Introduction and Overview
We have prepared this privacy policy (as of December 2024) to explain to you in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws which personal data (short: data) we as the data controller – and the processors we engage (e.g., providers) – process, will process in the future, and what lawful options you have. The terms used are to be understood in a gender-neutral manner.
Scope of Application
This privacy policy applies to all personal data processed by us within the company and to all personal data processed by companies engaged by us (processors). By personal data, we mean information as defined in Article 4 No. 1 GDPR, such as name, email address, and postal address of a person. The processing of personal data ensures that we can offer and bill for our services and products, whether online or offline. The scope of this privacy policy includes:
all online presences (websites) that we operate
social media presences and email communication
mobile apps for smartphones and other devices
In short: The privacy policy applies to all areas where personal data is processed in a structured manner via the channels mentioned in the company. Should we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.
We only process your data if at least one of the following conditions applies:
Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be storing the data you entered in a contact form.
Contract (Article 6(1)(b) GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For instance, if we conclude a purchase contract with you, we need personal information in advance.
Legal Obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obligated to retain invoices for accounting purposes. These generally contain personal data.
Legitimate Interests (Article 6(1)(f) GDPR): In cases of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For instance, we need to process certain data to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.
Duration of Storage
We only retain personal data as long as necessary for providing our services and products. This is a general criterion for us. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are legally obliged to retain certain data even after the original purpose has ceased to exist, for example, for accounting purposes.
If you request the deletion of your data or withdraw your consent for data processing, the data will be deleted as quickly as possible provided there is no obligation to retain it.
Your Rights Under the General Data Protection Regulation
According to Articles 13 and 14 GDPR, we inform you about the following rights you have to ensure fair and transparent data processing:
You have the right to access under Article 15 GDPR regarding whether we process data about you. If this is the case, you have the right to receive a copy of the data and to know the following information:
the purpose for which we are processing the data;
the categories, i.e., the types of data being processed;
who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
how long the data will be stored;
the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);
the source of the data if we have not collected it from you;
whether profiling is carried out, i.e., whether data is automatically evaluated to create a personal profile about you.
You have the right to rectification under Article 16 GDPR, meaning we must correct the data if you find errors.
You have the right to erasure under Article 17 GDPR (“right to be forgotten”), which means you may request the deletion of your data.
You have the right to restriction of processing under Article 18 GDPR, which means that we should only retain the data but not use it further.
You have the right to data portability under Article 20 GDPR, which means that we will provide your data in a commonly used format upon request.
You have the right to object under Article 21 GDPR, which after enforcement leads to a change in processing.
If the processing of your data is based on Article 6(1)(e) (public interest, exercise of public authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then check as quickly as possible whether we can legally comply with this objection.
If data is used for direct marketing, you may object to this type of data processing at any time. We may not use your data for direct marketing afterward.
If data is used for profiling, you may object to this type of data processing at any time. We may not use your data for profiling afterward.
You have the right under Article 22 GDPR not to be subject to a decision based solely on automated processing (such as profiling) under certain circumstances.
You have the right to complain under Article 77 GDPR. This means you can lodge a complaint with the data protection authority at any time if you believe that the processing of personal data violates the GDPR.
Whose Data Do We Process and How?
Visitors to Our Website
This section applies as far as we operate a website.
If you visit a website operated by us, we will process some of your personal data in connection with this visit.
In this section, we inform you about how we process your personal data.
Categories of Processed Data and Purposes of Data Processing
During your visit to this website, we will automatically collect the following personal data about you:
The date and time of access to a page on our website;
Your IP address (in shortened form, so that no unique assignment is possible);
Technical information such as the name and version of your web browser, internet provider, device, and screen resolution
Source URL of your visit (i.e., over which website or which advertising medium you arrived at our site)
Orders including revenue and ordered products
Achievement of "website goals" (e.g., contact inquiries and newsletter sign-ups)
Your behavior on the pages (e.g., clicks, scrolling behavior, and duration of stay)
Your approximate location (country and city)
specific cookies (see below)
Furthermore, we may ask you to enter personal data on our website, such as your name and email address, in order to provide you with certain services.
There is no obligation to actually provide the data we request you to enter on our website. However, if you do not do so, you will not be able to use all functions of the website.
We process your data for the following purposes:
to provide this website and to improve and develop this website further;
to create usage statistics;
to display personalized page suggestions;
to detect, prevent, and investigate attacks on our website;
if necessary, to provide members with a user account on our website and
to contact users via email.
Legal Basis for Processing
We process your personal data on the basis of:
Article 6(1)(a) GDPR (consent): You give us your consent to store your data and use it further for business-related purposes;
Article 6(1)(b) GDPR (contract): There is a need to fulfill a contract with you or a processor such as the telephone provider, or we must process data for pre-contractual activities, such as preparing an offer;
our overriding legitimate interest under Article 6(1)(f) GDPR, which is to make our website user-friendly and to protect our website from attacks.
Duration of Storage
We will generally store your data for a duration of three months. A longer storage will only occur where necessary to investigate identified attacks on our website and furthermore only until the expiration of relevant limitation periods, legal retention periods, or any legal disputes where the data is required as evidence.
Cookies (General)
We use so-called cookies on our website. A cookie is a small file that can be stored on your computer when you visit a website. In general, cookies are used to provide users with additional functions on a website. For example, they can be used to facilitate navigation on a website, allow you to continue using a website where you left off, and/or store your preferences and settings when you revisit the website. Cookies cannot access, read, or change any other data on your computer.
Many cookies on our website are known as session cookies. They are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your computer until you manually delete them from your browser. We use such persistent cookies to recognize you when you visit our website again.
If you want to control cookies on your computer, you can choose your browser settings to receive a notification when a website wants to store cookies. You can also block or delete cookies that have already been stored on your computer. If you want to know more about how to take these steps, please use the