Privacy Policy

Last updated: January 2026

1. Data Controller

2. Overview of Data Processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of Data Processed

• Contact data (e.g., email addresses)
• Usage data (e.g., pages visited, access time)
• Meta/communication data (e.g., device information, IP addresses)

Categories of Data Subjects

• Visitors to our website
• Newsletter subscribers

Purposes of Processing

• Provision of our website and its content
• Responding to contact requests and communicating with users
• Security measures
• Reach measurement and analytics (only with your consent)
• Newsletter delivery (only with your consent)

3. Legal Bases

Below we inform you about the legal bases of the GDPR on which we process personal data:

• Consent (Art. 6(1)(a) GDPR) – You have given your consent to the processing (e.g., for cookies or newsletter).
• Contract Performance (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract.
• Legal Obligation (Art. 6(1)(c) GDPR) – Processing is necessary to comply with a legal obligation.
• Legitimate Interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of our legitimate interests.

4. Security Measures

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to data, as well as access, input, disclosure, availability assurance and segregation of data.

5. Data Processing on Our Website

5.1 Website Provision

Each time you access our website, our system automatically collects data and information from the computer system of the accessing device. This data is temporarily stored in so-called server log files.

The following data is collected:

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision of the website.

5.2 Hosting

Our website is hosted by Vercel Inc. The servers are located in various regions worldwide, including Europe. Vercel processes personal data on our behalf as our data processor.

For more information, see Vercel's privacy policy: https://vercel.com/legal/privacy-policy

6. Cookies and Analytics

6.1 Essential Cookies

We use technically necessary cookies to ensure the basic functions of our website. These cookies are set without your consent as they are essential for the operation of the website.

6.2 Analytics Cookies (PostHog)

With your consent, we use PostHog for website usage analysis. PostHog helps us understand how visitors use our website so we can improve it.

The following data is processed:

• Anonymized IP address
• Pages visited and time spent
• Device information (browser, operating system)
• Referrer URL

Data is processed on servers in the EU (Frankfurt). The legal basis is your consent (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time by clicking on "Cookie Settings" in the footer.

7. Newsletter

With your consent, you can subscribe to our newsletter. For this we need your email address. Registration takes place using the double opt-in procedure.

We use the Resend service for delivery. Data is processed on servers in the USA. The transfer is based on Standard Contractual Clauses.

You can withdraw your consent to the newsletter at any time. You will find an unsubscribe link in every newsletter. The lawfulness of the data processing that has already taken place remains unaffected by the withdrawal.

Legal basis: Art. 6(1)(a) GDPR (consent)

8. Your Rights

You have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You have the right to obtain information about your data stored with us.
• Right to Rectification (Art. 16 GDPR): You have the right to have inaccurate data corrected.
• Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your data.
• Right to Restriction (Art. 18 GDPR): You have the right to request the restriction of processing.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a transferable format.
• Right to Object (Art. 21 GDPR): You have the right to object to the processing of your data.
• Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time.
• Right to Complain (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

9. Data Protection Contact

If you have any questions about data protection, you can contact us at any time:

10. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply for your next visit.