Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

2. Data Protection Officer

The appointment of a data protection officer is not required under Art. 37 GDPR, as our company does not, as a rule, permanently employ at least 20 persons in the automated processing of personal data. For questions regarding data protection, you can contact the email address stated above at any time.

3. Collection and storage of personal data

When you access our website, the browser used on your device automatically sends the following information to the server of our website and temporarily stores it in so-called server log files:

• IP address of the requesting device
• Browser type and browser version
• Operating system used
• Referrer URL (the previously visited page)
• Date and time of access
• Host name of the accessing device

The data mentioned is processed for the following purposes: ensuring a smooth connection to the website, ensuring convenient use of our website, evaluating system security and stability, and for further administrative purposes.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest arises from the purposes of data collection listed above, in particular the security and stability of our website.

Storage period: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session ends. The server log files are automatically deleted after 7 days at the latest.

4. Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The following data is collected:

• Name
• Email address
• Phone number (if provided)
• Message content

We do not pass on this data without your consent.

Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures taken at the request of the data subject). Insofar as your inquiry does not relate to the conclusion of a contract, Art. 6(1)(f) GDPR (legitimate interest in the effective processing of inquiries addressed to us) is the legal basis.

Storage period: The data you enter in the contact form remains with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.

5. Cookies

Our website uses exclusively technically necessary cookies. These are small text files that your browser automatically creates and that are stored on your device when you visit our website.

Technically necessary cookies are exempt from the consent requirement under Section 25(2) TTDSG (German Telecommunications and Telemedia Data Protection Act), as they are strictly necessary for the operation of the website. These cookies cannot be deactivated.

We do not use tracking cookies, analytics cookies or advertising cookies without your prior express consent. Such consent is obtained, where applicable, via our cookie consent banner.

Legal basis for technically necessary cookies: Section 25(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.
Legal basis for optional cookies: Art. 6(1)(a) GDPR (consent).

6. Google Ads Conversion Tracking

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter „Google“).

Purpose: We use Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns. When you click on an ad placed by Google, a cookie for conversion tracking is stored on your device. These cookies expire after 30 days and are not used for personal identification.

If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. The information obtained via conversion cookies is used to create conversion statistics for Ads customers who have opted for conversion tracking.

Legal basis: Art. 6(1)(a) GDPR (consent). The conversion tracking cookie is only set if you have given your consent via our cookie consent banner. You can withdraw your consent at any time with effect for the future.

Data transfer to third countries: Google may transfer collected data to the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (DPF). You can find more information in Google's privacy policy: https://policies.google.com/privacy.

7. Payment processing

If a payment obligation arises after the conclusion of a contract, we use an external payment service provider for payment processing. Your payment data (e.g. credit card number, bank details) is transmitted directly to the payment service provider and processed there.

We ourselves never store complete credit card or bank data on our servers. We receive from the payment service provider only a confirmation of the success or failure of the payment as well as, where applicable, a transaction ID for assignment.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract). The processing of payment data is necessary for the performance of the contract concluded between you and us.

8. Data transfer to third countries

Since our company is based in the United States of America, personal data is transferred to a third country. The USA has the EU-U.S. Data Privacy Framework (DPF). The data transfer takes place on the basis of appropriate safeguards pursuant to Art. 46 GDPR and, where applicable, the adequacy decision of the European Commission pursuant to Art. 45 GDPR.

Protective measures: Insofar as personal data is transferred to recipients in third countries that are not covered by the DPF adequacy decision, we ensure through appropriate safeguards that the rights of the data subjects are adequately protected. To this end, we conclude EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

In exceptional cases, the transfer may be based on your express consent pursuant to Art. 49(1)(a) GDPR. In this case, you will be informed of the possible risks before the transfer.

9. Your rights (Art. 15–21 GDPR)

You have the following rights with regard to your personal data vis-à-vis the controller:

• Right of access (Art. 15 GDPR) — You have the right to request information about whether and which personal data we process about you, as well as to receive copies of this data.
• Right to rectification (Art. 16 GDPR) — You have the right to request the immediate rectification of inaccurate personal data.
• Right to erasure (Art. 17 GDPR) — You have the right to request the erasure of your personal data, provided there is no legitimate reason for further processing.
• Right to restriction (Art. 18 GDPR) — You have the right to request the restriction of the processing of your personal data.
• Right to data portability (Art. 20 GDPR) — You have the right to receive the data concerning you in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR) — You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.

To exercise your rights, please contact us by email at: [email protected]. We will process your request without delay, but at the latest within one month.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

You may exercise this right with a supervisory authority in the member state of your residence, your place of work, or the place of the alleged infringement. A list of the data protection supervisory authorities in Germany can be found at: https://www.bfdi.bund.de.

11. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy in order to adapt it to changed legal situations or to changes in the service or data processing. However, this applies only with regard to statements on data processing. Insofar as consent is required or components of the Privacy Policy contain provisions of the contractual relationship with users, the changes will only be made with the users' consent.

The current version is always available on this page. Please inform yourself regularly about the content of our Privacy Policy.

Last updated: July 2026