Privacy policy

1. General information on data processing

Protecting your personal data matters to us. We process your data exclusively on the basis of the applicable legal provisions (GDPR, BDSG, TDDDG). Personal data is only collected where this is necessary to provide our website and services, or where you have given your consent.

2. Visiting the website & server log files

Each time our website is accessed, our hosting provider automatically records access data in so-called server log files: IP address, date and time, page accessed, browser used and operating system. This processing is technically necessary in order to provide the website securely and reliably. The legal basis is Article 6 (1) (f) GDPR (legitimate interest). The data is deleted after a short period, unless it is required to investigate malfunctions or attacks.

3. Contacting us

If you contact us by email or telephone, we process the data you provide (for example your name, contact details and the content of your enquiry) in order to deal with your request. The legal basis is Article 6 (1) (b) GDPR for contract-related enquiries, and otherwise Article 6 (1) (f) GDPR. The data is deleted as soon as it is no longer required to deal with your request, unless statutory retention obligations apply.

4. Cookies

Our website uses only technically necessary cookies that are required to operate the site (Article 6 (1) (f) GDPR and Section 25 (2) TDDDG respectively). No consent is required for these. We only use cookies that require consent if you have agreed to them beforehand.

5. Disclosure of data

Your data is only passed on to third parties where this is permitted by law, where you have given your consent, or where it is necessary for the performance of a contract. Where we use service providers (for example for hosting), this takes place on the basis of a data processing agreement pursuant to Article 28 GDPR.

6. Your rights

You have the following rights in relation to your personal data:

• Access to the data processed (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing (Article 21 GDPR)
• Withdrawal of consent already given (Article 7 (3) GDPR)

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.