Privacy Policy

Last updated: September 2026.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the operation of this website is the company:

For all questions relating to data protection, please contact our data protection contact, Ms Johanna Lutteroth, at the above address or by e-mail. She acts as the company’s representative for matters under data protection law.

2. Principle: collection limited to the minimum technically necessary

Protecting your personal data is important to us. This website collects only the minimum data technically necessary to deliver the pages you request. In particular, we do not use:

• cookies and no similar tracking technologies,
• analytics or tracking services (e.g. Google Analytics),
• contact forms and no newsletter sign-up,
• social media plugins.

You can therefore visit our website without us learning anything about your identity. The only processing that takes place when you merely browse the site is described in section 3 below.

3. Server log files created by the hosting provider

This website is hosted by an external service provider on our behalf. A data processing agreement pursuant to Article 28 GDPR is in place with the hosting provider, and the website is delivered from data centres within the European Union. When you access this website, the hosting provider automatically processes technical access data in so-called server log files, which your browser transmits. These are in particular:

• browser type and browser version,
• operating system used,
• referrer URL (the page you visited previously),
• time of the server request,
• IP address (shortened/anonymised where technically possible).

This data is technically necessary to ensure that the website can be delivered and that systems remain secure and stable. The legal basis is Article 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). The data is not merged with other data sources and is deleted automatically after 7 days at the latest.

4. Contact by e-mail

If you contact us by e-mail, we process the information you provide (name, e-mail address, content of your message) solely in order to handle your request. The legal basis is Article 6(1)(f) GDPR (legitimate interest in answering enquiries) or Article 6(1)(b) GDPR where your request is related to the initiation or performance of a contract. Your data is deleted as soon as it is no longer required to handle your request and no statutory retention obligations apply.

5. External content (web fonts)

In order to present a consistent visual identity, we load fonts from Google Fonts. When you open the page, your browser establishes a connection to Google servers, during which your IP address is transmitted. The legal basis is Article 6(1)(f) GDPR (legitimate interest in a consistent and appealing presentation). In this context data may be transferred to the United States. Google is certified under the EU–US Data Privacy Framework, which is the legal safeguard relied upon for this transfer. We are preparing to serve the fonts directly from our own servers, after which this section will no longer apply.

6. Your rights

Within the limits of the statutory provisions you have the following rights with regard to the processing of your personal data:

• the right of access to your personal data (Article 15 GDPR),
• the right to rectification (Article 16 GDPR),
• the right to erasure (Article 17 GDPR),
• the right to restriction of processing (Article 18 GDPR),
• the right to data portability (Article 20 GDPR),
• the right to object (Article 21 GDPR).

If you have given us consent to the processing of data, you may revoke it at any time with effect for the future. To exercise any of the rights listed above, please contact the controller named under section 1.

7. Your right to object

Pursuant to Article 21 GDPR you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on Article 6(1)(e) or Article 6(1)(f) GDPR, including profiling based on those provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. To exercise your right to object, an e-mail to the address given in section 1 is sufficient.

8. Right of complaint to a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, for example the Hamburg Commissioner for Data Protection and Freedom of Information (https://www.datenschutz-hamburg.de).

9. Data security

This website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser line. This prevents data you transmit to us from being read by third parties.

10. Current version of this policy

We reserve the right to adjust this privacy policy at any time so that it always meets current legal requirements or in order to implement changes to our services. The version currently published applies to your next visit.