Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functional website and our services. Processing generally takes place only with the user's consent (Art. 6(1)(a) GDPR), for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), or on the basis of our legitimate interest in a secure and functional presentation of our offer (Art. 6(1)(f) GDPR).

3. Hosting (Netlify)

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you access our website, Netlify processes technically necessary data (e.g. IP address, date and time of access, volume of data transferred) as a processor in order to deliver the website and ensure its security. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in reliable and secure provision). A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify. Any transfer of data to the USA is safeguarded on the basis of the EU Commission's Standard Contractual Clauses.

4. Server log files

When you visit the website, information is automatically stored in so-called server log files, which your browser transmits automatically. These are in particular: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. Collection is carried out on the basis of Art. 6(1)(f) GDPR for the technically error-free presentation and optimisation of the website.

5. Contact form and file uploads

If you contact us via the inquiry form, your details (e.g. name, email address, phone number, project information and optionally files you upload such as images or PDF documents) are processed to handle your request and transmitted to us by email. The uploaded files are used exclusively to process your specific request. The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures) and Art. 6(1)(f) GDPR (responding to your inquiry). The data is deleted as soon as it is no longer required for the purpose, at the latest after any statutory retention periods have expired.

6. Spam protection (Cloudflare Turnstile)

To protect our contact form against automated entries and abuse (spam), we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks whether an entry originates from a human or a machine. In doing so, technical information about your device and browser as well as the IP address is transmitted to and evaluated by Cloudflare. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing spam and securing our systems). Further information is available in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/.

7. Google Maps

On our website we refer to map services from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When Google Maps is accessed or used, Google may process your IP address and further data; the transfer may also take place to Google servers in the USA. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an appealing presentation of our location and easy findability). Further information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy.

8. WhatsApp contact

Our website offers the option of contacting us via WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If you contact us via WhatsApp, the data you transmit (e.g. phone number, name and message content) is processed to handle your request. Please note that WhatsApp applies its own data protection provisions, over which we have no influence. The legal basis is Art. 6(1)(b) and (f) GDPR. Information is available at: https://www.whatsapp.com/legal/privacy-policy-eea.

9. Fonts

This website uses locally embedded web fonts for a consistent display of typefaces. The fonts are loaded directly from our server or hosting service when the page is accessed. No connection to third-party servers (e.g. Google Fonts) is established, so no personal data is transmitted to third parties.

10. Cookies

Our website does not use cookies for analytics or marketing purposes. Technically necessary components (e.g. the contact form's spam protection) may store information on your device for a short time, where this is required for functionality and security.

11. Your rights as a data subject

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw a given consent (Art. 7(3) GDPR)

To exercise your rights, an informal message to the email address stated under "Controller" is sufficient.

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data, in particular in the Member State of your residence, place of work or the place of the alleged infringement.

13. Data security

We use TLS encryption (HTTPS) during your website visit to protect the transmission of your data. In addition, we take technical and organisational security measures to protect your data against manipulation, loss or unauthorised access.