Privacy Policy

Your Rights as a Data Subject

You can exercise the following rights at any time using the contact details provided by our data protection officer:

• Information about your data stored with us and its processing (Art. 15 GDPR)
• Correction of inaccurate personal data (Art. 16 GDPR)
• Deletion of your data stored with us (Art. 17 GDPR)
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
• Objection to the processing of your data by us (Art. 21 GDPR)
• Data portability, provided you have consented to data processing or have concluded a contract with us (Art. 20 GDPR)

If you have given us consent, you can revoke it at any time with effect for the future. You can lodge a complaint with a supervisory authority at any time.

Collection of General Information

Type and Purpose of Processing

When you access our website, i.e., when you do not register or otherwise submit information, general information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and the like.

It is processed in particular for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring the smooth use of our website
• Evaluation of system security and stability
• For further administrative purposes

Legal Basis

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.

Storage Duration

Server log files are automatically deleted after 7 days.

Hosting

Our website is hosted by Vultr Holdings LLC. The servers are located in Frankfurt, Germany, within the European Union. This means your data is processed within the EU and is not transferred to third countries.

The legal basis for the use of the hosting service is Art. 6 (1) lit. f GDPR (legitimate interest in providing a stable and secure website).

Cookies

Type and Purpose of Processing

Like many other websites, we also use so-called "cookies." Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data, such as IP address, browser used, operating system, and your connection to the internet.

Cookies cannot be used to start programs or transfer viruses to a computer. Based on the information contained in cookies, we can facilitate navigation for you and enable the correct display of our web pages.

Storage Duration

Essential cookies (session cookies) are deleted when you close your browser. Consent cookies are stored for 30 days. Analytics and marketing cookies are only set if you have given your consent.

Registration on our Website

When registering for the use of our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g., telephone number and email address). If you are registered with us, you can access content and services that we offer only to registered users.

Legal Basis

The processing of registration data is based on Art. 6 (1) lit. b GDPR (performance of a contract or pre-contractual measures).

Storage Duration

Your registration data is stored until you delete your account. After account deletion, the data is removed unless legal retention obligations require longer storage.

Provision of Paid Services

Type and Purpose of Processing

To provide paid services, we will request additional data, such as payment details, in order to execute your order.

Legal Basis

The processing of data necessary for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

Storage Duration

We store this data in our systems until the legal retention periods have expired. These are generally 6 or 10 years for proper accounting and tax-related requirements.

Payment Providers

For payment processing, we use external payment service providers. When you make a purchase, your payment data is transmitted directly to the respective provider.

Stripe

Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. Stripe is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection for transfers to the USA. For more information, see Stripe's privacy policy: stripe.com/privacy

PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal is certified under the EU-US Data Privacy Framework. For more information, see PayPal's privacy policy: paypal.com/privacy

Legal Basis

The processing of payment data is based on Art. 6 (1) lit. b GDPR (performance of contract).

Newsletter

Your data will be used exclusively to send you the subscribed newsletter by email. The indication of your name is done to address you personally in the newsletter.

Based on your expressly given consent (Art. 6 Para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by email to your specified email address. You can revoke your consent at any time with effect for the future.

Storage Duration

Your newsletter subscription data is stored until you unsubscribe. After unsubscribing, the data is deleted.

Email Service Provider

For sending transactional emails (such as password reset emails, order confirmations) and newsletters, we use the email service Mailgun.

Mailgun is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection for data transfers to the USA. For more information, see Mailgun's privacy policy: mailgun.com/legal/privacy-policy

The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest) for transactional emails and Art. 6 (1) lit. a GDPR (consent) for newsletters.

Contact Form

The data you enter will be stored for the purpose of individual communication with you. A valid email address and your name are required for this. The processing of the data entered into the contact form takes place on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).

Storage Duration

Contact form submissions are stored for 6 months to handle your inquiry and for potential follow-up questions, then deleted.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses "cookies" to help analyze how users use the site. Due to IP anonymization on these websites, your IP address will be shortened by Google within member states of the European Union.

Google Analytics is only activated if you have given your consent via our cookie banner. The legal basis is Art. 6 (1) lit. a GDPR (consent).

Data Transfer to Third Countries

Google LLC is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection for data transfers to the USA in accordance with Art. 45 GDPR.

Opt-Out

You can prevent the storage of cookies by adjusting your browser settings accordingly. You can also prevent the collection of data generated by the cookie by downloading and installing the browser plugin available at: Browser Add-On to deactivate Google Analytics.

Use of Script Libraries (Google Webfonts)

To display our content correctly and visually appealing across browsers, we use "Google Web Fonts" from Google LLC to display fonts on this website.

Google LLC is certified under the EU-US Data Privacy Framework. The legal basis for the integration of Google Webfonts is your consent (Art. 6 para. 1 lit. a GDPR).

Embedded YouTube Videos

On some of our webpages, we embed YouTube videos. YouTube is operated by Google LLC. When you visit a page with embedded YouTube content, a connection to YouTube servers is established.

Google LLC is certified under the EU-US Data Privacy Framework. The legal basis for the integration of YouTube is your consent (Art. 6 para. 1 lit. a GDPR).

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

Automated Decision-Making

We do not use automated decision-making or profiling as referred to in Art. 22 GDPR.

Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority for our company is:

Changes to our Privacy Policy

We reserve the right to adjust this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply for your next visit.