Privacy Policy

This is a translation for convenience. The German version (Datenschutzerklärung) is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General

Protecting your personal data matters to us. This website is deliberately data-minimal: it contains no tracking or analytics services, no advertising cookies and no embedded third-party content. We only process the data that is technically required to operate the site or that you actively send us (e.g. by email).

3. Hosting and server log files

This website is operated by an external service provider (host). On our behalf, the host processes data that is technically generated when the website is accessed — in particular the IP address, date and time of access, the file requested, the volume of data transferred, browser type and operating system, and the previously visited page (referrer).

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). Server log files serve operational security and are deleted after a short time.

Hosting provider: [TODO: add host name and address, e.g. Hetzner Online GmbH, Gunzenhausen]. A data processing agreement (Art. 28 GDPR) is in place with the host.

4. Contact by email

If you contact us by email, we process the information you provide (email address, name and the content of your message) solely to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures / contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding). The data is deleted once it is no longer required and no statutory retention obligations apply.

5. Fonts (self-hosted)

The fonts used are served locally from our own server. There is no connection to third-party servers (e.g. Google Fonts) and no transfer of your IP address to third parties for font rendering.

6. External links (YouTube, Instagram)

This website links to external profiles (YouTube, Instagram). These are plain links, not embedded content — so no data is transferred to those providers unless you click a link. Only once you follow a link do the privacy terms of the respective provider apply.

7. Your rights

Under the GDPR you have, in particular, the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Lodging a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to the contact details above is sufficient. The competent supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information.

8. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

9. Currency and changes

This privacy policy is dated August 2026. As the website evolves or legal requirements change, it may need to be updated.