Privacy Policy

Responsible Body

The entity responsible under data protection law for the collection and processing of personal data on this website is:

Access Data (Server Log Files)

When you access our website, we automatically collect and store access data in so-called server log files, which your browser automatically transmits to us.

• Browser type and browser version of your PC
• Operating system used by your PC
• Referrer URL (source/reference from which you arrived at our website)
• Hostname of the accessing computer
• Date and time of the server request
• The IP address currently used by your PC (if applicable, in anonymized form)

As a rule, it is not possible for us to establish a personal reference, nor is this intended. The processing of such data is carried out in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.

Google Maps

Our website uses the mapping service Google Maps of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") via an API (Application Programming Interface).

To ensure data protection on our website, Google Maps is deactivated when you first visit our website. A direct connection to Google's servers is only established when you independently activate Google Maps (consent pursuant to Art. 6(1)(a) GDPR). This prevents your data from being transmitted to Google when you first visit our website.

After activation, Google Maps will store your IP address. This is then usually transmitted to and stored on a Google server in the USA. The provider of this website has no influence on this data transfer after the activation of Google Maps.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/

Newsletter

If you have expressly consented, we will regularly send our newsletter to your email address. To receive our newsletter, you must provide us with your email address and subsequently verify it. Supplementary data is not collected or is voluntary. The data is used exclusively for sending the newsletter.

The data provided during newsletter registration is processed exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time. An informal notification by email is sufficient for the revocation, or you can unsubscribe via the "unsubscribe" link in the newsletter. The legality of data processing operations already carried out remains unaffected by the revocation.

Data entered for the purpose of setting up the subscription will be deleted in the event of unsubscription. If this data has been transmitted to us for other purposes and at another point, it will remain with us.

Contact Form (Tally)

For contact forms on our website, we use the service Tally provided by Tally NV, Hendrik Van Veldestraat 116, 2000 Antwerp, Belgium. When you fill out and submit a form on our website, the data you enter is processed via Tally's servers and forwarded to us.

The following data may be processed:

• Name
• Email address
• Message content
• Additional information voluntarily provided by you
• Technical data (IP address, browser type, time of submission)

Processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR (by actively submitting the form) or for the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR, insofar as your inquiry is aimed at the conclusion of a contract.

Tally processes your data on our behalf and exclusively according to our instructions. We have concluded a Data Processing Agreement (DPA) with Tally in accordance with Art. 28 GDPR. Data is stored on servers within the European Union.

Your data will not be disclosed by Tally to third parties unless this is technically necessary for the provision of the service (e.g., hosting providers).

Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage, or there is no longer any need for data storage. Mandatory legal provisions – in particular retention periods – remain unaffected.

You may revoke your consent at any time. An informal notification by email is sufficient for the revocation. The legality of data processing operations carried out up to the point of revocation remains unaffected by the revocation.

Further information on data protection at Tally: https://tally.so/help/privacy-policy

Data Use and Disclosure

We will neither sell nor otherwise market the personal data you provide to us, e.g. by email (e.g. your name and address or your email address), to third parties. Your personal data will only be processed for correspondence with you and only for the purpose for which you provided the data to us. To process payments, we forward your payment data to the credit institution handling the payment.

The use of data automatically collected during your visit to our website is only carried out for the purposes stated above. The data is not used for any other purpose.

We assure you that we will not otherwise disclose your personal data to third parties unless we are legally obligated to do so or you have given us your prior consent.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Storage Duration

Personal data communicated to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Insofar as commercial and tax law retention periods must be observed, the storage period for certain data may be up to 10 years.

Data Subject Rights

With regard to the personal data concerning you, you have the following rights as a data subject vis-à-vis the controller in accordance with the statutory provisions:

Competent Supervisory Authority

The supervisory authority responsible for us is: