Privacy Policy

Data Controller

Overview of Data Processing

This privacy policy explains what personal data we collect when you visit our website, how we use it, and your rights regarding your data. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

Hosting

This website is hosted on Firebase Hosting, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Your data may be transferred to and processed in the United States. Google has implemented Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for data transfers outside the EU.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable website hosting).

Cookies and Consent

Our website uses cookies and similar technologies. We categorize cookies into three types:

Web Analytics

We plan to use web analytics services (such as Google Analytics) to understand visitor behavior. These services will only be activated with your explicit consent. You can withdraw your consent at any time via the cookie consent banner.

Contact Form and Lead Capture

When we implement contact forms on this website, we will collect your name, email address, and any other information you provide. This data will be processed to respond to your inquiries and manage customer relationships. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent).

Newsletter

If you subscribe to our newsletter, we will process your email address and any additional information you provide to send you marketing communications. We use the double opt-in procedure to ensure your consent. You can unsubscribe at any time via the link in each newsletter. Legal basis: Art. 6(1)(a) GDPR (consent).

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about the personal data we process about you.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data in certain circumstances.
• Right to restriction of processing (Art. 18 GDPR): You can request that we limit how we use your data.
• Right to data portability (Art. 20 GDPR): You can request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests.
• Right to lodge a complaint: You can file a complaint with your local data protection authority (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).

Data Retention

We retain your personal data only as long as necessary for the purposes stated in this privacy policy or as required by law. Website logs are typically retained for 30 days. Contact form submissions are retained as long as necessary to handle your inquiry. Newsletter subscriptions are retained until you unsubscribe.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website.