Privacy Policy

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the file retrieved,
• the website from which the access is made (referrer URL),
• the browser used and, where applicable, the operating system of your computer as well as the name of your access provider.

We process the data listed above for the following purposes:

• ensuring that a connection to the website is established without difficulty,
• ensuring convenient use of our website,
• evaluating system security and stability, and
• for further administrative purposes.

The legal basis for this data processing is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for collecting data listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

In addition, we use cookies and analysis services when you visit our website. You will find further explanations on this in sections 5 and 6 of this privacy policy.

2.2 Contact form and contact enquiries

We provide a contact form on our website. If you use it, the data you enter (name, company, e-mail address, telephone number, subject and your message) is processed for the purpose of handling your enquiry and in case of follow-up questions.

To send the contact form we use the service Web3Forms, provided by Backboard IO (USA). The data entered in the form is transmitted via the servers of Web3Forms in order to be forwarded to our e-mail address. This may involve a transfer of personal data to the USA (a third country).

If you send us enquiries by e-mail, the details from your enquiry, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass this data on without your consent.

Your data is therefore processed exclusively:

• on the basis of your consent (Art. 6 (1) lit. a GDPR),
• for the purpose of performing a contract (Art. 6 (1) lit. b GDPR), or
• on the basis of our legitimate interest (Art. 6 (1) lit. f GDPR).

You may object to the processing of your data at any time or withdraw your consent to its storage (see section 7 of this privacy policy under the headings “Objection” and “Withdrawal of consent”). Mandatory statutory provisions – in particular retention periods – remain unaffected.

• you have given your express consent to do so pursuant to Art. 6 (1) sentence 1 lit. a GDPR,
• disclosure pursuant to Art. 6 (1) sentence 1 lit. f GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed,
• in the event that a legal obligation to disclose exists pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and
• this is legally permissible and necessary pursuant to Art. 6 (1) sentence 1 lit. b GDPR for the performance of contractual relationships with you.

6.2 Data processed and retention

Google Analytics uses cookies, in particular “_ga” and “_ga_FTGSWVPRY1”. The data processed is primarily: pages visited and time spent, the source of the visit, approximate location derived from the IP address, device type, browser, operating system and screen resolution, as well as a randomly assigned pseudonymous identifier.

Google Analytics 4 does not store full IP addresses. The IP address is used solely to derive coarse location information and is then discarded. This data does not allow us to identify you directly.

The cookies named above have a lifetime of up to 24 months. The retention period for usage data in Google Analytics is limited to a maximum of 14 months.

A data processing agreement pursuant to Art. 28 GDPR is in place with Google.

6.3 Transfer to the USA

A transfer of personal data to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; transfers to the USA are therefore covered by an adequacy decision of the European Commission pursuant to Art. 45 GDPR. In addition, Google has entered into standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR.

Despite these safeguards, access by US authorities to the transmitted data cannot be entirely excluded. If you wish to avoid this, please do not give your consent to audience measurement.

6.4 Consent Mode and withdrawal

We use Google Consent Mode v2. Even before you decide, storage for analytics and advertising purposes is technically set to “denied”; it is only changed to “granted” after your consent.

You can withdraw your consent at any time using the “Cookie settings” link in the footer of every page. Alternatively, you can prevent collection by Google Analytics using Google’s browser add-on: https://tools.google.com/dlpage/gaoptout

Further information on data protection at Google is available at: https://policies.google.com/privacy

7.1 Right of access

You may request confirmation as to whether personal data concerning you is being processed by us. Where such processing takes place, you may request access to the following information: the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria used to determine that period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint with a supervisory authority, the origin of the data where it was not collected from you, and the existence of automated decision-making including profiling.

7.2 Rectification and completion

If you establish that we have stored incorrect personal data about you, you may request its immediate rectification. Where personal data is incomplete, you may request that it be completed.

7.3 Erasure

You have a right to erasure (“right to be forgotten”), provided that the processing is not necessary for exercising the right to freedom of expression, the right to information or for compliance with a legal obligation, and one of the following grounds applies: the personal data is no longer necessary for the purposes for which it was collected; the sole justification for the processing was your consent, which you have withdrawn; you have objected to the processing; your data has been processed unlawfully; or erasure is required for compliance with a legal obligation.

7.4 Restriction of processing

You may request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you request restriction instead of erasure, if we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or if you have objected to the processing.

7.5 Data portability

You have the right to data portability provided that the processing is based on your consent or on a contract and is carried out by automated means. You may request to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit that data to another controller.

7.6 Objection

Where the processing is based on Art. 6 (1) sentence 1 lit. e or lit. f GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. Once you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests. You may object at any time to the processing of your data for direct marketing purposes.

7.7 Withdrawal of consent

You have the right to withdraw consent you have given at any time with effect for the future. Withdrawal may be made informally by telephone, by e-mail, where applicable by fax, or to our postal address. Withdrawal does not affect the lawfulness of the data processing carried out on the basis of the consent up to the point of withdrawal.

7.8 Complaint

If you are of the opinion that the processing of your personal data is unlawful, you may lodge a complaint with a data protection supervisory authority responsible for your place of residence, your place of work or the place of the alleged infringement.