Privacy Policy

2) What data we process & why

• Server logs (IP address, date/time, requested URL, referrer, user agent, error codes) to operate and secure the website.
• Analytics (optional) to understand usage and improve the site; enabled only if you consent via the cookie banner/settings.
• Contact requests (name, email, message and any data you provide) to respond to enquiries.
• Cookie/device storage: essential items for basic functions; optional items (e.g., analytics) only with consent.

3) Legal bases (GDPR) & device access (Germany)

• Art. 6(1)(f) GDPR (legitimate interests): secure operation, fraud/abuse prevention, error diagnosis.
• Art. 6(1)(b) GDPR (pre-contract/contract): handling requests related to our services.
• Art. 6(1)(a) GDPR (consent): analytics and non-essential cookies/technologies.
• Where we store or access information on your device, we rely on §25 TTDSG: essential where strictly necessary; otherwise consent.

4) Recipients / processors

We may share data with service providers acting as processors (Art. 28 GDPR), such as hosting, email delivery, security, and analytics providers. The specific optional providers are shown in the cookie banner/settings when applicable. We may also disclose data if required by law or to enforce legal claims.

5) International transfers

If providers process data outside the EEA, transfers occur only with appropriate safeguards (e.g., EU adequacy decision or Standard Contractual Clauses) and, where required, additional protective measures.

6) Retention

• Server logs: typically kept for a limited period (generally days to a few weeks) unless needed for security investigations.
• Contact requests: kept as long as needed to handle the request and for follow-up, then deleted unless legal retention applies.
• Consent/analytics preferences: stored until you change them or clear cookies (or earlier if technically configured).

7) Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on Art. 6(1)(f) GDPR. You can withdraw consent at any time with effect for the future (e.g., via cookie settings).

8) Complaints

You may lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. For Berlin, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

9) Updates

We may update this policy to reflect changes in our processing or legal requirements. The date at the top indicates the latest version.