Privacy policy

At a glance

Without your consent, we only process what the website needs to run: technical access data at our host, two essential cookies and a cookieless count of page views. We only load Google Analytics and the Meta Pixel once you agree in the cookie window. You can change your choice at any time via "Cookie settings" at the bottom of every page.

Hosting

This website is hosted by Vercel (provider details below). When you visit it, Vercel processes the data required for this, in particular your IP address, on our behalf and according to our instructions; we have a data processing agreement with Vercel under Art. 28 GDPR. The website is delivered through a global server network, so data may also be transferred to the US. Vercel is certified under the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR); the European Commission's standard contractual clauses apply in addition. The legal basis is our legitimate interest in delivering the website securely and quickly (Art. 6 (1) (f) GDPR).

Hosting provider: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States

Server log files

When you visit this website, information transmitted by your browser is recorded automatically: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources and is used solely for technical operation, security and error analysis. The legal basis is Art. 6 (1) (f) GDPR. The data is deleted as soon as it is no longer required for the purpose for which it was collected.

Country-specific cookie window

To show you the cookie window that fits your country, Vercel determines your country from your IP address when you visit. We only use the country code and do not store it. The legal basis is our legitimate interest in obtaining consent the way the applicable law requires (Art. 6 (1) (f) GDPR).

Vercel Web Analytics

We use Vercel Web Analytics to count how often each page is viewed. The service sets no cookies and stores nothing on your device. Visitors are told apart by a value derived from the request and discarded after 24 hours, so you are not recognised across days. We only see aggregated numbers, never individuals. The legal basis is our legitimate interest in measuring reach without accessing your device (Art. 6 (1) (f) GDPR). For the provider and transfers to the US, the hosting section applies.

Contacting us

The contact form sends us your name, email address and message and, if you wish, your salutation, company, phone number, topics and the address of your website. The details are transmitted over an encrypted connection to our server at Vercel and delivered to us from there as an email; they are not stored on the website itself. Our emails are processed by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as our processor (Art. 28 GDPR); the same applies if you email us directly. We use your details to answer your enquiry and to clarify any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in answering it (Art. 6 (1) (f) GDPR). We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

Protecting the form (Cloudflare Turnstile)

To protect the contact form against automated submissions, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile only loads once you start using the form; visitors who don't use the form send no data to Cloudflare. To check whether the submission comes from a person, technical data such as your IP address and information about your browser and device is sent to Cloudflare. Turnstile does not set cookies or store anything in your browser. Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is our legitimate interest in protecting the form against misuse (Art. 6 (1) (f) GDPR); the check is technically necessary for the submission you requested (Section 25 (2) no. 2 TDDDG).

Cookies and consent

Two cookies are essential for running the website and are always active: one stores your chosen language, the other your choice in the cookie window. They do not require consent (Section 25 (2) no. 2 TDDDG). Every other service that stores or reads information on your device is only loaded with your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR): Google Analytics under "Analytics" and the Meta Pixel under "Marketing". You can change or withdraw your consent at any time, with effect for the future, via "Cookie settings" at the bottom of every page. The name, purpose and duration of each cookie are listed in our Cookie Policy.

Google Tag Manager

Once you consent, we load Google Analytics and the Meta Pixel through Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager itself sets no cookies and does not analyse data, but loading it sends your IP address to Google. It is not loaded without your consent. The legal basis is your consent (Art. 6 (1) (a) GDPR). For transfers to the US, see the Google Analytics section.

Google Analytics

If you consent under "Analytics", we use Google Analytics 4 to understand which pages are visited and how enquiries come about. The provider is Google Ireland Limited (address above). The data processed includes the pages viewed, time spent, where the visit came from, approximate location, device and browser; for this, Google sets cookies containing a random identifier. According to Google, Google Analytics 4 does not store IP addresses. Google signals and data sharing with Google are switched off, and event data is deleted after 14 months. Data may be transferred to Google LLC in the US, which is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

Meta Pixel

If you consent under "Marketing", we use the Meta Pixel to measure whether our ads on Facebook and Instagram bring visits to this website. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel sets a cookie and stores entries in your browser's local storage; data such as the page viewed, your IP address and browser details is sent to Meta. If you are logged in to Facebook or Instagram, Meta can link the visit to your account. When it loads, the pixel also fetches a helper script from Meta via the jsDelivr service, which sends your IP address to jsDelivr. We are jointly responsible with Meta for collecting the data and transmitting it to Meta (Art. 26 GDPR); this is governed by Meta's Controller Addendum (facebook.com/legal/controller_addendum). Meta alone is responsible for any further processing. You can exercise your rights against us and against Meta. Data may be transferred to Meta Platforms, Inc. in the US, which is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

Fonts

This website uses the Inter typeface. It is served locally from our own server; no connection to servers operated by Google or other third parties is established when the page loads. Your IP address is not transmitted to anyone.

Links to social networks

Our references to Instagram, Facebook, YouTube and LinkedIn are plain links. Visiting this website sends no data to these networks; that only happens if you click a link and open the network's page. We do not embed videos, maps or other content from third-party servers.

SSL / TLS encryption

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://”.

Your rights

You have the right at any time to obtain information about the personal data we hold about you, its origin and recipients, and the purpose of processing (Art. 15 GDPR). You also have the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). Where we base processing on our legitimate interest, you can object to it on grounds relating to your particular situation (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future; for cookies, use "Cookie settings" at the bottom of every page. For anything else, please contact us at the address above.

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement.

Changes to this privacy policy

We update this privacy policy whenever changes to this website or to the law require it. The version published here always applies. Last updated: 28 September 2026.