Privacy policy

1. Controller

The controller responsible for data processing on this website is:

2. Summary

We only process personal data that is necessary to deliver this website and to respond to your enquiries. Analytical and marketing cookies are only set if you consent to them through our consent manager. You can change or withdraw your consent at any time. Fonts are served from our own server; no data is transferred to Google Fonts.

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, our hosting provider processes technical access data, including your IP address, the date and time of access, the pages requested, the browser and operating system used, and the referring URL. This data is required to deliver the website securely and reliably.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable provision of the website).

4. Fonts

The fonts used on this website (Archivo, Inter and IBM Plex Mono) are loaded from our own server. No connection is made to Google Fonts or any other third-party font provider, and no personal data is transferred for this purpose.

5. Cookies and consent

We use a self-hosted consent management tool to obtain and document your consent for non-essential cookies and tracking technologies. The consent dialog runs entirely on our own server; no data is sent to a third-party consent provider. When you visit the site, the dialog lets you accept all, reject all, or choose per category. No non-essential cookies or tracking scripts are loaded before you give your consent.

Legal basis: Art. 6(1)(a) GDPR (consent) and, for the storage of consent preferences, Art. 6(1)(f) GDPR (legitimate interest in documenting consent).

6. Analytics and tracking

If you consent, we use Google Tag Manager to load Google Analytics and Microsoft Clarity. These tools help us understand how visitors use the website.

• Google Tag Manager. Provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager manages tags but does not itself set cookies for analytics purposes.
• Google Analytics. Provided by Google Ireland Limited. Processes usage data such as pages viewed, session duration, device and browser information, and an abbreviated IP address, to produce aggregated statistics about website use.
• Microsoft Clarity. Provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Records aggregated interaction data such as clicks, scrolling and session replays to help us improve the website.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time through the consent manager.

7. Contacting us

If you contact us by email, we process the information you provide, including your email address and the content of your message, in order to answer your enquiry. If your enquiry relates to a contract or the steps leading up to one, the legal basis is Art. 6(1)(b) GDPR; otherwise it is Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

8. International transfers

Some of the providers listed above are based in the United States. Where personal data is transferred outside the European Economic Area, the transfer is safeguarded by an adequacy decision (including the EU-US Data Privacy Framework where the provider is certified) or by the European Commission's Standard Contractual Clauses.

9. Retention

We keep personal data only for as long as necessary for the purposes described above, or as required by law. Server log data is retained for a limited period and then deleted. Correspondence is deleted once your enquiry has been dealt with, unless statutory retention obligations apply.

10. Your rights

You have the right to access the personal data we hold about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future.

11. Supervisory authority

You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Sächsische Datenschutzbeauftragte, Maternistraße 17, 01067 Dresden, Germany.

12. Changes to this policy

We may update this privacy policy to reflect changes to our website or to legal requirements. The current version is always available on this page.