Privacy policy

1. Controller

Controller for the processing of personal data on this website (Art. 4(7) GDPR):

We are not legally required to appoint a data protection officer and have not done so.

2. In short

This website sets no cookies, uses no analytics or tracking, embeds no third-party content and serves its fonts from our own server. Personal data is processed only in the hosting provider's server logs and when you email us.

3. Hosting and server logs

This website is served via Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When you visit the site, Cloudflare processes technically necessary data: IP address, date and time of access, page requested, referrer URL, browser type and operating system. This is done to deliver the website and to keep it secure and stable, in particular to fend off attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. We have a data processing agreement with Cloudflare under Art. 28 GDPR. Transfers to the USA rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified. Log data is kept only as long as needed for these purposes.

4. Contact by email

When you email us, we process your email address, your name (if given) and the content of your message in order to answer you.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once it is no longer needed, unless statutory retention periods apply (for example six years for business correspondence under § 257 HGB).

Incoming email to our domain is forwarded via Cloudflare Email Routing (Cloudflare, Inc., address in section 3) to our mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), where it is stored. Data may be transferred to the USA; both providers are certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

5. Cookies and local storage

This website neither stores information on your device nor reads it from there (§ 25 TDDDG). The language choice works through separate pages, without cookies.

6. External links

Links to other websites, such as folio451.com, take you to those services. Their own privacy policies apply there.

7. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)

Right to object (Art. 21 GDPR)

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. An informal email to [email protected] is enough.

Right to lodge a complaint (Art. 77 GDPR)

You may complain to a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

8. Obligation to provide data, automated decisions

You are not obliged to provide personal data. Without the technical data described in section 3, however, the website cannot be delivered. We do not use automated decision-making or profiling.