Privacy Policy

Overview

We take the protection of your data seriously. This privacy policy explains what data we collect, how we use it, and what rights you have.

Data Controller

Data Collection

What data we collect

Website Usage

• •IP address (anonymized after 24h)
• •Browser type and version
• •Operating system
• •Referrer URL
• •Date and time of access
• •Amount of data transferred

Contact Forms

• •Name (voluntary)
• •Email address
• •Message
• •Phone number (optional)
• •Company (optional)

Analytics & Tracking

• •Page views and session duration
• •Click behavior (anonymized)
• •Performance metrics
• •Conversion tracking

Purposes

How we use your data

• •Providing and improving our website
• •Responding to inquiries and customer support
• •Analysis of website usage and performance
• •Protection against abuse and security incidents
• •Fulfilling legal obligations

Legal Basis

GDPR Art. 6 Para. 1

• •lit. a) Consent for newsletter and marketing
• •lit. b) Contract performance for order processing
• •lit. c) Legal obligation (tax law, etc.)
• •lit. f) Legitimate interest for website analytics

Cookies & Tracking

What we use

Essential (always active)

• •Session cookies for website functionality
• •CSRF protection tokens
• •Language selection (i18n)
• •Cookie preferences

Analytics (with consent)

• •Google Analytics 4 (anonymized)
• •Performance monitoring
• •Heatmaps and user journey
• •A/B testing (if activated)

Marketing (with consent)

• •Conversion tracking
• •Remarketing (if activated)
• •Social media pixels

Retention Period

How long we keep data

• •Website logs: 30 days
• •Contact inquiries: 3 years after last contact
• •Analytics data: 26 months (Google Analytics)
• •Newsletter: Until unsubscription
• •Contracts: 10 years (tax law)

Your Rights

What you can do

• •Access to stored data (Art. 15 GDPR)
• •Rectification of incorrect data (Art. 16 GDPR)
• •Erasure of data (Art. 17 GDPR)
• •Restriction of processing (Art. 18 GDPR)
• •Data portability (Art. 20 GDPR)
• •Object to processing (Art. 21 GDPR)
• •Withdraw consent (Art. 7 GDPR)
• •Complaint to supervisory authority (Art. 77 GDPR)

Third Parties

External services

• •Google Analytics (Google LLC, USA) - EU-US Data Privacy Framework
• •Cloudflare (Cloudflare Inc., USA) - Adequacy Decision
• •GitHub Pages (Microsoft Corp., USA) - Standard Contractual Clauses
• •Vercel (Vercel Inc., USA) - Privacy Shield Successor

Data Security

How we protect your data

• •SSL/TLS encryption for all transmissions
• •Regular security updates
• •Access restrictions on need-to-know basis
• •Backup strategies with encryption
• •Incident response plan
• •Anonymization/pseudonymization where possible

Privacy Contact

For questions, contact us

For all privacy-related questions, you can contact us at any time:

We respond within 30 days according to GDPR.

Supervisory Authority

Complaint option

You have the right to complain to a data protection supervisory authority: