1. Controller

2. Hosting & server log files

Our website is hosted by an external provider. On our behalf, the host processes access data in server log files (e.g. IP address, date and time of access, page requested, browser type) for the secure and stable operation of the website. The legal basis is Art. 6 (1) (f) GDPR. [Please add your hosting provider and data processing agreement.]

3. Cookies & consent

This website uses a consent manager (cookie banner) that lets you accept or reject non-essential cookies and services. Essential cookies are required for the website to operate. Analytics services such as Microsoft Clarity are only loaded after your consent. You can withdraw or change your consent at any time via the cookie settings.

4. Contact form

When you contact us via the contact form, we process the data you provide (name, email address, subject, message) in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) (legitimate interest in responding). The data is sent to us by email and stored until your request has been fully processed.

5. Microsoft Clarity

This website uses Microsoft Clarity, an analytics service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA). Clarity creates heatmaps and session recordings to understand how visitors interact with the website. Usage data (e.g. clicked elements, mouse movements, scrolling behaviour, truncated IP address, browser and device information) may be processed and transferred to Microsoft, including in the USA. Clarity is used solely for analytics; advertising-related storage is permanently disabled. Processing only takes place with your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time via the cookie settings. For more information, see the Microsoft privacy statement.

6. Your rights

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of a given consent (Art. 7 (3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

7. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser’s address bar.