Privacy Policy

Last updated: 21 July 2026

We take the protection of your personal data seriously. This policy explains what data we process when you use this website, why, on what legal basis, and what rights you have. Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law.

1. Controller

The controller responsible for data processing on this website is:

The controller is the operator of this website. Full operator details are set out in the Legal Notice.

For any question about data protection, including requests to exercise the rights set out in section 7, you can reach us through the contact form.

2. Hosting and server log files

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA ("Netlify"), acting as our processor. When you visit the site, Netlify automatically collects and stores information that your browser transmits, in server log files. This may include your IP address, the date and time of the request, the page requested, the referring URL, and information about your browser and operating system.

This data is processed to ensure the secure and stable operation and delivery of the website. The legal basis is our legitimate interest in the secure provision of the site pursuant to Art. 6(1)(f) GDPR.

Because Netlify is based in the United States, your data may be transferred to and processed in the USA. Netlify is certified under the EU–US Data Privacy Framework, so these transfers rely on the European Commission's adequacy decision for Data Privacy Framework-certified companies, with EU Standard Contractual Clauses in place as an additional safeguard. We have concluded a data processing agreement with Netlify as required by Art. 28 GDPR.

3. Contact, enquiries and appointment booking

When you submit the contact form, we process the details you provide: your name, work email address, company, industry, and the content of your message. Submissions are processed and stored on our behalf by Netlify through its form-handling service.

We use this data solely to respond to your enquiry and to take steps at your request prior to entering into a possible contract. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in responding to enquiries pursuant to Art. 6(1)(f) GDPR. If you contact us directly by email, the same purposes and legal bases apply.

When you use a "Book a call" link, you are taken to Calendly, a scheduling service provided by Calendly LLC (United States). The booking details you enter there, including your name, email address and chosen time, are processed by Calendly on its own platform and under its own privacy policy, which may involve transfer of your data to the USA. Calendly is certified under the EU–US Data Privacy Framework and additionally relies on EU Standard Contractual Clauses for such transfers. The legal basis is Art. 6(1)(b) GDPR for steps taken at your request and our legitimate interest in offering a simple way to book a call pursuant to Art. 6(1)(f) GDPR. This applies to links out to Calendly; if the Calendly scheduler is later embedded directly on the site, it loads third-party scripts and a cookie-consent step would be required.

We retain enquiry data for as long as necessary to handle your request and any resulting business relationship, and thereafter in accordance with statutory retention obligations, after which it is deleted. As with hosting, form data may be transferred to the USA (see section 2).

4. Web fonts

This website uses web fonts (Bricolage Grotesque and Plus Jakarta Sans) that are stored and served from our own hosting. No connection to Google or any other third-party font provider is established when you load the site, and no data is transmitted to such providers as a result of font loading.

5. Analytics

This website uses Google Analytics 4, a web-analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We use it to understand how visitors use the site, for example which pages are viewed and how people arrive, so we can improve it. Google Analytics sets cookies and processes information such as your shortened IP address, device and browser data, and on-site interactions. This processing takes place only after you give consent through our cookie banner and is based on Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by declining in the cookie banner or clearing the consent stored in your browser; withdrawal does not affect the lawfulness of processing carried out before it.

Until you consent, Google Analytics is not loaded and no analytics cookies are set. We use Google Consent Mode so that no analytics or advertising signals are sent to Google before consent is given. Data may be transferred to Google LLC in the United States; Google is certified under the EU–US Data Privacy Framework, and EU Standard Contractual Clauses apply as an additional safeguard. Further information is available in Google's privacy policy at https://policies.google.com/privacy, and you can opt out using Google's browser add-on at https://tools.google.com/dlpage/gaoptout.

6. Cookies

By default this website sets only cookies that are technically necessary for it to function, together with a small entry in your browser's local storage that remembers your cookie choice so we do not ask again. If you consent to analytics, Google Analytics additionally sets analytics cookies as described in section 5. You can decline or withdraw your consent at any time through the cookie banner.

7. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• the right of access (Art. 15 GDPR);
• the right to rectification (Art. 16 GDPR);
• the right to erasure (Art. 17 GDPR);
• the right to restriction of processing (Art. 18 GDPR);
• the right to data portability (Art. 20 GDPR);
• the right to object to processing based on legitimate interests (Art. 21 GDPR); and
• the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

To exercise any of these rights, contact us using the details in section 1.

8. Right to lodge a complaint

Without prejudice to any other remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

9. Data security

This website uses TLS/SSL encryption for security and to protect the transmission of the content you send to us. You can recognise an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

10. Changes to this policy

We may update this privacy policy to reflect changes to our processing or to legal requirements. The version published on this page applies.