Privacypolicy.

1. Controller

2. Provision and hosting of this website

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA (“Netlify”). When you access the website, technically necessary data may be processed. This may include your IP address, the date and time of access, the page or file requested, the amount of data transferred, the referrer URL, and information about your browser and operating system.

This processing is necessary to deliver the website and to ensure its stability and security. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable provision of this website.

Netlify processes data as a processor in connection with its hosting services. Netlify's Data Processing Agreement (DPA) forms part of its terms and covers, among other things, instructions, confidentiality, security measures, deletion and the use of further processors.

Data may also be processed in the United States. Netlify states that it participates in the EU–U.S. Data Privacy Framework. Where that framework does not apply, its DPA provides in particular for the European Commission's Standard Contractual Clauses. Netlify publishes its current processors, their activities and processing countries in its subprocessor list. Further information is available in Netlify's privacy statement.

Netlify does not publish one uniform, binding retention period for every technical access and security log generated when delivering a static website. According to the provider, such data is processed for the relevant purpose and only for as long as required for operation, security and legal obligations. No external log drain, Netlify Web Analytics or Real User Monitoring is intended for this project. When the contract ends, customer data is deleted in accordance with the DPA. The operator has only limited control over the hosting provider's internal backup and deletion cycles.

3. Contact by email

If you contact us by email, the information you provide will be processed in order to deal with your enquiry. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is responding to your message. The data will be deleted once the correspondence has been concluded, unless a legal retention obligation or the establishment, exercise or defence of legal claims requires further storage.

4. Email service provider

The email mailbox is provided by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. If you contact us by email, united-domains may process your message, contact details and technical connection data. The processing is necessary for secure email communication and is based on Article 6(1)(f) GDPR.

A data processing agreement under Article 28 GDPR has been concluded with united-domains. Messages remain in the mailbox until they are deleted as described above. Technical connection, security and backup data may temporarily remain in accordance with united-domains' contractual deletion and backup cycles.

Further information is available in the united-domains privacy policy.

5. Cookies, browser storage, analytics and external content

This website does not set its own cookies and does not store data in your browser's Local Storage, Session Storage or IndexedDB. No analytics or advertising tools, social-media plugins, embedded videos, maps or contact forms are used. Neither Netlify Web Analytics nor Real User Monitoring is included in this project's source code. The website's security policy also prevents unapproved scripts from loading and blocks connections to analytics endpoints. Fonts, scripts and images are served exclusively as parts of this website from the same domain.

External websites are only opened through clearly identifiable links. Your browser will connect to the relevant provider only after you select such a link. The publicly served website was last technically reviewed on 27 September 2026.

6. Requirement to provide data and automated decisions

The processing of technical access data is required to deliver the website. Without that data, the website cannot be provided. No automated decision-making, including profiling, takes place.

7. Your rights

Subject to the statutory requirements, you have in particular the right to:

• obtain information about the processing of your personal data,
• have inaccurate data corrected,
• have data erased or its processing restricted,
• object to processing based on legitimate interests,
• data portability, and
• lodge a complaint with a data protection supervisory authority.

The competent supervisory authority in Bavaria is, in particular, the Bavarian State Office for Data Protection Supervision.

8. Updates

This privacy policy will be updated if the website, the services used or the legal requirements change.

Last updated: 27 September 2026