You may send privacy-related requests directly to this address. For information about telephone contact, please see our legal notice.
Scope
This notice covers visits to our company website and contact made through the website or by email. It is not a privacy notice for any marketplace. If you use a marketplace, its own privacy information also applies.
This website does not provide customer accounts, a shopping cart or an online checkout. The forms are intended for initial, non-binding enquiries. Specific requirements and any potential cooperation are discussed personally afterwards.
Website access and technical data
When the public website is accessed, technically necessary data is transmitted to the hosting provider. This may include your IP address, the date and time, the page or file requested, the amount of data transferred, the HTTP status, browser and operating-system information, and the referring page if your browser sends it.
This processing enables content delivery, reliable operation and the detection and prevention of attacks or misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a functional and secure company website.
Technical logs are used for these purposes only and retained for as long as necessary for operation or the investigation of specific security incidents. The separate deletion rule for ordinary enquiries is described under “Retention”; it is not a general promise that technical security logs have the same retention period.
Hosting and form provider
Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA provides hosting and form processing for our public website. Content is delivered through a distributed network. The provider receives the data required to deliver the website and process submissions.
Netlify’s data processing agreement describes the processing of relevant customer data on behalf of its customers and the safeguards for that processing.
The forms request your company or institution, contact person, email address and message. The selected form language is also included. Technical connection data may be needed for transmission and abuse prevention. Please provide only information needed for your enquiry.
Contacting us is voluntary. There is no statutory or contractual obligation to provide this information for a non-binding enquiry. Required fields are needed to assign your request and respond; the form cannot be submitted without them. You may alternatively contact us by email.
We use this information to assign, review and respond to your request. If you are an individual taking steps towards a contract with us, Article 6(1)(b) GDPR applies. Other business or organisational enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is to respond to communications addressed to us. Processing required by law, such as handling data-subject requests, is based on Article 6(1)(c) GDPR.
Netlify stores form messages in a submissions interface and sends notifications to the internally designated contact point. Netlify Forms uses automated spam filtering through Akismet by Automattic. Messages and technical information required for this check may be processed by that service. Our legitimate interest is to prevent unwanted or abusive messages.
A hidden form field provides an additional check for automated submissions. No external CAPTCHA is embedded in the browser.
Email and personal communication
If you contact us by email, we process your sender and contact details, message content and any documents you attach to handle your request. For telephone calls arranged in advance, we process information necessary for the conversation and follow-up. The legal bases are the same categories described in the preceding section.
We use Microsoft services for our Outlook.com mailbox. For people in the European Economic Area, Microsoft’s privacy statement identifies Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as the controller for relevant processing by Microsoft.
Our separate domain mailbox is provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Messages are received in the STRATO mailbox and handled using classic Outlook for Windows.
We delete completed, non-binding enquiries 14 days after contact has ended. This means processing is complete and no further response or agreed follow-up is outstanding. This deletion rule also covers active copies in the relevant mailboxes and form submissions interface.
This is separate from documents subject to legal retention requirements in a specific case, such as tax-related records or business correspondence that must be retained. Those records are kept to the necessary extent for the applicable statutory period. A specific legal dispute may also require retention to establish, exercise or defend claims. The data is then restricted to that purpose.
Technical backup and recovery copies may follow the providers’ separate deletion cycles. Deletion from active mailboxes does not mean immediate physical removal from every backup. Those copies are not used for routine handling of enquiries.
Recipients and international processing
Within our business, access is limited to people who need it to handle the matter. External recipients are the hosting, form and email services described above and their necessary subprocessors. Other disclosures occur only where required for a specific assignment, required by law or supported by another legal basis.
International services may process data outside the European Union or European Economic Area, particularly in the United States. Netlify’s agreement provides for EU Standard Contractual Clauses where a relevant transfer is not covered by the applicable Data Privacy Framework arrangements. Microsoft describes safeguards including EU Standard Contractual Clauses and applicable adequacy decisions in its privacy statement.
You may request information and a copy of the safeguards relevant to your data at the contact address above, subject to applicable legal restrictions and the rights of others.
Cookies, languages and external content
The website does not use analytics or marketing tools and does not embed external maps, videos, advertising networks or webfonts. Images, logos and fixed lettering graphics are served with the website.
You choose a language through the address of the German or English page. No language preference is stored in a cookie or local browser storage.
If the configured technical operation requires access to end-user devices, its lawfulness is assessed under section 25 of Germany’s TDDDG. Non-essential access would be used only after appropriate consent. No such optional service is used on this website. External links, such as the DPMA register, open only when selected; the destination operator’s privacy information then applies.
Your rights
Subject to the applicable legal conditions, you have the following rights in particular:
Access to your personal data under Article 15 GDPR;
Rectification of inaccurate or incomplete data under Article 16 GDPR;
Erasure under Article 17 and restriction of processing under Article 18 GDPR;
Data portability under Article 20 GDPR where its conditions are met;
Objection under Article 21 GDPR.
If processing is based on your consent, you may withdraw it for the future. This does not affect the lawfulness of processing before withdrawal. To exercise your rights, contact us at the address above. If necessary, we verify your identity using as little additional information as possible and respond within the statutory time limits.
Right to object
Where we process data under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We then stop the processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims.
Right to complain
You may lodge a complaint with a data protection supervisory authority, particularly in the Member State of your habitual residence, workplace or the suspected infringement. The Bavarian State Office for Data Protection Supervision (BayLDA) is the relevant authority for private-sector bodies in Bavaria.
Our public website uses encrypted HTTPS connections. This does not automatically make ordinary email end-to-end encrypted. For particularly confidential documents, we can agree on an appropriate transmission method personally.
The website does not use automated decision-making with legal or similarly significant effects, or profiling for such purposes. The spam check described above is used only for abuse prevention.
We update this notice when services or processing arrangements change. Last updated: 10 November 2026.
