Legal

Privacy policy

As of: November 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

No data protection officer has been appointed, as the legal requirements for this (Art. 37 GDPR, Section 38 of the German Federal Data Protection Act, BDSG) are not met.

2. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Each time the website is accessed, the web server automatically processes the following data transmitted by your browser:

• IP address of the requesting device
• date and time of access
• page or file requested and amount of data transferred
• HTTP status code (e.g. “successful” or “not found”)
• previously visited page (referrer URL), if transmitted
• browser and operating system used

Purpose: delivering the website and ensuring its stability and security, in particular detecting and preventing attacks.

Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest lies in providing the website in a technically error-free and secure manner.

Recipient: the hosting provider IONOS SE, which processes the data exclusively on my behalf and in accordance with my instructions. A data processing agreement pursuant to Art. 28 GDPR is in place. Processing takes place within the European Union.

Retention period: the log files are deleted as soon as they are no longer required for the purposes stated. Data that must be kept to investigate a specific security incident is retained until the incident has been resolved.

3. No cookies, no tracking

This website does not store any information on your device and does not access information stored there (Section 25 of the German Telecommunications Digital Services Data Protection Act, TDDDG). No cookies, local storage, analytics, tracking or advertising services are used. A cookie banner is therefore not required. All animations run locally in your browser.

4. Contact form and contact by email

If you use the contact form or send me an email, I process your name, your email address, your company (if provided), the content of your message and the date and time in order to handle your enquiry. Form submissions are forwarded by my web server at IONOS directly to me as an email and are not stored in a database.

Abuse protection (captcha): the form uses a self-hosted arithmetic question. No cookies are set and no third-party services (such as Google reCAPTCHA) are used. To prevent automated mass submissions, the server stores an encrypted check value (hash) of your IP address for a maximum of one hour, from which the IP address cannot be recovered. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in protection against spam and abuse.

Legal basis: Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures; otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry).

Recipient: my email provider, which processes the data as a processor.

Retention period: your data is deleted once your enquiry has been fully dealt with, unless statutory retention obligations apply – in particular the retention periods under German commercial and tax law (Section 257 HGB and Section 147 AO; six to ten years depending on the document).

Please note: emails are usually encrypted in transit (TLS) but are not end-to-end encrypted. Please only send confidential information after prior arrangement.

5. Use of artificial intelligence

This website was created with the support of AI (see the note in the legal notice). No personal data is transmitted to AI providers when you visit the website, and no AI system is used on the website.

6. Data security

This website is delivered via an encrypted connection (HTTPS/TLS). You can recognise this by the lock symbol in your browser's address bar.

7. Your rights

You have the following rights regarding your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object (Art. 21 GDPR, see below)

An informal message to i n f o @ n i e s s c o n . d e or via the contact form is sufficient to exercise your rights.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), www.ldi.nrw.de.

8. Obligation to provide data and automated decision-making

You are under no legal or contractual obligation to provide personal data. However, the website cannot be delivered without the technically necessary connection data. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

9. Changes to this privacy policy

I will update this privacy policy whenever changes to the website or the legal situation require it. The version published here applies.