Legal
Privacy Policy
Last updated: October 2026.
1)Controller
Controller within the meaning of the General Data Protection Regulation (GDPR) is:
2)General information
This Privacy Policy explains how we process personal data when you visit and use this website. Personal data means any information relating to an identified or identifiable natural person. If you have questions about data protection on this website, please contact us at the email address above.
3)Data processing when visiting the website (server log files)
When you access this website, technical data is processed automatically, in particular: IP address (or shortened IP, depending on configuration), date and time of access, accessed page / file, referrer URL, browser type/version and operating system.
Purpose: ensuring security and stability, troubleshooting, preventing misuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Retention: server logs are stored only as long as necessary for security and troubleshooting and are then deleted or anonymised, unless longer storage is required for evidence in security incidents.
4)Contacting us (email / contact form)
If you contact us by email or via the contact form on the Imprint page, we process the data you provide (e.g., name, email address, message, and any other information you submit). The contact form is processed through our website platform and its service providers, who act as processors on our behalf.
Purpose: handling your request and communicating with you.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / communication about requested services) and/or Art. 6(1)(f) GDPR (legitimate interest in responding).
Retention: we keep the communication as long as necessary to handle your request and possible follow-up, and then delete it unless statutory retention obligations apply.
5)Feedback / testimonial form
At the bottom of every page you can submit a feedback form. We process the data you provide: first name, country, a 1–5 star rating, your feedback text and email address.
Purpose: to review your submission and, with your explicit consent, to publish your first name, country and feedback text on this website.
Legal basis: Art. 6(1)(a) GDPR (consent). Consent is given via the checkbox in the form and can be withdrawn at any time.
Storage: submissions are stored in our website platform (HighLevel) so we can review them. The email address is used only to verify your feedback and is never published.
Review process: Submissions are reviewed manually before publication. Genuine positive and critical feedback is published; we only reject spam, insults, personal data of third parties, fake or unlawful content.
Withdrawal / deletion: you can request withdrawal of consent or deletion of your submission at any time by email. Only your first name and country are published; your email address is not.
6)Cookies and similar technologies
This website may use cookies and similar technologies.
6.1 Technically necessary cookies
Technically necessary cookies may be used to ensure core website functions (e.g., page delivery, security features, form stability).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a functional and secure website).
Storage of your cookie choice: we store your choice (accepted or declined) in your browser (local storage entry "analytics-consent") so that we do not ask you again on every page.
Legal basis: Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.
6.2 Optional cookies (analytics/marketing), only with consent
We use Google Analytics 4 to measure reach and collect usage statistics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC (USA). Google Analytics sets the _ga and _ga_* cookies for this purpose. Analytics is loaded only after you accept via our consent banner; no analytics script or cookie is set before consent.
Purpose: reach measurement and usage statistics.
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG (consent). Consent is given via the consent banner and can be withdrawn at any time.
Transfer to the USA: based on the EU-US Data Privacy Framework.
Withdrawal: you can withdraw your consent at any time via the "Cookie settings" link in the footer of every page. On withdrawal we stop loading the analytics script and delete the _ga cookies.
Data retention: data retention is configured in our Google Analytics account.
Analytics and marketing technologies (e.g., Meta Pixel) other than Google Analytics are not used at the moment. If such tools are implemented in the future, they will be activated only after your consent, via the cookie/consent banner.
German rule for storing/accessing information on your device: consent is generally required under the TDDDG for non-essential technologies.
6.3 Affiliate tracking
Affiliate partners may use cookies or similar technologies on their own websites to attribute referrals. The use of such technologies on third-party websites is governed by the respective partner's privacy and cookie settings. If non-essential affiliate tracking technologies are used directly on this Website, they will only be activated after consent where required by law.
7)Use of GoHighLevel / HighLevel (website & forms)
This website is built/operated using a GoHighLevel/HighLevel website template and the website's contact forms may be processed through HighLevel. HighLevel acts as a service provider (processor) for the website operator.
A Data Processing Agreement (DPA) is available from HighLevel. HighLevel also provides GDPR/privacy information and refers to using Standard Contractual Clauses (SCCs) for lawful data transfers where applicable.
Legal basis: Art. 6(1)(b) GDPR (form communication) and/or Art. 6(1)(f) GDPR (operating the website), and Art. 28 GDPR (processor relationship).
8)International data transfers (e.g., to the USA)
Depending on the configuration of the used service providers (including HighLevel), personal data may be transferred to recipients in countries outside the European Economic Area (EEA), including the USA. Where required, such transfers are based on: an EU Commission adequacy decision (Art. 45 GDPR), where applicable, and/or appropriate safeguards such as EU Standard Contractual Clauses (Art. 46 GDPR).
9)Google Maps (not active yet)
Google Maps is currently not embedded. If we embed Google Maps in the future, it may result in data being transmitted to Google (e.g., IP address and usage data). We will implement Google Maps in a privacy-friendly way (e.g., with a click-to-load solution) and, where required, obtain your consent before loading the map.
Legal basis (future implementation): Art. 6(1)(a) GDPR (consent) and/or Art. 6(1)(f) GDPR (legitimate interest), depending on the implementation and necessity.
10)WhatsApp contact (planned)
WhatsApp is currently not integrated as a website feature. If we add WhatsApp as a contact channel in the future (e.g., Chat via WhatsApp), your data will be processed by WhatsApp/Meta when you use that channel. We will provide additional information at the point of use (and obtain consent where required).
11)Recipients / categories of recipients
We may share personal data with:
- hosting/platform and IT service providers (as processors),
- authorities/courts if legally required,
- third parties only if you request this or if it is necessary for fulfilling a request.
12)Your rights under the GDPR
You have the right to:
- access (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interests (Art. 21 GDPR),
- withdraw consent at any time (Art. 7(3) GDPR) where processing is based on consent,
- lodge a complaint with a supervisory authority (Art. 77 GDPR).
13)Data security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
14)Changes to this Privacy Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. The current version is published on this website.
