Privacy notice

Controller

Hosting and security

This website is hosted by Netlify, Inc. Requests involve processing your IP address, request time, requested URL and technical browser and connection information to deliver the site and protect it against misuse.

The legal basis is Article 6(1)(f) GDPR: the legitimate interest in reliable, secure operation. Technical data is processed for delivery, troubleshooting and security investigations; retention depends on those purposes and any applicable legal requirements. This site does not operate its own visitor or server-log database.

Your browser preference

No Google Analytics script is loaded without your consent. Rejecting analytics does not restrict use of the website. Your choice is saved separately for each website and analytics property in local browser storage for up to 180 days. The entry contains your choice, its timestamp and the measurement ID.

Preference storage implements your decision (Section 25(2)(2) TDDDG; Article 6(1)(f) GDPR). Use “Analytics settings” at the bottom of the page to change your choice or withdraw consent at any time for the future. Withdrawal removes the integration’s analytics cookies and reloads the page. It does not retrospectively delete data already sent.

Google Analytics with consent

Google Analytics 4 is used only with your consent to understand website use. The provider is Google Ireland Limited; Google LLC and other Google companies may be involved in processing. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Data includes allowed public page views, selected contact and project-link clicks, and usage and technical information generated by Google, such as pseudonymous browser/session identifiers, time, browser information and broad traffic origins. Google also receives your IP address through the network connection. Google states that IP addresses of EU, Swiss and UK users are discarded after deriving location and are not logged.

The integration sends page URLs without query strings or fragments and reduces referrers to their origin. It does not send email addresses, form text, assessment inputs or findings. Google signals, advertising, ad personalisation and enhanced automatic measurement are disabled. Cross-domain tracking between these two websites is not configured.

Analytics uses cookies such as _ga and _ga_<measurement-ID> to recognise the browser. They last up to 180 days; the integration does not refresh their lifetime on every visit. Google’s user and event data retention is set to two months, without resetting on new activity. Aggregated standard reports may remain available for longer. Pseudonymous identifiers do not mean that the data is fully anonymous.

Email contact

Email links open your own email application. A message is sent only when you send it. The mailbox uses Zoho Mail in the EU data centre. Your sender address, message and details you provide are processed to respond to your enquiry.

Depending on the enquiry, processing is based on Article 6(1)(b) GDPR for pre-contractual or contractual communication, or Article 6(1)(f) GDPR for responding to other enquiries. Messages are retained while needed to handle the matter and to meet any applicable legal retention duties.

Recipients and international processing

Netlify, Google and Zoho may use affiliated companies and subprocessors. Processing outside the European Economic Area, particularly in the United States or India, is possible. The providers describe transfer safeguards, including EU Standard Contractual Clauses, in their data-processing terms. The linked provider information explains recipients and international transfers; copies of relevant safeguards can be requested through the privacy contact.

Provider information

• Google Analytics privacy
• Google Analytics retention
• Google data-processing terms
• Netlify privacy and Trust Center
• Zoho privacy and data processing

Your rights

Subject to the applicable legal conditions, you can request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You can withdraw consent at any time for the future.

Send requests to the email address above. You may also complain to a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Analytics is optional: you are not required to provide analytics data. These websites do not make automated decisions about you with legal or similarly significant effects.