Privacy policy

Last updated: 30 August 2026

1. Controller

2. Website delivery and server logs

When this website is accessed, the web server processes technically necessary connection data. This may include the IP address, date and time, requested file, amount of data transferred, referrer URL, browser, operating system and access status. Processing serves the secure and reliable delivery of the website and the prevention and investigation of attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website. The hosting provider we use may receive this data. Log data is deleted when it is no longer required for these purposes, unless longer retention is necessary to investigate a specific security incident or to comply with legal obligations.

3. Technically necessary session

The website uses a technically necessary PHP session to secure the contact form. A random session identifier is stored in a session cookie. It is required for security functions such as CSRF protection, limiting repeated submissions and displaying form messages. It is not used for advertising or audience measurement and is deleted when the browser is closed. The legal basis is Article 6(1)(f) GDPR; access is necessary to provide the form expressly requested by the user.

4. Contact form and enquiries

If you contact us via the form or by email, we process the data you provide – in particular your name, email address, subject, message and the time of the enquiry – solely to handle and answer your request. Required fields are limited to the data needed to respond.

Where an enquiry concerns a contract or pre-contractual steps, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR; our legitimate interest is the appropriate handling of incoming enquiries. The checkbox in the form merely records that you have read this privacy policy and does not constitute blanket consent to any additional processing.

The message is sent on the server to the business email recipients configured for the website. Technical providers used for hosting and email delivery may also receive the data. We delete enquiry data once the request has been fully dealt with and there are no statutory retention duties or legitimate interests requiring further storage. Business or tax-relevant correspondence may be retained for the applicable statutory periods.

5. External links and social networks

This website only contains ordinary links to external providers such as Facebook and Instagram. No content from these providers is loaded and no data is transferred to them merely by visiting our website. Their respective privacy policies apply only after you follow such a link.

6. No analytics or marketing services

This website currently uses no web analytics, advertising, tracking or embedded social-media services. Fonts and images are served locally from our own web server.

7. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. To exercise your rights, please contact us using the details above.

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority includes:

9. Encryption

The website should be made available exclusively over HTTPS. This encrypts transmission between your browser and our web server. Subsequent delivery of a form message by email depends on the configuration of the mail servers involved.