[{"data":1,"prerenderedAt":134},["ShallowReactive",2],{"privacy:en":3},{"title":4,"meta":5,"updated":7,"person":8,"sections":9},"Privacy policy",{"title":4,"description":6},"Information on the processing of personal data on this website.","2026-01-11","A data protection officer has not been appointed, as not required by law.",[10,13,30,42,52,63,75,88,107,118],{"id":11,"title":12},"controller","1) Controller under the GDPR",{"id":14,"title":15,"blocks":16},"general","2) Overview: purposes, legal bases, recipients",[17,20,28],{"type":18,"text":19},"text","We process personal data to the extent necessary to operate the website, handle inquiries, initiate\u002Fperform contracts, ensure security, and, only with consent, for analytics and marketing.",{"type":21,"items":22},"list",[23,24,25,26,27],"Legal bases (depending on the case): Art. 6(1)(b) GDPR (contract\u002Fsteps prior to entering into a contract), Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(f) GDPR (legitimate interest, e.g. secure and stable operation, IT security, abuse\u002Ferror detection, support), Art. 6(1)(a) GDPR (consent, e.g. analytics\u002Fmarketing).","Cookies\u002Fsimilar technologies: We comply with the legal requirements (in particular Section 25 TDDDG). Technically necessary technologies are used on the basis of Section 25(2) TDDDG; optional technologies (e.g. analytics\u002Fmarketing) only with consent pursuant to Section 25(1) TDDDG.","Recipients\u002Fservice providers: We use service providers for hosting, database, CDN\u002Fmedia delivery, email delivery, live chat and, after consent, analytics\u002Fmarketing. Where required, we conclude data processing agreements under Art. 28 GDPR.","Transfers to third countries: For some providers, processing may take place outside the EU\u002FEEA (e.g. the USA). Where required, transfers are based on an adequacy decision (e.g. EU-US Data Privacy Framework) and\u002For EU Standard Contractual Clauses; further information is available on request.","Requirement to provide data: Providing personal data is generally neither legally nor contractually required. However, if information is needed to process inquiries or conclude\u002Fperform contracts, we may be unable to act without it.",{"type":18,"text":29},"Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.",{"id":31,"title":32,"blocks":33},"hosting","3) Hosting & access data (DigitalOcean App Platform)",[34,40],{"type":21,"items":35},[36,37,38,39],"Data processed: IP address, date\u002Ftime, accessed content\u002FURL, referrer URL, browser\u002Fdevice information and, where applicable, technical status\u002Ferror information.","Purposes: delivery of the website, operational security, abuse and error detection.","Legal basis: Art. 6(1)(f) GDPR.","Provider\u002Frecipient: DigitalOcean, LLC (hosting, processing on our behalf; possible third-country transfer, see section 2).",{"type":18,"text":41},"We do not create additional usage profiles for tracking purposes at application level. Technically necessary hosting logs may occur.",{"id":43,"title":44,"blocks":45},"database","4) Database (DigitalOcean): prospect & customer data",[46],{"type":21,"items":47},[48,49,50,51],"Data processed (typical): contact details (e.g. name, email), communication content, quotation\u002Forder and contract data, and, where applicable, internal notes for processing.","Purposes: handling inquiries, preparing quotations, contract processing, documentation and traceability.","Legal bases: Art. 6(1)(b) GDPR (pre-contractual\u002Fcontractual), Art. 6(1)(f) GDPR (efficient processing\u002Fdocumentation), where applicable Art. 6(1)(c) GDPR (retention obligations).","Provider\u002Frecipient: DigitalOcean, LLC (managed database, processing on our behalf; possible third-country transfer, see section 2).",{"id":53,"title":54,"blocks":55},"cdn","5) CDN \u002F media delivery (Gumlet)",[56,61],{"type":21,"items":57},[58,59,38,60],"Data processed: technically necessary access data (in particular IP address, date\u002Ftime, requested file\u002FURL, referrer URL, browser\u002Fdevice information).","Purposes: fast and secure delivery and optimization of images\u002Fvideos (performance\u002Fstability).","Provider\u002Frecipient: Gumlet, Inc. (typically processing on our behalf; possible third-country transfer, see section 2).",{"type":18,"text":62},"Website visitors do not upload files; the CDN delivers only media provided by us.",{"id":64,"title":65,"blocks":66},"contact","6) Contact (form\u002Femail) & customer communication (MailerSend, Google Workspace)",[67,73],{"type":21,"items":68},[69,70,71,72],"Data processed: information from your message (e.g. name, email address, content) and, where applicable, communication metadata.","Purposes: responding to and handling your inquiry, and where applicable initiating\u002Fperforming a contractual relationship.","Legal bases: Art. 6(1)(b) GDPR (for pre-contractual\u002Fcontractual inquiries), otherwise Art. 6(1)(f) GDPR (communication\u002Fsupport).","Service providers\u002Frecipients: MailerSend, Inc. (technical delivery of form messages\u002Ftransactional emails); Google (Google Workspace) for mailbox and email communication.",{"type":18,"text":74},"Third-country transfers: With MailerSend and Google, processing may also take place outside the EU\u002FEEA (in particular the USA). Where required, transfers are based on an adequacy decision (e.g. EU-US Data Privacy Framework) and\u002For EU Standard Contractual Clauses; details see section 2.",{"id":76,"title":77,"blocks":78},"chat","7) Live chat (Smartsupp)",[79,86],{"type":21,"items":80},[81,82,83,84,85],"Activation: The chat is only loaded when you start it (e.g. by clicking the chat button).","Data processed: chat content and, where applicable, voluntarily provided contact details; also technically necessary connection data (e.g. IP address, timestamps, device\u002Fbrowser information, page accessed).","Purposes: customer service, answering questions, support.","Legal bases: Art. 6(1)(b) GDPR (initiation\u002Fperformance) or Art. 6(1)(f) GDPR (support).","Provider\u002Frecipient: Smartsupp.com, s.r.o., Šumavská 31, 602 00 Brno, Czech Republic.",{"type":18,"text":87},"To assign an ongoing chat (e.g. after a reload), a pseudonymous identifier may be stored in local storage. Analytics or marketing functions are not used without consent.",{"id":89,"title":90,"blocks":91},"cookies","8) Cookies & consents (Google Analytics & Google Ads)",[92,94,98,105],{"type":18,"text":93},"We use cookies\u002Fsimilar technologies to operate the website and, only with your consent, for analytics and for measuring\u002Foptimizing advertising.",{"type":21,"items":95},[96,97],"Google Analytics (GA4): reach measurement and analysis of website usage to improve our offering.","Google Ads: measurement of campaign success (e.g. conversion tracking) and, if enabled, optimization\u002Fdelivery of ads (e.g. remarketing).",{"type":21,"items":99},[100,101,102,103,104],"Data (typical): online identifiers (e.g. cookie IDs), usage\u002Fevent data (e.g. page views, interactions), device\u002Fbrowser information, referrer URL, and where applicable approximate location information (region). The IP address is also processed for technical communication.","Provider\u002Frecipient: Google Ireland Limited; depending on configuration, data may also be transferred to Google LLC (USA) and affiliated companies.","Transfers to third countries: Where data is transferred to the USA, this may (depending on provider status) be based on the EU-US Data Privacy Framework (DPF) and\u002For EU Standard Contractual Clauses (see section 2).","Legal bases: use (storing\u002Freading) of cookies\u002Fsimilar technologies in accordance with Section 25 TDDDG; subsequent processing of personal data based on your consent (Art. 6(1)(a) GDPR).","Withdrawal\u002Fchange: You can withdraw or adjust your consent at any time via the cookie settings with effect for the future (e.g. via a link\u002Fbutton in the footer). The lawfulness of processing up to the point of withdrawal remains unaffected.",{"type":18,"text":106},"Further information: Google's privacy policy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy",{"id":108,"title":109,"blocks":110},"deletion","9) Storage period & deletion",[111,113],{"type":18,"text":112},"We store personal data only as long as necessary for the respective purposes. We then delete or anonymize the data unless legal retention obligations or legitimate interests (e.g. asserting\u002Fdefending legal claims) require further storage.",{"type":21,"items":114},[115,116,117],"Access data (hosting\u002FCDN): generally only as long as required for operation, security and troubleshooting.","Contact\u002Fsupport (email, form, chat): until final handling; beyond that only if a (pre-)contractual relationship arises or retention obligations apply.","Quotation\u002Fcustomer data: during the cooperation and thereafter within the scope of legal obligations and\u002For as long as required for documentation or legal enforcement.",{"id":119,"title":120,"blocks":121},"rights","10) Your rights",[122,132],{"type":21,"items":123},[124,125,126,127,128,129,130,131],"Right of access (Art. 15 GDPR)","Right to rectification (Art. 16 GDPR)","Right to erasure (Art. 17 GDPR)","Right to restriction of processing (Art. 18 GDPR)","Right to data portability (Art. 20 GDPR)","Right to object (Art. 21 GDPR)","Right to withdraw consent (Art. 7(3) GDPR)","Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)",{"type":18,"text":133},"To exercise your rights, simply send a message to the contact address stated in section 1.",1787558145211]