Privacy policy

Controller

The provider named in the legal notice is responsible for data processing on this website. For any privacy question, an email to the address given there is enough.

Visiting this website

This website is served from a dedicated server in Germany. No content delivery networks and no external fonts are used — every file comes from the same domain. Opening a page therefore only sends the technically necessary connection data to the server:

• IP address of the requesting device
• date and time of access
• the address requested and the amount of data transferred
• the server status response
• browser identification and, where transmitted, the previously visited page

Legal basis and retention of server logs

Processing rests on the legitimate interest in operating the website securely and reliably (Art. 6(1)(f) GDPR). Logs are deleted after seven days at the latest, unless they are exceptionally needed longer to investigate a specific attack.

Cookies

This website sets no cookies for analytics or advertising. There is no audience measurement and no tracking.

Only on the booking page is an entry written to your browser’s local storage — and only once you have actively agreed to load the calendar. What is stored is that decision alone, so the question does not need repeating on a return visit. You can delete the entry at any time through your browser settings.

Contact form

Details submitted through the contact form are processed on the same server that hosts this website and then delivered by email to the provider’s mailbox. No external form service is involved.

Processed are the details you enter — name, email address, optionally your company, the chosen subject and your message. In addition, a shortened check value derived from your IP address is generated to fend off automated submissions; the IP address itself is not stored in plain text.

The legal basis is your consent (Art. 6(1)(a) GDPR) and, for enquiries relating to a contract or its initiation, Art. 6(1)(b) GDPR. You may withdraw your consent at any time with effect for the future.

Email is dispatched through Google Workspace. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A data processing agreement is in place.

Your enquiry is deleted once it has been dealt with conclusively and no statutory retention periods apply — as a rule after twelve months at the latest.

Booking an appointment

Appointment booking uses the Google Calendar appointment scheduler. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The calendar only loads after you have explicitly agreed on the relevant page. Until then there is no connection to Google whatsoever. After your consent, your IP address and further connection data are transmitted to Google, and Google may set its own cookies.

The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG). Transfer to the United States cannot be ruled out; Google relies on the EU-US Data Privacy Framework and on standard contractual clauses for this.

If you would rather avoid that, use the alternative offered on the same page and send an email instead.

Disclosure to third parties

Beyond the cases described above, your data is not passed on to third parties. Your details are never sold and never used for advertising.

Use of artificial intelligence

Regulation (EU) 2024/1689 on artificial intelligence (the "AI Act") sets out transparency obligations in Article 50 that apply from 2 August 2026. For completeness, this section discloses where artificial intelligence plays a role and where it does not.

No AI system that interacts with you is used on this website. There is no chatbot, no digital assistant, and no feature that evaluates your input automatically. No emotion recognition and no biometric categorisation take place.

There is no automated decision-making within the meaning of Art. 22 GDPR. Enquiries are decided on by a human being alone.

Details submitted through the contact form are not used to train AI models and are not passed to providers of AI services. They serve only to handle your enquiry.

In development work, AI-assisted tools are used as an aid, for instance when programming. Results are reviewed and taken responsibility for by a human before use. For client projects the rule is: where AI systems are used, this is agreed in advance and set out contractually.

The extensions offered in the Shopware Store contain no AI features and therefore fall outside the obligations of the AI Act.

Your rights

You have the following rights in relation to the controller:

• access to the data stored about you (Art. 15 GDPR)
• rectification of inaccurate details (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Right to complain

Independently of this, you may lodge a complaint with a data protection supervisory authority, in particular in the state of your habitual residence or of the controller’s registered office.

Encryption

This website is served exclusively over an encrypted connection (HTTPS). Requests over an unencrypted connection are redirected automatically.