Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a concise overview of how your personal data is handled when you visit this website. Personal data encompasses all information that can be used to identify you personally. For comprehensive details on data protection, please consult our Privacy Policy, which is provided below this text.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is conducted by the website operator. Their contact details can be found in the 'Information on the Responsible Party' section of this Privacy Policy.

How Do We Collect Your Data?

Your data is collected partly when you provide it to us, for instance, by entering information into a contact form. Other data is automatically recorded by our IT systems when you visit the website, either automatically or with your consent. This primarily involves technical data such as your internet browser, operating system, or the time of your page view. This data is collected automatically as soon as you access this website.

What Do We Use Your Data For?

Some data is collected to ensure the proper functioning and error-free provision of the website. Other data may be utilized to analyze your user behavior. If contracts can be concluded or initiated through the website, the transmitted data will also be processed for contract proposals, orders, or other service requests.

What Rights Do You Have Regarding Your Data?

You have the right at any time to receive free information regarding the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have granted consent for data processing, you may revoke this consent at any time with future effect. Furthermore, you have the right to request the restriction of the processing of your personal data under specific circumstances. You also possess the right to lodge a complaint with the competent supervisory authority. For these matters and any further questions concerning data protection, please feel free to contact us at any time.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically analyzed, primarily through the use of analytics programs. Detailed information regarding these analytics programs can be found in the subsequent Privacy Policy.

2. Hosting

We host the content of our website with Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland (hereinafter referred to as Squarespace). Squarespace is a platform for creating and hosting websites. When you visit our website, your data is processed on Squarespace's servers. This may also involve the transmission of personal data to Squarespace's parent company, Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA. Squarespace requires this data for the operation of this website and for the protection and enhancement of its platform and services. Squarespace analyzes this data in a depersonalized form, which includes:

Information about your browser, network, and device
Webpages you visited before coming to this website
Webpages You Visit on This Website
Your IP address

Analytics

The aforementioned personal data may also be utilized within a website analytics function to gain insights into the traffic and activity on this website. This information may also encompass details about your use of this website, including:

Clicks
Internal Links
Pages Visited
Scrolling
Searches
Timestamps

Cookies

Squarespace also stores cookies that are essential for displaying the site and ensuring its security (necessary cookies). Furthermore, this website utilizes analytics and performance cookies to gather insights into website traffic, activity, and other relevant data. These analytics and performance cookies, as detailed below, are only employed on this website upon confirmation in the cookie banner.

The use of Squarespace is based on Article 6 (1) (f) of the GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If explicit consent has been requested, data processing is carried out exclusively on the basis of Article 6 (1) (a) of the GDPR and Section 25 (1) of the TDDDG, provided that the consent covers the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) as defined by the TDDDG. Consent can be withdrawn at any time.

Data transfer to the USA is based on the European Commission's standard contractual clauses.

Details are available here:

https://support.squarespace.com/hc/de/articles/360000851908-DSGVO-und-Squarespace.

The company holds a certification under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards for data processing activities in the USA. Every company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider via the following link:

https://www.dataprivacyframework.gov/participant/4774.

3. General Information and Mandatory Disclosures

Data Protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. When you use this website, various personal data are collected. Personal data refers to information that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also clarifies the methods and purposes of data collection. We wish to point out that data transmission over the internet (e.g., during email communication) may be subject to security vulnerabilities. Complete protection of data from third-party access is not feasible.

Information on the Responsible Party

The responsible party for data processing on this website is:

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, or similar).

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for deletion or withdraw consent for data processing, your data will be deleted, provided we have no other legally permissible grounds for retaining your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur once these grounds cease to exist.

General Information on the Legal Bases for Data Processing on this Website

If you have consented to data processing, we process your personal data based on Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR, provided that special categories of data as defined by Article 9 (1) of the GDPR are processed. In cases where explicit consent has been given for the transfer of personal data to third countries, data processing also occurs based on Article 49 (1) (a) of the GDPR. If you have consented to the storage of cookies or access to information on your terminal device (e.g., via device fingerprinting), data processing is additionally carried out based on Section 25 (1) of the TDDDG. Consent can be withdrawn at any time. If your data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data based on Article 6 (1) (b) of the GDPR. Furthermore, we process your data if it is required for compliance with a legal obligation, based on Article 6 (1) (c) of the GDPR. Data processing may also occur based on our legitimate interest as per Article 6 (1) (f) of the GDPR. Information on the specific legal bases applicable in each individual case will be provided in the subsequent paragraphs of this privacy policy.

Recipients of Personal Data

In the course of our business operations, we collaborate with various external entities. In some instances, this necessitates the transfer of personal data to these external parties. We only disclose personal data to external entities when it is required for the fulfillment of a contract, when we are legally obligated to do so (e.g., sharing data with tax authorities), when we have a legitimate interest in the disclosure as per Article 6 (1) (f) of the GDPR, or when another legal basis permits such data transfer. When engaging processors, we only transfer our customers' personal data based on a valid data processing agreement. In the event of joint processing, a joint processing agreement is concluded.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only permissible with your explicit consent. You may withdraw any consent previously granted at any time. The lawfulness of data processing carried out prior to your withdrawal remains unaffected by such withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT BASED ON ARTICLE 6 (1) (E) OR (F) OF THE GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR ANY PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21 (1) OF THE GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21 (2) OF THE GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the location of the alleged infringement. This right to complain exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically, based on your consent or in fulfillment of a contract, in a common, machine-readable format, either for yourself or for transfer to a third party. Should you request the direct transfer of data to another controller, this will only be carried out if technically feasible.

Access, Rectification, and Erasure

In accordance with applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of data processing, and, if applicable, a right to rectification or erasure of this data. For this purpose, and for any further questions regarding personal data, you may contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data. For this purpose, you may contact us at any time. The right to restriction of processing applies in the following cases: If you dispute the accuracy of your personal data stored by us, we typically require time to verify this. For the duration of this verification, you have the right to request the restriction of processing of your personal data. If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of its erasure. If we no longer require your personal data, but you need it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing of your personal data instead of its erasure. If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of your interests against ours must be performed. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing of your personal data. If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

We hereby object to the use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and informational materials. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as through spam emails.

4. Data Collection on This Website

Inquiry by Email, Phone, or Fax

If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent. The processing of this data is based on Art. 6 (1) lit. b GDPR, provided your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if requested; consent can be revoked at any time. The data you send to us via contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage ceases to apply (e.g., after your request has been fully processed). Mandatory legal provisions – particularly statutory retention periods – remain unaffected.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and for any follow-up questions. We will not share this data without your consent. To track and respond to your submissions, we share this information with Squarespace so that they can provide us with website services. The data you enter in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage ceases to apply (e.g., after your inquiry has been fully processed). Mandatory legal provisions – particularly retention periods – remain unaffected.

Calendly

For the automated scheduling of an initial consultation, we use the tool "Calendly". The personal data you are required to enter here (name, email, reason for contact, and optional phone number) will be collected and stored by us for the purpose of confirming and, if necessary, modifying your desired appointment.

The processing of this data is based on Art. 6 (1) lit. b GDPR, provided your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if requested; consent can be revoked at any time.

Source: https://www.e-recht24.de