The protection of your personal data is of the highest priority for us. This privacy policy provides transparent information about which data we collect when you use our website, for what purposes we use this data, and which rights you have under the General Data Protection Regulation (GDPR).

1. Controller 

The controller responsible for data processing is mentioned above under Legal Notice.

2. Data Protection Officer

You can contact our Data Protection Officer with above form or click here: Contact Us.

3. General Information on Data Processing

The use of our website is generally possible without providing personal data. However, certain data is automatically collected by our IT systems when the website is accessed. This primarily includes technical data (e.g., internet browser, operating system, time of access, IP address). This data is collected automatically once you enter our website and is used to ensure the error-free operation and optimization of our online offering.

In addition, we process personal data when you actively provide it to us, for example by using contact forms, subscribing to a newsletter, or consenting to the use of cookies and similar technologies.

The processing of your data is carried out exclusively on the basis of one of the following legal grounds:

• Art. 6(1)(a) GDPR: processing based on consent,
• Art. 6(1)(b) GDPR: processing for the performance of a contract or in order to take steps prior to entering into a contract,
• Art. 6(1)(c) GDPR: processing for compliance with a legal obligation,
• Art. 6(1)(f) GDPR: processing based on legitimate interests,
• § 25(1) TDDDG: consent to store information on your device (e.g., cookies, tracking).

Any consent you have given may be withdrawn at any time. The lawfulness of the processing carried out prior to withdrawal remains unaffected.

4. Disclosure of Personal Data

We only disclose personal data to third parties if permitted by a legal basis. Disclosure may in particular occur if this is necessary to fulfil contractual obligations, if we are legally required to do so, if we have a legitimate interest in disclosure, or if you have expressly consented to it.

If we engage external service providers as processors, this will always be based on a data processing agreement pursuant to Art. 28 GDPR. In such cases, service providers are obliged to process the data only in accordance with our instructions and to guarantee an adequate level of data protection.

5. Storage Period

The storage period of personal data depends on the respective purpose of processing and statutory retention obligations. As a general rule, we delete your personal data once it is no longer required for the purposes for which it was collected. If statutory retention periods apply (e.g., under commercial or tax law), the data will be deleted after the expiry of these periods.

6. Data Collection on the Website

a) Server log files

When you visit our website, the provider automatically collects and stores information in server log files. These include, for example, the browser type and version, the operating system used, the referrer URL, the hostname of the accessing device, the time of the server request, and the IP address.

The processing of this data is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and optimization of our website.

b) Cookies and consent management

Our website uses cookies, which are small text files stored on your device. Cookies may be technically necessary to enable basic functions of the website, or they may – with your consent – be used for analysis and marketing purposes.

For managing your consents, we store them as long as required for documentation purposes. The legal basis for this is Art. 6(1)(c) GDPR in conjunction with § 25 TDDDG.

You may change or withdraw your consents at any time via the consent tool provided on our website (“Cookie settings”). In addition, you can delete cookies at any time via your browser settings. Withdrawal or deletion has no effect on the lawfulness of processing carried out prior to that time.

c) Social plug-ins

Our website contains social plug-ins from social networks such as Facebook, Instagram, YouTube, or LinkedIn. These are deactivated by default, so that no data is transmitted without your consent. Only once you activate a plug-in will a connection to the provider’s servers be established.

If you are logged in to the respective social network, the provider may associate your visit to our website with your user account. If you wish to prevent this, please log out of the respective network before activating the plug-in.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time, for example by using the unsubscribe link included in every newsletter. The lawfulness of the processing carried out until withdrawal remains unaffected.

7. Data Subject Rights

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR): You may obtain information about the personal data we process and certain other details (e.g. purposes, categories, recipients, storage period).
• Right to rectification (Art. 16 GDPR): You may request the immediate correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You have the right to request deletion of your data if the conditions are met (e.g. if the data is no longer required or you withdraw your consent).
• Right to restriction of processing (Art. 18 GDPR): You may request restriction of processing, for example if the accuracy of the data is contested or you have objected.
• Right to data portability (Art. 20 GDPR): You may request that we provide you with your data in a structured, commonly used, and machine-readable format or transfer it to another controller.
• Right to withdraw consent (Art. 7(3) GDPR): You may withdraw any consent you have given at any time with future effect.
• Right to object (Art. 21 GDPR): You may object to the processing of your personal data at any time for reasons relating to your particular situation, if processing is based on Art. 6(1)(e) or (f) GDPR. If the processing is carried out for direct marketing purposes, you may object at any time without providing reasons. 
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates the GDPR.

To exercise your rights, you may contact us at any time via the e-mail address mentioned above or click here: Contact Us.

8. Amendments to this Privacy Policy

This privacy policy is valid as of 01/2026. Due to technical developments or changes in statutory and regulatory requirements, it may become necessary to amend this policy. The current version is always available on our website.