Privacy policy

1. In short

This website does not set cookies, uses no analytics or tracking tools and embeds no content from third parties. The fonts are served from the same server as the website. We only process personal data where it is technically necessary to deliver the website, or when you contact us through the contact form, by email or by phone.

2. Controller

3. Hosting and server log files

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you visit the website, Netlify processes technically necessary data, in particular your IP address, the date and time of access, the page requested, the volume of data transferred, the referrer URL, your browser and your operating system.

This processing is necessary to deliver the website and to ensure its security and stability. The legal basis is Art. 6 (1) (f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify.

Netlify is based in the USA. Transfers of personal data to the USA are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Netlify is certified. In addition, the agreement with Netlify provides for EU standard contractual clauses (Art. 46 (2) (c) GDPR). According to Netlify, log data is stored for 90 days online and for up to one year offline.

4. Contact form

You can send us an enquiry using the form on the contact page. We process the details you enter: name, email address, optionally company, phone number and the selected topic, and the content of your message. Name, email address and message are mandatory fields.

Providing this data is voluntary. There is no statutory or contractual obligation to provide it. Without your name, email address and message, however, we cannot deal with your enquiry.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into a contract, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in responding to your enquiry.

We use “Netlify Forms”, a service provided by our host Netlify, Inc. Your submission is stored there and also sent to us by email. The same safeguards apply to the transfer to the USA as described in section 3: a data processing agreement pursuant to Art. 28 GDPR, the EU-US Data Privacy Framework (Art. 45 GDPR) and, in addition, EU standard contractual clauses (Art. 46 (2) (c) GDPR).

To protect against automated spam, Netlify checks every submission with the spam filter “Akismet” provided by Automattic Inc., USA, acting as a sub-processor of Netlify. The content of the submission and technical data such as the IP address are transmitted and assessed. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in preventing spam. According to its own information, Automattic bases transfers to third countries on EU standard contractual clauses (Art. 46 (2) (c) GDPR).

The form also contains a hidden field that is invisible to you and is normally only filled in by automated programs. If it is filled in, the submission is discarded.

We delete submissions as soon as they are no longer required in order to deal with your enquiry. Statutory retention obligations remain unaffected. You are of course welcome to write to us directly by email instead.

5. Contact by email or phone

If you contact us by email or by phone, we process the details you provide – such as your name, email address, phone number and the content of your enquiry – in order to respond to it. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into a contract, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in responding to your enquiry.

We delete this data as soon as it is no longer required. Statutory retention obligations remain unaffected.

We use Microsoft 365, provided through GoDaddy, for our email account. Emails you send us are stored and processed there. A data processing agreement pursuant to Art. 28 GDPR is in place with GoDaddy. Data may be transferred to the USA in this context. GoDaddy is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); in addition, the agreement provides for EU standard contractual clauses (Art. 46 (2) (c) GDPR).

6. Encryption

The connection to this website is encrypted using TLS.

7. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

To exercise them, please contact us at the email address given above.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. The spam check on the contact form only determines whether a submission is classified as spam; it has no legal effect on you.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

8. Right to object

You have the right to object at any time to the processing of your personal data that is based on a legitimate interest pursuant to Art. 6 (1) (f) GDPR (Art. 21 (1) GDPR).

On this website this concerns the delivery and security of the site, the spam check on the contact form, and dealing with enquiries where these do not relate to entering into a contract. If you object, we will stop processing your data — unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

An informal message to the email address given above is sufficient.

Last updated: October 2026. This is a translation for your convenience. In case of any discrepancy, the German version prevails.