Privacy policy

1. Controller

2. Hosting and server log data

This website is provided through Netlify. The provider is Netlify, Inc., 101 2nd Street, San Francisco, California 94105, USA.

When you access the website, the hosting provider processes connection data required for technical operation. This may include your IP address, the date and time of access, the requested address, the amount of data transferred, the referrer URL, browser type and version, operating system, and HTTP status.

This processing serves to provide the website securely, reliably, and without errors. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the technical provision and security of this website.

Netlify processes data as a processor. Processing in the United States or by additional subprocessors cannot be ruled out. Netlify refers to the EU-US Data Privacy Framework and supplementary contractual safeguards for international data transfers. Further information is available in the Netlify Privacy Policy and the Netlify Trust Center.

3. Contact by email or phone

If you contact us by email or phone, the information you provide will be processed to respond to your request and any follow-up questions.

If your request relates to entering into or performing a contract, Article 6(1)(b) GDPR is the legal basis. In other cases, processing is based on Article 6(1)(f) GDPR. The legitimate interest is the proper handling of your request.

4. Contact form and Netlify Forms

When you submit the contact form, your name, email address, and message are processed. Information about your company and telephone number is voluntary. Technical data required for transmission and protection against abusive submissions is also processed.

The form is processed through Netlify Forms. The entered data is transmitted to Netlify and stored there on our behalf. Netlify may use subprocessors for spam detection.

The legal basis is Article 6(1)(b) GDPR where the request serves pre-contractual or contractual purposes. Otherwise, Article 6(1)(f) GDPR is the legal basis. The legitimate interest is the secure and efficient processing of incoming requests.

The mandatory fields are required so that your request can be assigned and answered. The form cannot be submitted without this information.

5. Retention period

Personal data from enquiries is deleted once the enquiry has been fully processed and no statutory retention obligations or legitimate reasons for further storage apply. Statutory retention periods remain unaffected. Submissions stored in Netlify Forms are reviewed regularly and deleted once they are no longer required for processing.

6. Cookies and audience measurement

In its current technical configuration, this website does not use analytics or marketing services and does not set cookies intended for those purposes. If such services are added later, this privacy policy will be updated before they are used and consent will be obtained where required.

7. Your rights

Subject to the applicable legal requirements, you have in particular the right to:

• access your processed personal data under Article 15 GDPR,
• rectification of inaccurate data under Article 16 GDPR,
• erasure under Article 17 GDPR,
• restriction of processing under Article 18 GDPR,
• data portability under Article 20 GDPR, and
• object to processing based on Article 6(1)(e) or (f) GDPR under Article 21 GDPR.

To exercise your rights, simply contact us using the details given above.

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the controller’s registered office is, in particular:

9. SSL/TLS encryption

This website uses SSL/TLS encryption to protect the transmission of confidential content. An encrypted connection can generally be identified by “https://” in your browser’s address bar.

10. Automated decision-making

No automated decision-making, including profiling, takes place.

11. Updates to this privacy policy

This privacy policy will be updated if the services used, the processing of data, or the legal requirements change.