Legal

Privacy policy

How we handle personal data when you use this website, in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is:

The controller decides on the purposes and means of processing personal data (such as names, email addresses, or similar).

2. How we process your data

We process personal data only where this is permitted by law, in particular where processing is necessary to respond to your enquiry (Art. 6(1)(b) GDPR), where we have a legitimate interest in the secure and functional operation of this website (Art. 6(1)(f) GDPR), or where you have given your consent (Art. 6(1)(a) GDPR). We keep the amount of data we collect to a minimum.

3. Hosting and server log files

This website is made available by a hosting provider acting as our processor under a data processing agreement. When you visit the site, the provider’s servers automatically record information that your browser transmits, in so-called server log files. This may include the browser type and version, the operating system, the referrer URL, the requesting device, the time of the request, and the IP address. This data is not merged with other data sources and is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in the technically error-free presentation and security of our website.

4. Cookies

This website does not set any tracking or marketing cookies and does not use analytics services that profile visitors. If, in the future, functional cookies become necessary, we will inform you and, where required, obtain your consent beforehand.

5. Contacting us

If you contact us by email, by telephone, or via the contact function on this site, the details you provide will be processed in order to handle your enquiry and any follow-up questions. The contact form on this website does not transmit data to our servers directly; instead it opens your own email program with a pre-filled message that you send yourself. We then receive and process your message as an ordinary email. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We retain this data until your request has been dealt with, unless statutory retention periods require longer storage.

6. Web fonts

To present its typography consistently, this website currently loads fonts from Google Fonts. When a page loads, your browser connects to Google servers, which requires the transmission of your IP address to Google. This takes place on the basis of our legitimate interest in a consistent and appealing presentation of our website (Art. 6(1)(f) GDPR). We are in the process of hosting these fonts locally so that no such connection is required.

7. External links

This website contains links to external services, for example a login page and LinkedIn profiles. When you follow such a link, the privacy policy of the respective provider applies. We have no influence over the data processing carried out there.

8. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix in the address bar of your browser.

9. Your rights

Under the GDPR you have the right, at any time and free of charge, to obtain information about the personal data we hold about you (Art. 15), to have inaccurate data corrected (Art. 16), to have your data erased (Art. 17), to have processing restricted (Art. 18), to data portability (Art. 20), and to object to processing based on our legitimate interest (Art. 21). Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. To exercise these rights, please contact us using the details in section 1.

10. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged infringement.

11. No automated decision-making

We do not use your data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Changes to this policy

We may update this privacy policy to reflect changes to our website or to legal requirements. The version published here always applies to your current visit.

This privacy policy is a draft prepared for this website. Please have it reviewed and completed by your data protection officer or legal counsel before publication, in particular the sections on hosting, web fonts, and any future analytics or cookies.