Privacy Policy

1. Controller

2. General information

Protecting your personal data matters to us. We process personal data solely in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This policy tells you which data is collected when you visit this website, what we use it for, and which rights you have.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you open the site, the server processes technically necessary access data in so-called server log files: IP address, date and time of access, the page requested, the referring page, browser type and operating system. This processing is necessary for the secure and stable operation of the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically faultless operation and the security of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

4. Enquiry and consultation forms

The forms on this website let you send us a role enquiry or a request for a free consultation. We process only the details you enter (name, work email address, company where given, start date or preferred appointment, and your description of the role) and solely in order to handle your enquiry and the correspondence that follows from it. The legal basis is Art. 6(1)(b) GDPR for steps taken prior to entering into a contract, together with the consent you give on submission under Art. 6(1)(a) GDPR. You may withdraw that consent at any time with effect for the future, informally by email to the address given above; the lawfulness of processing carried out before the withdrawal is unaffected. To protect against automated bulk submissions, your IP address is processed briefly when the form is sent; the legal basis for this is Art. 6(1)(f) GDPR.

5. Email delivery via Resend

To deliver form enquiries to our inbox and to send you the confirmation email, we use the service Resend, operated by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. The details you provide are transmitted to the provider and processed there exclusively for the purpose of sending the email. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. As the provider is based in the USA, a transfer to a third country takes place; it is safeguarded by the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR and additionally covered by the provider’s certification under the EU-U.S. Data Privacy Framework.

6. Locally hosted fonts

This website uses locally hosted web fonts (Source Serif 4) for a consistent typographic appearance. The font files are loaded exclusively from our own server when a page is opened. No connection to servers operated by Google or any other third party is made, and no data is transmitted to third parties for this purpose.

7. Cookies

This website uses no cookies for analytics, marketing or tracking purposes, and embeds no third-party services for audience measurement. The only cookie set is a technically necessary one (sh_lang, stored for one year) which remembers the language you selected using the language switch so that it can be shown to you again on your next visit. It is only set once you actively change the language, and is exempt from consent under § 25(2)(2) TDDDG. The legal basis for the associated processing is Art. 6(1)(f) GDPR.

8. SSL/TLS encryption

For security reasons this website uses SSL or TLS encryption. This means the data you transmit to us cannot be read by third parties. You can recognise an encrypted connection by the address bar of your browser beginning with “https://”.

9. Retention period

We store personal data only for as long as is necessary for the purposes stated. We delete form enquiries once they have been dealt with and no retention obligations stand in the way, and at the latest six months after the correspondence has ended. Server log files are deleted automatically by the host after a short period. Statutory retention periods remain unaffected, in particular the commercial and tax law periods of six and ten years respectively.

10. Your rights

You have the right to obtain information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). Where we base processing on a legitimate interest, you have a right to object under Art. 21 GDPR. Any consent you have given may be withdrawn at any time under Art. 7(3) GDPR. Please use the contact details given above. Independently of this, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.

11. Data security

We take appropriate technical and organisational measures to protect your data against accidental or deliberate manipulation, loss, destruction and access by unauthorised persons. Our measures are reviewed and improved continuously in line with technical developments.

12. Changes to this privacy policy

We update this privacy policy when the legal situation, our services or the nature of our data processing changes. The current version published here applies to each subsequent visit to this website.