Privacy Policy

1. General Information on Data Processing

We take the protection of your personal data very seriously. Your data is processed confidentially and in accordance with the applicable data protection laws and this privacy policy.

2. Purposes of Processing

We process personal data for the following purposes:

• Operation, optimization, and security of this website

• Communication via email or contact form

• Analysis of website usage (only after consent)

• Delivery of static and technical assets via secure content delivery networks (CDNs)

3. Legal Basis

Processing takes place in accordance with:

• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures

• Art. 6(1)(f) GDPR – legitimate interest in the secure and efficient operation of the website

• Art. 6(1)(a) GDPR – consent (for analytics cookies)

4. Collection and Storage of Personal Data

a) When Visiting the Website

Your browser automatically transmits the following data to our server:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

This data is required to display the website and ensure stability and security.
Legal basis: Art. 6(1)(f) GDPR.

b) Contact Form

When you contact us via the contact form, we process the data you provide (name, email address, message) in order to respond to your inquiry.
All emails are securely transmitted using encrypted SMTP.
Legal basis: Art. 6(1)(b) GDPR.

5. Cookies and Consent Management

Our website uses essential and optional cookies. Essential cookies are required for the website to function. Analytics and marketing cookies are only activated after your consent.

Consent is managed through Cookiebot.
You may change or withdraw your consent at any time.

Legal basis: Art. 6(1)(a) GDPR (consent).

6. External Services & Third-Party Providers

Cloudflare (CDN & Security Layer)

We use Cloudflare to protect our website from attacks and to deliver content quickly. Cloudflare processes technical data such as IP addresses and security-related metadata.
Legal basis: Art. 6(1)(f) GDPR.
More information: https://www.cloudflare.com/privacypolicy/

jsDelivr CDN (Swiper Library)

For interactive image sliders, we load the Swiper library via the jsDelivr CDN.
Your browser connects to jsDelivr servers to retrieve CSS/JS files. No personal data is stored and no cookies are set.
Legal basis: Art. 6(1)(f) GDPR.
More information: https://www.jsdelivr.com/terms

Google Analytics 4 (via Google Tag Manager)

We use Google Analytics 4 for statistical analysis — only after your consent via Cookiebot.
IP anonymization is enabled.
Data processing is pseudonymized and restricted through Consent Mode.
Legal basis: Art. 6(1)(a) GDPR.
More information: https://policies.google.com/privacy

Google Tag Manager

Google Tag Manager manages and loads scripts on our website. It does not collect personal data itself. Tags that may collect data (e.g., Analytics) run only after user consent.
Legal basis: Art. 6(1)(a) GDPR.
More information: https://policies.google.com/privacy

Hosting Provider (Serverprofis GmbH)

Our website is hosted by Serverprofis GmbH in Germany.
Server logs (IP address, timestamp, URL requests) are collected for security and troubleshooting and deleted after a limited period.
Legal basis: Art. 6(1)(f) GDPR.
More information: https://www.serverprofis.de/datenschutz/

Email Communication (IMAP/SMTP)

Emails sent through our website or manually are processed via encrypted SMTP servers provided by Serverprofis GmbH.
Legal basis: Art. 6(1)(f) GDPR.

Contact Forms (Contact Form 7)

When submitting a contact form, the data entered (name, email, message, event details) is transmitted directly to our email inbox.
Data is not stored within WordPress by default.
Legal basis: Art. 6(1)(b) GDPR.

Elementor Framework

We use Elementor solely as a local design framework.
All assets (CSS, JS) are delivered from our own server environment.
No external fonts or Elementor-hosted resources are loaded.
Legal basis: Art. 6(1)(f) GDPR.

7. Rights of Data Subjects

You have the following rights under the GDPR:

• Right of access (Art. 15)

• Right to rectification (Art. 16)

• Right to erasure (Art. 17)

• Right to restriction (Art. 18)

• Right to data portability (Art. 20)

• Right to object (Art. 21)

To exercise these rights, please contact: [email protected]

8. Retention Period

We store personal data only as long as necessary for the purposes outlined or as required by law.
Contact form submissions are deleted after your request has been processed unless statutory retention obligations apply.

9. Changes to This Privacy Policy

We may update this privacy policy to reflect legal or technical changes. The current version is always available on this page.