Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. General Information on Data Processing

This website does not use analytics or tracking tools and does not set first-party cookies for marketing or tracking purposes. The external services used on the site are described below.

Personal data is processed only insofar as this is necessary to provide the website, respond to inquiries, or protect legitimate interests.

3. Hosting

This website is provided as a static website. The final hosting provider and server location must be added before publication.

When the website is accessed, technically necessary data is processed, including IP address, date and time of access, browser type and version, operating system, and the requested page. Processing is carried out to provide the website securely and reliably.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, error-free, and efficient provision of this online offering.

4. Contact Form (Netlify Forms)

The contact form uses Netlify's form functionality. When the form is submitted, the entered data is transmitted to Netlify and processed there to handle the inquiry.

Processed Data

The current form includes name, email address, subject, and message. A hidden honeypot field is also included for spam prevention.

Legal Basis

The legal basis is Art. 6(1)(b) GDPR where the inquiry serves pre-contractual or contractual communication. Otherwise, processing is based on Art. 6(1)(f) GDPR, the legitimate interest in simple and reliable communication.

Recipients and Third-Country Transfer

Netlify, Inc. is based in the USA. A transfer to a third country therefore cannot be ruled out. More information is available in Netlify's privacy policy: https://www.netlify.com/legal/privacy/.

Storage Period

The data is stored only for as long as necessary to handle the inquiry and comply with statutory retention obligations. The specific storage period also depends on the hosting provider's settings and contractual terms.

5. Direct Email Contact

If you use the mailto link on the contact page, your own email program opens. Your message is then transmitted through the email services you use, not through a form on this website.

Data sent by email is processed exclusively to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

6. Adobe Fonts (Typekit)

This website loads the font "Canto" externally via Adobe Fonts/Typekit. This establishes a connection to Adobe servers, especially use.typekit.net, when the page is loaded.

Personal data such as the IP address may be transmitted to Adobe Inc., USA. The font is used in the interest of consistent and license-compliant typography.

The legal basis is Art. 6(1)(f) GDPR. More information is available in Adobe's privacy policy: https://www.adobe.com/privacy/policy.html.

7. Locally Hosted Google Fonts

The font "Raleway" is hosted locally on this server. Loading this font does not establish a connection to Google servers and does not transfer data to Google or other third parties.

8. YouTube and Apple Music Content

Videos may be embedded via YouTube on the media page. Embeds use the youtube-nocookie.com domain and are not loaded automatically when the page opens, but only after an active click on the load or play button.

Only after this click is a connection to YouTube established. Data, especially the IP address, may be transferred to Google Ireland Limited or Google LLC, USA.

The legal basis for loading the YouTube player is Art. 6(1)(a) GDPR, meaning your consent through the active click. More information is available in Google's privacy policy: https://policies.google.com/privacy.

Apple Music players may also be embedded on the media page. They are not loaded automatically, but only after you actively click the load button. Only then is a connection to Apple established. In particular, IP address, device data, and usage data may be transmitted to Apple. More information is available in Apple's privacy policy: https://www.apple.com/legal/privacy/.

9. Rights of Data Subjects

Within the scope of legal requirements, you have in particular the following rights:

• right of access to processed personal data,
• right to rectification of inaccurate or incomplete data,
• right to erasure of personal data,
• right to restriction of processing,
• right to data portability,
• right to object to processing based on Art. 6(1)(f) GDPR,
• right to withdraw consent with effect for the future.

To exercise your rights, you can contact the address listed above at any time.

10. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority. The responsible authority is in particular the authority of your habitual residence, workplace, or the place of the alleged infringement.