Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

2. Your rights as a data subject

With regard to the personal data we process, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw a given consent (Art. 7 (3) GDPR)

An informal message to the contact details above is sufficient to exercise your rights.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

3. Accessing the website & server log files

When you access this website, your browser automatically sends information to the server of our hosting provider, which is temporarily stored in so-called log files. This includes, among other things: the IP address of the requesting device, the date and time of access, the name and URL of the file retrieved, the browser used and, where applicable, the operating system, as well as the previously visited page (referrer). This data serves the technical delivery, stability and security of the website. The legal basis is our legitimate interest (Art. 6 (1)(f) GDPR).

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The host processes the aforementioned data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

4. Cookies and analytics

This website uses technically necessary cookies and local storage — including to remember your cookie choice — on the basis of § 25 (2) TDDDG in conjunction with Art. 6 (1)(f) GDPR.

For website statistics we use Plausible Analytics, a privacy-friendly service that runs without cookies, stores nothing on your device and collects no personal data or cross-site identifiers. The statistics are aggregated and hosted within the EU (Plausible Insights OÜ, Estonia). Because nothing is stored on or read from your device, this requires no consent; the legal basis is our legitimate interest in understanding how the site is used (Art. 6 (1)(f) GDPR).

Only with your consent do we use marketing cookies to measure the performance of our advertising (for example advertising services from Google or Meta). These are loaded only after you agree via our cookie banner and are never set if you decline. You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG).

5. Embedded third-party content and services

Google Fonts

To display fonts consistently, this website uses fonts from Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page, your browser loads the required fonts from a Google server to display text correctly. As a result, Google becomes aware of your IP address. The legal basis is our legitimate interest in a consistent and appealing presentation (Art. 6 (1)(f) GDPR). A transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework. Further information: policies.google.com/privacy.

Image and video delivery (Cloudinary)

Some images and videos on this website are delivered via the media service Cloudinary (Cloudinary Ltd.). When these media are retrieved, your IP address is transmitted to the provider's servers, which is technically necessary for delivery. A transfer to third countries (including the USA) may take place. The legal basis is our legitimate interest in the fast and reliable provision of content (Art. 6 (1)(f) GDPR).

Country flags (flagcdn.com)

To display small country flags, graphics are loaded via the flagcdn.com service. This also transmits your IP address to the respective server. The legal basis is Art. 6 (1)(f) GDPR.

6. Contacting us

If you contact us by email, phone or via a form on this website, we process the data you provide (e.g. name, email address, Instagram/website, message) in order to handle your request. The legal basis is Art. 6 (1)(b) GDPR (initiation/performance of a contract) or Art. 6 (1)(f) GDPR (legitimate interest in responding to your enquiry). This data is deleted as soon as it is no longer required to achieve the purpose, provided that no statutory retention obligations prevent this.

Form and email processing (n8n, Google Workspace)

The data submitted through our forms (enquiry, appointment booking, newsletter, asset library) is processed with the help of the automation service n8n, which we operate via the n8n Cloud (n8n GmbH, Berlin, Germany). The sending of our emails and the storage of contact and sign-up data take place via Google Workspace (including Gmail and Google Sheets; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). These providers process the data on our behalf on the basis of data processing agreements pursuant to Art. 28 GDPR. The legal basis is Art. 6 (1)(b) GDPR (initiation/performance of a contract) or Art. 6 (1)(f) GDPR.

Appointment booking

If you book an appointment (e.g. a free consultation) via the website, we process the data you provide (name, email address, requested time, time zone) to arrange and carry out the appointment (Art. 6 (1)(b) GDPR). For appointment management and the creation of the video-call link, we use Google Calendar and Google Meet (Google Ireland Limited, address as above). A transfer of data to Google may take place.

7. Newsletter

If you sign up for our newsletter, we use the email address you provide to send you information. Sign-up takes place using the double opt-in procedure: after signing up, you receive an email asking you to confirm your sign-up via a confirmation link. Only after this confirmation do we add you to the mailing list. Your email address and the time of confirmation are stored for verification purposes. The legal basis is your consent (Art. 6 (1)(a) GDPR), which you can withdraw at any time with effect for the future by sending us a short message or replying to one of our emails. For sending and storage, we use the services named under “Form and email processing”.

8. Data transfers to third countries

Insofar as data is transferred to countries outside the EU/EEA (in particular the USA) in the context of the services mentioned above, this is done on the basis of appropriate safeguards, such as the European Commission's standard contractual clauses or a certification under the EU-US Data Privacy Framework.

9. Storage period

We process and store personal data only for as long as is necessary to achieve the respective purpose or as required by statutory retention periods. Afterwards, the data is deleted.

10. Currency and changes to this privacy policy

This privacy policy is currently valid. As the website develops or due to changed legal or regulatory requirements, it may become necessary to amend this policy.