Privacy Policy

The controller responsible for the processing of personal data on this website is:

We take the protection of your personal data seriously. We process personal data in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR/DSGVO) and applicable German data protection rules.

When you visit our website, certain information may be processed for technical reasons, including IP address, date and time of access, pages and files requested, referrer URL, browser type and version, operating system and certain technical information about the device used. This information may be necessary to provide the website, maintain security, diagnose errors and prevent abuse. Where no more specific legal basis applies, the processing may rely on Article 6(1)(f) GDPR where we have a legitimate interest in operating a secure and functional website.

Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Hosting may involve the processing of technical data required to operate the website, including access and connection data. STRATO states that it may process identity, contact, technical, usage and communication data as well as server log information. For processing carried out on behalf of a customer, STRATO provides a data processing agreement under Article 28 GDPR.

When you contact us by email, we process the information you provide, including your name, email address, telephone number, message content and any other information you voluntarily provide. The purpose is to handle your enquiry, communicate with you and, where relevant, prepare a contract. Depending on the circumstances, the legal basis may be Article 6(1)(b) or Article 6(1)(f) GDPR.

Our contact form may process your name, telephone number, email address, company name, subject and message. This information is used to receive, handle and answer your enquiry and, where appropriate, prepare a business relationship.

We use Web3Forms for the technical transmission of contact-form submissions. When you submit the form, the information you enter is sent to Web3Forms and then routed to the email address or destination configured by MOBIANG. According to Web3Forms documentation, form submissions are not maintained as a permanent form database. The service also states that technical server logs that may contain personal information can be retained temporarily and periodically deleted. Web3Forms states that its servers are located in the US-East region of the United States. Its use may therefore involve processing in a third country.

Where the use of a service provider involves transferring personal data to a country outside the European Union or the European Economic Area, the transfer is carried out in accordance with Articles 44 et seq. GDPR. The specific transfer mechanism depends on the service actually used, the applicable contract and the safeguards available.

Cloudflare, Inc. services may be used for DNS, technical infrastructure, security functions, network services and website protection. Cloudflare’s privacy policy describes, among other things, the processing of technical and traffic information, rules for individuals in the EU/EEA and international data transfers. This section applies only to features actually enabled on the website.

Where Cloudinary is used to store, optimise or deliver images and other media files, certain technical information may be processed. Cloudinary states that it processes or provides access to information in the EU, the United States, the United Kingdom, Singapore and Israel and uses appropriate safeguards for international transfers. This section applies only if Cloudinary is actually enabled on the website.

The website may use cookies and similar technologies. Strictly necessary cookies may be used where they are essential to provide the digital service expressly requested by the user. For other types of storing information on, or accessing information from, the user’s device, consent is generally required under Section 25 TDDDG unless a statutory exception applies.

Only analytics, marketing or tracking services that are actually enabled on the website should be described as active in this policy. If new services are introduced, this policy will be updated and consent will be obtained before activation where required.

Depending on the processing operation, personal data may be processed on the basis of Article 6(1)(a) GDPR (consent), Article 6(1)(b) (contract or pre-contractual measures), Article 6(1)(c) (legal obligation) or Article 6(1)(f) (legitimate interests).

We retain personal data only for as long as necessary for the relevant purpose or as required by law. Contact enquiries are generally retained for as long as necessary to handle and follow up on the enquiry. Where a business relationship exists, statutory retention obligations may require longer storage.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access – Article 15 GDPR
• Right to rectification – Article 16 GDPR
• Right to erasure – Article 17 GDPR
• Right to restriction of processing – Article 18 GDPR
• Right to data portability – Article 20 GDPR
• Right to object – Article 21 GDPR
• Right to withdraw consent – Right to withdraw consent for the future where processing is based on consent

To exercise your rights, contact:

Where necessary and legally permitted, we may request a reasonable identity verification to prevent unauthorised disclosure.

You have the right to lodge a complaint with a competent data protection supervisory authority. The competent authority depends, among other things, on the establishment of the controller and the applicable jurisdiction rules.

A Data Protection Officer is appointed only where the legal conditions, including those under Section 38 BDSG or directly applicable law, are met.

We implement appropriate technical and organisational measures to protect personal data against loss, destruction, manipulation, unauthorised access and other unlawful processing. The website is generally made available over HTTPS. However, no internet transmission can be guaranteed to be completely secure.

Third-party websites to which we link are responsible for their own privacy practices. This policy does not apply to their processing activities.

This Privacy Policy may be updated when laws, the website, service providers or data-processing activities change. The version published on the website is the current version.