Privacy policy

Hosting and server log files

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. We have a data processing agreement with Netlify under Art. 28 GDPR.

When you access the pages, the server automatically processes data transmitted by your browser: IP address, date and time of access, address requested, referrer URL, browser type and version, and operating system.

The purpose is to deliver the website securely and reliably and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the error-free and secure operation of the website.

Log files are only stored for a limited time (to our knowledge, 30 days at most) and are then deleted automatically. Netlify also processes data in the USA. According to its own information, Netlify is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision by the EU Commission (Art. 45 GDPR). In addition, Netlify bases transfers on the EU Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Contact by email, phone and contact form

If you write to us by email, phone or via the contact form, we process your details (name, email address, message and, where applicable, phone number) in order to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).

The contact form runs on Netlify Forms, a service of our hosting provider. Your entries are stored in our Netlify account and forwarded to us by email. To protect against spam, Netlify automatically checks every submission using the Akismet service of Automattic Inc. (USA); your details and IP address may be transmitted in the process. We also use a hidden form field. Processing takes place under our data processing agreement with Netlify; for transfers to the USA, see “Hosting and server log files”.

We delete your details once your enquiry has been dealt with, unless statutory retention obligations apply. We delete submissions from the Netlify account no later than three months after receipt.

Storing your consent

We store your decision about external content exclusively in your browser’s local storage (localStorage, entry “hm-consent”): which services you have allowed, plus the time and version of the settings. This data is not transmitted to us or to third parties.

This storage is technically necessary to respect your choice (Section 25(2) no. 2 TDDDG). The legal basis for the processing is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent). You can change the entry at any time via the cookie policy or delete it in your browser settings.

External content: Google Maps and YouTube

A map from Google Maps may be displayed on the contact page, and videos from YouTube on the “News” and “Gallery” pages. In both cases the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This content is only loaded once you activate it in the respective placeholder or on the cookie policy page. Only then does your browser connect to Google’s servers. In particular, your IP address, information about your browser and the page you are viewing are transmitted; Google may also store and read cookies or similar technologies on your device. We embed videos in privacy-enhanced mode (youtube-nocookie.com).

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time with effect for the future via the cookie policy.

Data may be transferred to Google LLC in the USA. According to its own information, Google LLC is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision by the EU Commission (Art. 45 GDPR).

Further information can be found in Google’s privacy policy.

Fonts and links

The fonts on this website are loaded from our own server; no connection is made to Google or other font providers.

Links to Instagram, YouTube and other websites are simple links. Data is only transmitted when you click such a link; the privacy policy of the respective provider then applies.