Privacy Policy

1. Overview

We take the protection of your personal data seriously and treat it confidentially, in line with statutory data-protection regulations and this policy. When you use this website, various pieces of personal data are collected. Personal data is any data that can be used to identify you personally. This policy explains what data we collect and what we use it for.

2. Controller

The controller responsible for data processing on this website is:

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access to the data we hold about you (Art. 15 GDPR).
• Right to rectification of inaccurate data (Art. 16 GDPR).
• Right to erasure (Art. 17 GDPR).
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR).
• Right to object to processing (Art. 21 GDPR).
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with a supervisory authority. The authority competent for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf. To exercise any of these rights, contact us at the address above.

4. Hosting

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, on servers located in Germany. Personal data collected on this site is stored on the provider’s servers. This may include IP addresses, contact requests, and other data generated through a website.

Hosting is used for the purpose of fulfilling our contract with potential and existing clients and for the secure, fast, and reliable provision of our online presence (Art. 6 (1) (f) GDPR). We have concluded a data-processing agreement (Auftragsverarbeitungsvertrag / DPA) with our host as required by Art. 28 GDPR.

5. Server log files

The hosting provider automatically collects and stores information in server log files that your browser transmits automatically. These are: browser type and version, operating system, referrer URL, host name of the accessing device, time of the server request, and IP address. This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR — we have a legitimate interest in the technically error-free presentation and optimisation of our website. The data is deleted after a short storage period.

6. Contact form, email, and messaging

If you send us an enquiry through the contact form, by email, or via WhatsApp, the details you provide (including your name, email address, and the content of your message) are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR where your request relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), which you may withdraw at any time. We retain the data you send until you ask us to delete it, withdraw your consent, or the purpose for storage no longer applies, subject to mandatory statutory retention periods.

WhatsApp is operated by Meta Platforms Ireland Ltd. If you contact us through WhatsApp, your data is also processed under WhatsApp’s own terms and privacy policy.

7. Cookies

This website does not currently set tracking or marketing cookies and does not use analytics that profile you. Only technically necessary storage required to display the site may be used. Because no non-essential cookies are set, no cookie-consent banner is required at this time. If we introduce analytics or third-party embeds in the future, we will update this policy and request your consent beforehand.

8. Fonts

This site uses the “Onest” and “Unbounded” typefaces, which are self-hosted and served directly from our own website. No connection to Google servers is established when you load a page, and no data is transmitted to Google for the display of fonts.

9. External links

Our site links to external services, including our booking and brief tools and our profiles on third-party platforms (for example Dribbble and WhatsApp). When you follow such a link you leave this website, and the privacy policy of the respective provider applies. We have no influence over how those providers handle your data.

10. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar and the lock symbol in your browser. When encryption is active, the data you transmit to us cannot be read by third parties.

11. Changes to this policy

We may update this privacy policy from time to time so that it always reflects current legal requirements or changes to our services. The current version, with its date, always applies to your visit.