Information about the processing of personal data under the GDPR.
1. Controller
The controller responsible for data processing on this website is:
2. General information
Protecting your personal data matters to us. We process your data solely on the basis of applicable legal provisions (GDPR and TDDDG). This privacy policy explains the key aspects of data processing on our website.
3. Data collected when visiting the website
When you visit our website, your device automatically sends information to our hosting provider's server. This includes:
This data is analysed solely to ensure trouble-free operation and improve our services. The legal basis is Article 6(1)(f) GDPR (legitimate interests). Logs are deleted after no more than 30 days.
4. Cookies
Our website uses only technically necessary cookies, if any cookies are stored at all. These are required for the website to function correctly. The legal basis is Section 25(2), point 2, TDDDG.
We use no cookies for tracking, advertising or profiling . A cookie banner is therefore not required.
5. Hosting (Vercel)
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel operates our technical infrastructure and processes personal data, including IP addresses and server logs, under a data processing agreement pursuant to Article 28 GDPR.
Vercel may also transfer data to third countries, particularly the USA. Vercel is certified under the EU–US Data Privacy Framework. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing a high-performance, reliable and secure website.
Further information: vercel.com/legal/privacy-policy
6. Audience measurement (Vercel Web Analytics)
We use Vercel Web Analytics to analyse website usage statistically. Vercel Web Analytics works entirely without cookies and without processing IP addresses in an identifiable form. It only collects aggregated, anonymous usage statistics, such as page views and visit sources. We also count clicks on contact and demo links, the start of form entry and enquiries successfully submitted to our contact system. Only the enquiry type, such as a demo, and a general source category, such as LinkedIn or Google, are passed to Analytics. Names, email addresses, phone numbers and message content are not sent to Analytics.
Individual people cannot be identified, so a cookie banner is not required. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in analysing and improving the website.
Further information: vercel.com/docs/analytics/privacy-policy
7. Fonts (self-hosted)
We use the Figtree font under the Open Font License. It is served through the Next.js framework's next/font system. The font files are hosted on our own server and no connection to Google servers is established. No personal data is transferred to Google.
8. Contacting us
If you contact us using the contact form or email, we process the contact details and message content you provide to handle your enquiry. We use Brevo to manage contact form enquiries and send notifications about them.
The legal basis is Article 6(1)(b) GDPR (steps prior to entering a contract or performance of a contract) or Article 6(1)(f) GDPR (our legitimate interest in responding to your enquiry). We retain your enquiry for as long as needed to handle it and any follow-up questions. The data is then deleted unless statutory retention requirements apply.
Form enquiries also include a general source category, the landing page and, where applicable, an approved campaign identifier so we can assess where enquiries originate. During navigation, this information is held only in the open website's memory. No additional cookies or persistent identifiers are stored on your device for this purpose. Arbitrary URL parameters and full external referrer URLs are not collected for this purpose.
Information about the contact service used: Brevo privacy information.
9. Your rights as a data subject
Under the GDPR, you have the following rights in relation to us:
To exercise your rights, simply send us a message using our contact form.
10. Right to complain to a supervisory authority
You have the right to complain to a data protection supervisory authority about our processing of your personal data. The authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de
11. Changes to this privacy policy
We reserve the right to amend this privacy policy to keep it aligned with current legal requirements or reflect changes to our services, such as the introduction of new services. The version current at the time of your next visit will apply.