Privacy policy

This is a courtesy translation. Only the German version is legally binding. German version

1. Controller

The controller for data processing on this website is:

2. Hosting

This website is hosted by Hostinger. When you access the website, our hosting provider automatically records so-called server log files transmitted by your browser. These include in particular your IP address, the time of the request and the browser used (user agent). This data is collected solely to ensure the trouble-free and secure operation of the website and is not merged with other data sources. The legal basis is our legitimate interest in providing the website in a technically flawless manner (Art. 6(1)(f) GDPR).

3. Contact form

If you write to us via the contact form, we process the information you enter there: first name, last name, email address and your message, as well as your company if you provide it. We also receive whether you submitted the form on the German or the English page, so that we can reply in your language. We use this data exclusively to handle your enquiry and to answer follow-up questions.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or is aimed at concluding one. In all other cases, processing is based on our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR).

We need the fields marked with * in order to handle your enquiry. Providing your company is optional. You are under no statutory or contractual obligation to provide this data. Without the required details, however, we cannot accept the form; you can always reach us by email or phone instead.

Your enquiry reaches us as an email. For the technical delivery we use the Resend service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, as a processor. The form data is transferred to servers in the USA. Resend is certified under the EU-US Data Privacy Framework; the European Commission's standard contractual clauses apply in addition.

Your enquiry remains in our mailbox until it has been fully dealt with and there is no longer any reason to keep it. If the enquiry leads to an assignment, the retention periods under German commercial and tax law apply.

To prevent abuse, the form contains a field that is invisible to people and is only filled in by automated programs. In addition, when you submit the form, the server stores a hash value of your IP address, generated with a secret key (HMAC-SHA-256), together with the time of the request in a temporary file in order to reject multiple submissions within 10 seconds. For IPv6 addresses, only the first part of the address (the network prefix) is included in the hash value. Your IP address itself is not stored. The file is not analysed and not combined with other data. Entries older than 24 hours are deleted automatically the next time the form is used. The server also limits the total number of enquiries per hour; for this purpose it stores only the times of the last hour, no personal data. The legal basis is our legitimate interest in operating the form without abuse (Art. 6(1)(f) GDPR).

4. Contacting us by email or phone

If you contact us by email or phone, we process your details (for example name, email address, phone number and the content of your enquiry) in order to deal with your request. The legal bases and storage period are the same as for the contact form.

5. Cookies, statistics and embedded content

Without your consent, this website does not set any cookies and does not use any services for statistics or audience measurement. We only use the statistics service Google Analytics if you expressly consent (see section 6). No third-party content is embedded, for example videos, maps or fonts from external servers. Without your consent, your browser therefore does not connect to any third-party servers when you visit this website. This also applies to the contact form: it sends your details to our own server. Only that server passes them on to the Resend service for delivery (see section 3).

So that we do not have to ask you again on every visit, we store your decision on Google Analytics (accept or decline) together with the date in your browser's local storage (localStorage). The entry contains only this choice, is not transferred to us and is replaced by a new request after 12 months. It is strictly necessary to respect your decision (Section 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

6. Statistics with Google Analytics

If you consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). It shows us how our website is used, for example which pages are viewed, how long a visit lasts and which pages visitors come from. We use these analyses to improve the website and its content.

For this purpose Google Analytics sets cookies on your device and processes, among other things, your IP address, the pages viewed, date and time, the previously visited page (referrer), details of your browser, operating system and device, and your approximate location. Usage is recorded under a random identifier, not under your name. According to Google, Google Analytics 4 does not store IP addresses; they are only used to determine your approximate location and are then discarded. Data may be transferred to Google LLC in the USA in the process. The transfer is based on the EU-US Data Privacy Framework, under which Google is certified.

Google Analytics is only loaded after you have clicked “Accept” in the notice shown when you visit the site. If you decline, Google Analytics is not loaded. The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future by opening “Cookie settings” at the bottom of any page and choosing “Decline”. The Google Analytics cookies are then deleted.

Google processes the data on our behalf; we have concluded a data processing agreement with Google in accordance with Art. 28 GDPR. The collected data is deleted in Google Analytics after 14 months. The Google Analytics cookies remain on your device for up to 2 years unless you delete them earlier or withdraw your consent.

Further information: https://policies.google.com/privacy (opens external site)

7. Fonts

The fonts used on this website are hosted locally on our own server. No connection is made to Google Fonts or any other external font provider, so no data is transferred to third parties in this context.

8. Links to the websites of our business areas and to social media

This website links to the websites of our business areas and to our profiles on LinkedIn, Instagram, YouTube and Vimeo. These are plain links, no content from these services is embedded. These links open in a new tab. A connection to the linked website is established only when you click such a link. The linked websites are subject to their own privacy policies.

9. SSL/TLS encryption

For security reasons this website uses TLS encryption, for example for enquiries you send us via the contact form. You can recognise an encrypted connection by “https://” in the address bar and by the lock symbol in your browser.

10. Your rights

Within the scope of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of the data processing. You also have a right to rectification, erasure, restriction of processing and data portability, as well as a right to object to the processing of your personal data. You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing carried out before the withdrawal. You can contact us at any time regarding this and any other questions on the subject of data protection (contact details above).

In addition, you have the right to lodge a complaint with the competent supervisory authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit).