Privacy policy

This is a courtesy translation. The legally binding version is the German Datenschutzerklärung.

1. Controller

The controller within the meaning of the General Data Protection Regulation is:

2. Data protection officer

To be completed only where an appointment is required under Art. 37 GDPR or section 38 BDSG. Otherwise this section is deleted.

3. Hosting

This website runs on a server operated by DigitalOcean, LLC. The server is located in Frankfurt am Main, Germany. The provider processes personal data solely on our instructions as a processor. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and reliable operation of this website. A data processing agreement pursuant to Art. 28 GDPR [is in place / is to be concluded].

4. Server log files

When this website is accessed, the web server automatically records the following data in log files:

• IP address of the requesting device
• date and time of access
• name and URL of the file retrieved
• volume of data transferred and notification of successful retrieval
• referring page, where transmitted
• browser type and operating system

This processing is technically necessary to operate the website and serves system security and the investigation of misuse. The legal basis is Art. 6 (1) (f) GDPR. This data is not merged with other data sources. Log files are deleted automatically after [number] days.

5. Contact by e-mail

If you contact us by e-mail, your details are stored in order to handle the enquiry and for the event of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to the initiation or performance of a contract, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries. The data is deleted once it is no longer required and no statutory retention obligations prevent deletion.

6. No cookies, no analytics, no external content

This website sets no cookies. There is no reach measurement and no analysis of user behaviour. No content is loaded from third-party servers, in particular no external fonts, no map services, no video embeds and no social network content. All fonts and design assets are served from this server. Consent under section 25 TDDDG is therefore not required.

7. Encryption

This website uses transport encryption in line with current standards (TLS). You can recognise this by the address bar of your browser and the padlock symbol.

8. E-mail sending

To be completed where e-mail is sent to recipients via this domain: type of messages, legal basis and consent procedure, processors engaged including their locations, retention period, and the procedure for withdrawal and unsubscribing. To be deleted entirely if no e-mail is sent via this domain.

9. Your rights

You have the following rights regarding your personal data:

• right of access under Art. 15 GDPR
• right to rectification under Art. 16 GDPR
• right to erasure under Art. 17 GDPR
• right to restriction of processing under Art. 18 GDPR
• right to data portability under Art. 20 GDPR
• right to object under Art. 21 GDPR

Where data is processed on the basis of consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

10. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The competent authority for the controller is: [competent state data protection authority for the company's registered office]

11. Changes to this privacy policy

We adapt this privacy policy whenever changes to the website or to the legal position make it necessary. The version available on this page applies in each case.

Last updated: [Month Year]