Person riding a bicycle in a dark forest with tree branches in the foreground.

Privacy Policy

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "Data") within my online offering and the associated websites, features, and content as well as external online presences, such as my social media profiles (hereinafter jointly referred to as "Online Offering"). With regard to the terminology used, such as "personal data" or its "processing," I refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

  • Inventory data (e.g., names, addresses)
  • Contact data (e.g., email, phone numbers)
  • Content data (e.g., text inputs)
  • Contract data (e.g., customer category, contract object)
  • Payment data (e.g., bank details, payment history)
  • Usage data (e.g., websites visited, interest in content, access times)
  • Meta/communication data (e.g., device information)

Types of processed data:

Categories of persons affected by processing:

  • Customers, interested parties
  • Visitors and users of the Online Offering

Purpose of processing:

  • Provision of the Online Offering, its contents, and features
  • Responding to contact requests and communication with users
  • Marketing, advertising, and market research
  • Provision of contractual services, customer service, and customer care
  • Security measures

1. RELEVANT LEGAL BASIS

In accordance with Art. 13 GDPR, I inform you of the legal basis of my data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR, the legal basis for processing for the performance of our services and the execution of contractual measures as well as responding to inquiries is Art. 6(1)(b) GDPR, the legal basis for processing to fulfill my legal obligations is Art. 6(1)(c) GDPR, and the legal basis for processing to protect my legitimate interests is Art. 6(1)(f) GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

2. CHANGES AND UPDATES TO THE PRIVACY POLICY

I ask you to regularly inform yourself about the content of my privacy policy. I adapt the privacy policy as soon as changes to the data processing carried out by me make this necessary. I will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

3. SECURITY MEASURES

In accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, I implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. The measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as the access, input, disclosure, securing of availability, and separation of the data. Furthermore, I have established procedures that guarantee the exercise of data subject rights, data deletion, and response to data threats. In addition, I consider the protection of personal data during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default (Art. 25 GDPR).

4. COOPERATION WITH PROCESSORS AND THIRD PARTIES

4.1. If, in the course of my processing, I disclose data to other persons and companies (processors or third parties), transmit it to them, or otherwise grant them access to the data, this is done only on the basis of legal permission (e.g., if a transmission of the data to third parties, such as payment service providers, is required for contract performance according to Art. 6(1)(b) GDPR), if you have consented, if a legal obligation requires it, or on the basis of my legitimate interests (e.g., when using agents, web hosts, etc.).

4.2. If I commission third parties with the processing of data on the basis of a so-called "Data Processing Agreement," this is done on the basis of Art. 28 GDPR.

5. TRANSFERS TO THIRD COUNTRIES

If I process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this happens in the context of using third-party services or disclosure, or transfer of data to third parties, this only takes place if it is to fulfill my (pre)contractual obligations, based on your consent, due to a legal obligation, or based on my legitimate interests. Subject to legal or contractual permissions, I process or have the data processed in a third country only if the special requirements of Art. 44 et seq. GDPR are met. This means, for example, processing takes place on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g., for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "Standard Contractual Clauses").

6. RIGHTS OF DATA SUBJECTS

6.1. You have the right to request confirmation as to whether data concerning you is being processed, and to receive information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

6.2. In accordance with Art. 16 GDPR, you have the right to demand the completion of the data concerning you or the correction of incorrect data concerning you.

6.3. In accordance with Art. 17 GDPR, you have the right to demand that relevant data be deleted immediately, or alternatively, in accordance with Art. 18 GDPR, to demand a restriction on the processing of the data.

6.4. You have the right to request that the data concerning you, which you have provided to me, be received in accordance with Art. 20 GDPR and to request its transmission to other controllers.

6.5. Furthermore, according to Art. 77 GDPR, you have the right to file a complaint with the competent supervisory authority.

7. RIGHT OF WITHDRAWAL

You have the right to revoke granted consents in accordance with Art. 7(3) GDPR with effect for the future.

8. RIGHT TO OBJECT

You can object to the future processing of the data concerning you at any time in accordance with Art. 21 GDPR. The objection can in particular be made against processing for direct marketing purposes.

9. COOKIES AND REACH MEASUREMENT

9.1. I use temporary and permanent cookies, i.e., small files that are stored on users' devices. In part, the cookies serve for security purposes or are necessary for the operation of my Online Offering (e.g., for the presentation of the website) or to save the user's decision when confirming the cookie banner. In addition, I or my technology partners use cookies for reach measurement and marketing purposes, about which users are informed in the course of the privacy policy.

9.2. If users do not want cookies stored on their computer, they are asked to disable the corresponding option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. For the most common browsers, you will find the procedure under the following links:

  • Mozilla Firefox
  • Google Chrome
  • Microsoft Internet Explorer
  • Apple Safari

How the deletion of cookies works on your device can be found in the instructions of your browser or device manufacturer. Please note that in this case, not all features of this online offering may be usable.

9.3. A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by switching them off in your browser settings.

10. DELETION OF DATA

10.1. The data processed by me is deleted or restricted in its processing in accordance with Articles 17 and 18 GDPR. Unless explicitly stated in this privacy policy, the stored data is deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

10.2. According to legal requirements in Germany, storage is particularly required for 6 years according to § 257 Abs. 1 HGB (commercial books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) as well as for 10 years according to § 147 Abs. 1 AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant to taxation, etc.).

11. PROVISION OF CONTRACTUAL SERVICES

11.1. I process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling contractual obligations and services in accordance with Art. 6(1)(b) GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.

12. CONTACT

12.1. When contacting me (via contact form or email), the user's details are processed to handle the contact inquiry and its processing in accordance with Art. 6(1)(b) GDPR.

12.2. I delete the inquiries if they are no longer necessary. In the case of statutory archiving obligations, deletion takes place after their expiration (end of commercial law (6 years) and tax law (10 years) retention obligation).

13. COLLECTION OF ACCESS DATA AND LOG FILES

13.1. I (or the web space provider) collect data based on my legitimate interests within the meaning of Art. 6(1)(f) GDPR regarding every access to the server on which this service is located (so-called server log files). The access data includes the name of the retrieved webpage, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address (but see above, Activity Log deactivated), and the requesting provider.

13.2. I use the log data only for statistical evaluations for the purpose of operation, security (e.g., to investigate misuse or fraud), and optimization of the offer. I reserve the right to retrospectively check the log data if there is a justified suspicion of illegal use based on concrete evidence.

14. HOSTING PROVIDER SQUARESPACE

14.1. I use Squarespace Websites of the company Squarespace Ireland Ltd., Le Pole House 1st Floor, Ship Street Great, Dublin 8 Ireland ("Squarespace"), for the operation and hosting of this website. Squarespace is certified under the Privacy Shield agreement and thereby offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnjcAAC&status=Active).

15. ONLINE PRESENCES IN SOCIAL MEDIA

15.1. I maintain online presences within social networks and platforms to communicate with customers, interested parties, and users active there and to inform them about my services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.

16. INTEGRATION OF THIRD-PARTY SERVICES AND CONTENT

16.1. Within this online offering, based on my legitimate interests (i.e., interest in the analysis, optimization, and economic operation of my online offering within the meaning of Art. 6(1)(f) GDPR), I use content or service offerings from third-party providers to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "Content"). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. I strive to use only such content whose respective providers use the IP address solely for the delivery of the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Through the "pixel tags," information such as visitor traffic on the pages of this website can be evaluated. The pseudonymous information can also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, visiting time, as well as other information regarding the use of my online offering, and may also be combined with such information from other sources.

16.2 The following presentation provides an overview of third-party providers as well as their content, along with links to their privacy policies, which contain further notes on the processing of data and, as partly already mentioned here, opt-out options:

Google Fonts
External fonts from Google, LLC., https://www.google.com/fonts ("Google Fonts"). The integration of Google Fonts occurs via a server call to Google (usually in the USA). Privacy Policy: https://policies.google.com/privacy.

Adobe Typekit
Adobe Typekit Webfonts are used on this website. Typekit is a service offered by the Adobe company. This service provides fonts that are displayed in the user's web browser after a server call to Adobe (in the USA). At least the IP address of the browser of the end device of the user of this website is saved by Adobe. You can find more detailed information in the privacy policy: https://www.adobe.com/privacy/policies/typekit.html

Google Maps
Maps from the "Google Maps" service provided by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/.

YouTube
Videos from the "YouTube" platform provided by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://policies.google.com/privacy.

Instagram
Within my online offering, functions of the Instagram service are integrated. These functions are offered and integrated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the contents of my pages with your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We point out that as the provider of the pages, we receive no knowledge of the content of the transmitted data as well as its use by Instagram. Privacy Policy: http://instagram.com/about/legal/privacy/.

‍