a privacy notice in which you can decide whether external media (YouTube) may be loaded. Your choice and its date are stored only locally in your browser (local storage) so that the notice does not appear on every visit. This storage is technically necessary (§ 25 (2) No. 2 TDDDG, Art. 6 (1) (c) and (f) GDPR) and is not transmitted to us or any third party.

Where other technically necessary cookies are used to operate the website, this is also based on § 25 (2) TDDDG and Art. 6 (1) (f) GDPR. You can change your choice at any time via the „Cookie settings• link at the bottom of every page. You can also delete stored data in your browser settings.

We maintain profiles on social networks in order to communicate with customers, prospects and users there and to inform them about our services. Data may be processed outside the European Union. The platform operators generally also use the data for market research and advertising and create usage profiles for this purpose.

The legal basis is our legitimate interest in informing and communicating with users effectively (Art. 6 (1) (f) GDPR). lf a platform asks for your consent, the legal basis is Art. 6 (1) (a) GDPR. Requests for information and other data subject rights are best addressed directly to the platform operators. lf you still need help, feel free to contact us.

• Facebook and lnstagram: Meta Platforms lreland Limited, Merrion Road, Dublin 4, lreland. Privacy policy: facebook.com/privacy/policy
• YouTube: Google lreland Limited, Gordon House, Barrow Street, Dublin 4, lreland. Privacy policy: policies.google.com/privacy
• Linkedln: linkedln lreland Unlimited Company, Wilton Place, Dublin 2, lreland. Privacy policy: linkedin.com/legal/privacy-policy

12. How we protect your data

We take appropriate technical and organisational measures in accordance with Art. 32 GDPR to ensure a level of security appropriate to the risk. This website is delivered exclusively via encrypted HTTPS
(SSL/TLS). Should a data breach occur that puts your rights at risk, we will inform the competent supervisory authority within 72 hours and notify affected persons where required by law.

13. Retention

We delete personal data or restrict its processing in accordance with Art. 17 and 18 GDPR as soon as it is no longer needed for its purpose and no statutory retention obligations apply. Under German law, business records are kept for up to 10 years (§ 147 AO, § 257 HGB) and business letters for 6 years (§ 257 HGB).

14. Your rights

You have the right to access the data we hold about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR). to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Right to withdraw consent: You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR).

Right to object: You can object to the future processing of your data at any time in accordance with Art. 21 GDPR, in particular to processing for direct marketing.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.

15. Changes to this policy

We update this privacy policy whenever changes to our website or the legal situation require it. The current version on this page applies.