PRIVACY POLICY

General Information on Data Processing

We process personal data in accordance with the provisions of the GDPR and applicable national data protection laws. Personal data means any information relating to an identified or identifiable natural person. We process personal data only:

• where you have given consent (Art. 6(1)(a) GDPR),
• where processing is necessary for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR),
• where processing is necessary for compliance with a legal obligation (Art. 6(1)(c) GDPR),
• where processing is necessary for the purposes of legitimate interests pursued by us (Art. 6(1)(f) GDPR), provided that your interests or fundamental rights do not override those interests.

Hosting

Our website is hosted by: netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe

In the course of hosting, the provider processes personal data (e.g., IP addresses, log files) on our behalf. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure and efficient website operation). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded where required.

Access Data and Server Log Files

When you visit our website, the following data may be automatically collected:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Pages visited

This data is processed to ensure the stability, security, and proper functioning of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical security). Log data is stored only as long as necessary for security purposes.

Contact Form and Email Contact

If you contact us via contact form or email, the information you provide (e.g., name, email address, message) will be processed for the purpose of handling your request.

Legal basis:

• Art. 6(1)(b) GDPR (pre-contractual measures), or
• Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Your data will be deleted once your request has been fully processed, unless statutory retention obligations apply.

Cookies and Consent Management

Our website uses cookies and similar technologies. Technically necessary cookies are processed on the basis of Art. 6(1)(f) GDPR. All non-essential cookies (e.g., analytics, marketing) are only processed on the basis of your prior consent in accordance with Art. 6(1)(a) GDPR and §25 TTDSG (where applicable). You may withdraw your consent at any time with effect for the future via our cookie consent management tool.

Web Analytics – Google Analytics 4

We use Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics uses cookies and similar technologies to analyze website usage. IP anonymization is enabled. Your IP address is truncated within the EU/EEA before transmission. Processing is based exclusively on your consent (Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the United States. Such transfers are safeguarded by: EU Standard Contractual Clauses (SCC), and/or Participation in the EU-US Data Privacy Framework (where applicable). You may withdraw your consent at any time via the consent management tool. For further information, please refer to Google’s Privacy Policy:
https://policies.google.com/privacy

Social Media Integrations
a) LinkedIn

Our website includes features of the LinkedIn network, operated by:

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland

When visiting a page containing LinkedIn features, a connection to LinkedIn servers may be established. If you are logged into your LinkedIn account, LinkedIn may associate your visit with your user account. Legal basis: Art. 6(1)(a) GDPR (consent, where applicable) or Art. 6(1)(f) GDPR (legitimate interest in professional online presence). Further information:
https://www.linkedin.com/legal/privacy-policy

Data Transfers to Third Countries

Where personal data is transferred to countries outside the European Union or the European Economic Area, appropriate safeguards pursuant to Art. 44 et seq. GDPR are implemented, including: Standard Contractual Clauses (SCC), Adequacy decisions of the European Commission, EU-US Data Privacy Framework certification (where applicable).

Retention Period

We store personal data only for as long as necessary to fulfill the respective processing purposes or to comply with statutory retention periods. Once the purpose ceases to apply, data will be deleted or restricted in accordance with legal requirements.

Your Rights Under the GDPR

You have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact us using the details provided above.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Our website uses SSL/TLS encryption to ensure secure data transmission.

External Links and Online Presence

This Privacy Policy applies exclusively to this website. Our online presence on third-party platforms (e.g., LinkedIn) is governed by the respective privacy policies of those platforms.