Privacy

1. Controller and contact

The sole proprietor identified in the Imprint is the controller. For privacy questions or to exercise your rights, please contact [email protected].

2. Providing the website

The website is hosted on a VPS in Germany provided by Contabo GmbH, Welfenstraße 22, 81541 Munich, using the Nginx web server. A visit involves processing connection data needed to deliver the website, including your IP address, the time and requested resource, and technical information sent by your browser.

Persistent Nginx access logging is disabled for the public pages of this website. Technical errors are recorded in a separate error log; these entries may include IP addresses and details of the affected request.

This processing supports content delivery, troubleshooting and protection against attacks. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is operating a secure and reliable website. Further provider information is available in Contabo’s privacy notice.

3. Cloudflare

Cloudflare, Inc., USA, provides domain and network security infrastructure in front of the website. Cloudflare may process IP addresses and technical request data. The purpose is secure and reliable access, based on Article 6(1)(f) GDPR.

Cloudflare also processes incoming messages sent to the public contact address and forwards them to the email inbox used for inquiries. Further information is available in Cloudflare’s privacy policy.

4. Contact by email

The contact fields prepare a message in your configured email app. The website does not operate its own database for these entries. The message is sent only when you confirm sending in your email app.

Your sender address, message and any information you choose to provide are used to handle your inquiry. Cloudflare Email Routing forwards messages to a Gmail inbox provided by Google. The private destination address is not published on this website. See Google’s privacy policy for information about Google’s processing.

Contractual and pre-contractual inquiries are handled under Article 6(1)(b) GDPR. Other business inquiries are handled under Article 6(1)(f) GDPR, based on the legitimate interest in responding to you. Please provide only the information needed for your inquiry.

5. Cookies, analytics and external content

The website code does not set analytics or advertising cookies and contains no tracking scripts. Fonts are supplied by your device. No externally hosted fonts, videos, maps or social media widgets are embedded.

Cloudflare security features may use technically necessary cookies, for example to verify a security challenge. See Cloudflare’s cookie documentation for details.

6. Retention

The separate Nginx error log is rotated daily, including when there are no new entries. Up to six daily archives are retained in addition to the current file. With the daily rotation operating correctly, this represents approximately seven days. This period applies only to this error log; processing by Cloudflare and Google is covered by their respective service information.

Inquiries are deleted after they have been resolved unless statutory retention duties or necessary evidence require continued storage. Where statutory retention is required, the legal basis is Article 6(1)(c) GDPR.

7. International processing

A VPS in Germany does not mean that all services involved process data exclusively in Germany. Cloudflare and Google may process data outside the European Economic Area. The providers describe their transfer mechanisms, including the EU-US Data Privacy Framework and standard contractual clauses, in the Cloudflare Data Processing Addendum and Google’s data transfer information.

8. Your rights

Subject to the applicable legal conditions, you have rights to access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it for the future.

You may complain to a data protection authority, particularly in the country of your residence, workplace or the alleged infringement. The Bavarian State Office for Data Protection Supervision (BayLDA) supervises private entities in Bavaria. This website does not use automated decisions producing legal or similarly significant effects.