Privacy policy

This is a courtesy translation. Only the German version is legally binding.

1. General information

The protection of personal data is very important.
This website can generally be used without providing personal data.

Where personal data is processed in individual cases, this is done exclusively in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection provisions.

Complete protection against access by third parties cannot be guaranteed for data transmitted over the internet. Alternatively, you can contact us by other means (e.g. by e-mail).

2. Definitions

This privacy policy uses the terms of the GDPR.
Personal data is any information relating to an identified or identifiable natural person.

3. Controller

The controller responsible for data processing on this website is the operator named in the legal notice.

You can contact the controller at the e-mail address given there.

4. Cookies and local storage

This website uses only technically necessary cookies that are required for the operation and secure display of the website. No cookies are set for visitors; cookies are only created when signing in to the administration area.

If you choose settings under “Accessibility” (e.g. text size or contrast), they are stored exclusively in your browser’s local storage so that they apply on all pages. For the duration of your visit (until you close the browser window), it is also noted that you have seen the privacy notice, so that it does not appear on every page view. This information is not transmitted to us. You can delete it at any time with “Reset all settings” or in your browser. It is stored at your request and is strictly necessary for this purpose (section 25 (2) no. 2 TDDDG).

No analytics, tracking or marketing cookies are used.
No user analysis and no profiling takes place.

Technically necessary cookies are used on the basis of
Art. 6 (1) (f) GDPR (legitimate interest).

5. Collection of general data and information

When this website is accessed, the hosting provider automatically collects and temporarily stores the following data:

IP address (regularly shortened or anonymised)
date and time of access
pages or files accessed
browser type and version
operating system used

This data cannot be attributed to specific persons.

Purpose of processing:

technical provision of the website
ensuring stability and security

Legal basis:
Art. 6 (1) (f) GDPR.

The data is deleted automatically after a short time.

6. Contacting us and contact form

If you contact us by e-mail or via the contact form, the information you provide will be used exclusively to deal with your request.

In the contact form, name, telephone number and e-mail address are required; subject, message and a file attachment (PDF, JPG or PNG) are optional. The information is sent to us by e-mail and is not stored in a database of the website. An attachment is placed on the server only briefly for sending and deleted immediately afterwards.

To protect against automated spam, your browser solves a small computing task (ALTCHA) before sending. It is generated and verified exclusively on our own server; no cookies are set for this and no data is transmitted to third parties.

Legal basis:

Art. 6 (1) (a) GDPR (your consent in the contact form, revocable at any time by e-mail),
Art. 6 (1) (b) GDPR (pre-contractual measures) or
Art. 6 (1) (f) GDPR (legitimate interest in communication and in protection against spam)

Data is not passed on to third parties.

7. Routine erasure

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

Once the purpose no longer applies, the data is routinely erased.

8. Rights of data subjects

Data subjects have in particular the right to:

access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
object (Art. 21 GDPR)
withdraw consent with effect for the future (Art. 7 (3) GDPR)

Requests can be made using the contact details given in the legal notice.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

9. No automated decision-making

No automated decision-making and no profiling within the meaning of Art. 22 GDPR takes place.

10. Hosting

This website is operated by an external hosting service provider within the European Union.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

Legal basis:
Art. 6 (1) (f) GDPR.

11. Cloudflare

To protect against attacks and for shorter loading times, access to this website is routed through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes technically necessary connection data such as IP address, requested address, date and time and browser information. Cloudflare does not set any analytics or advertising cookies.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR).

Legal basis:
Art. 6 (1) (f) GDPR (legitimate interest in a secure and fast website).

12. Protection of the administration area

To protect against unauthorised sign-in attempts, the IP address, time and user name used are stored when signing in to the administration area. After several failed attempts, the IP address is temporarily blocked. These entries are deleted automatically after 30 days at the latest. Normal visits to the website are not affected.

Legal basis:
Art. 6 (1) (f) GDPR (legitimate interest in the security of the website).

13. Validity

This privacy policy is currently valid and dated 26 October 2026.
Changes may become necessary due to technical or legal developments.