Privacy Policy

1. Controller

2. Data Protection Officer

We are not legally required to appoint a data protection officer. For privacy enquiries, please use the contact details in the legal notice.

3. Hosting and Server Log Files

When you access this website, the hosting provider automatically collects information in server log files (IP address, date and time, page accessed, browser type). This is technically necessary to deliver and secure the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Processing takes place on servers in the EU; images are delivered via Amazon Web Services (eu-central-1).

4. Contact Form

When you contact us via the contact form, we process your name, email address, and message in order to handle your enquiry. The data is transmitted to our own backend system (servers in the EU); email delivery is handled by our service provider. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (responding to enquiries).

5. Web Analytics (Google Analytics)

This website uses Google Analytics by Google Ireland Ltd. IP anonymisation is enabled and Google Consent Mode defaults to "denied". Processing only takes place after your consent via our consent banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Your consent is stored locally in your browser and can be withdrawn at any time. Using Google Analytics may involve a transfer to the USA, based on the EU-US Data Privacy Framework.

6. Map Display (OpenStreetMap)

On the "About" page we embed a map from OpenStreetMap (OpenStreetMap Foundation) to display our location. When the map loads, your IP address is transmitted to OpenStreetMap. The legal basis is Art. 6(1)(f) GDPR (appealing location display).

7. Fonts (Google Fonts)

This website uses Google Fonts for a consistent display of fonts. The fonts are downloaded at build time and bundled locally (self-hosted). When the page loads, no connection to Google servers is made and no IP address is transmitted to Google.

8. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).