Privacy policy

This is a courtesy translation. The German version of this privacy policy is legally binding.

1. Who is responsible?

The controller responsible for processing personal data on this website is:

Vor- und Nachname Geschäftsbezeichnung, falls verwendet Straße und Hausnummer Postleitzahl und Ort Germany Email: E-Mail-Adresse Phone: Telefonnummer

No data protection officer has been appointed because there is no legal obligation to do so. If you have privacy questions, please write directly to the email address above.

2. The short version

• This website sets no cookies and stores nothing in your browser.
• There are no analytics or tracking tools, no advertising and no social media plugins.
• All content, including the fonts, comes from our own server. Visiting this site does not send any data to third parties such as Google or Meta.
• We only process personal data to deliver the website securely and to answer your enquiry.

That is why there is no cookie banner on this site: we have nothing to ask your consent for.

3. Hosting and server

The website and the application server for enquiries run on a server operated by Name und Anschrift des Hosting-Anbieters, located in Land des Rechenzentrums, z. B. Deutschland. We have a data processing agreement with the provider under Art. 28 GDPR.

Web server. The web server delivers the pages. It is configured not to write access logs containing your IP address.

Application server (availability and forms). When a page loads, your browser asks our own application server for the current availability (the “available from …” indicator). The server logs:

• IP address
• date and time
• requested address and response code
• browser identifier (user agent)

We need these logs to detect faults and abuse, for example mass form submissions. They are deleted automatically after 5 days. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

4. Contact form and project request

When you contact us via the “Initial call” or “Project request” form, we process:

• required: name, company, email address, topic
• optional: role, phone number, preferred time slots, message, details on system landscape, timeframe and budget, and one PDF attachment (max. 10 MB)
• automatically: page language, time of the request, the page from which you sent the form and, if transmitted, the name of the website that referred you (domain only, not the full address)
• the time at which you confirmed the notice about this privacy policy, and the version of that notice

Purpose and legal basis. We use the data solely to answer your enquiry and to prepare a possible engagement. The legal basis is Art. 6(1)(b) GDPR if you yourself want to become a contracting party. If you are enquiring on behalf of your employer, it is Art. 6(1)(f) GDPR: our legitimate interest in handling business enquiries from companies.

Storage location. Enquiries are stored on our own application server (see section 3). They are not passed on to external form or CRM services. PDF attachments are not publicly accessible.

Spam protection. To protect against automated submissions, we use an invisible field and a minimum completion time. No external captcha service is used.

Retention. Enquiries without further activity are deleted automatically 24 months after the last update, or earlier at your request. If an engagement follows, we keep business correspondence for as long as German commercial and tax law requires (§ 257 HGB, § 147 AO: 6 or 8 years).

Obligation to provide data. You are not obliged to provide any data. Without the required fields, however, we cannot answer your enquiry.

5. Contact by email or phone

If you contact us directly by email or phone, we process your details for the same purposes, on the same legal bases and with the same retention periods as described in section 4. Emails are received and sent via Name des E-Mail-Anbieters. We have a data processing agreement with this provider.

After submitting the form, you receive an automatic confirmation at the email address you provided, also sent via this provider.

6. Storage in your browser

The public website stores neither cookies nor any other data in your browser (measured with Chrome on 18.10.2026, all pages in all three languages).

Only the internal, password-protected admin area does so. After login at /portal/, a sign-in token (pocketbase_auth) is kept in the browser’s local storage. It is removed on logout and expires after 5 days at the latest. The content editor at /admin/ stores the language setting and view options there (sveltia-cms.locale, sveltia-cms.prefs). This storage is strictly necessary for the function the user requests (§ 25(2) no. 2 TDDDG) and concerns only the website’s operators.

7. Links to other websites

We link to our LinkedIn profile. This is a plain link: no data is transferred to LinkedIn unless you click it. After clicking, LinkedIn’s privacy policy applies.

8. Recipients and transfers to third countries

The only recipients of your data are the processors named above (hosting and email provider). They may process the data only on our instructions. No data is transferred to countries outside the EU/EEA.

9. Your rights

You have the right at any time to

• access the data we hold about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR).

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. A short email to the address above is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Name und Anschrift der Landesdatenschutzbehörde am Sitz.

There is no automated decision-making, including profiling.

10. Information for persons in Türkiye (KVKK)

Where Turkish Law No. 6698 on the Protection of Personal Data (KVKK) also applies, the information in this policy serves as notice under Art. 10 KVKK. Data is collected via the forms and by email for the purposes set out in sections 3 to 5. The processing is necessary to conclude or perform a contract, and we have a legitimate interest in it (Art. 5(2)(c) and (f) KVKK). Data is stored on servers in the European Union. You can exercise your rights under Art. 11 KVKK via the email address above.

11. Version

Last updated: 18 October 2026. We will update this policy if the website or the legal situation changes.