1. General

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website. The legal bases are in particular Art. 6 GDPR and Section 25 TDDDG.

2. Server log files

When the site is accessed, your browser transmits technically necessary data (IP address, date/time, page accessed, browser/OS type, volume of data transferred). Purpose: secure, stable operation. Legal basis: Art. 6(1)(f) GDPR.

3. Hosting (Squarespace)

Hosted with Squarespace Ireland Ltd., Dublin; processing also takes place partly in the USA. Processing on our behalf pursuant to Art. 28 GDPR on the basis of the data processing agreement (Data Processing Addendum) concluded with Squarespace. Legal basis: Art. 6(1)(f) GDPR. The transfer to the USA is safeguarded by the Standard Contractual Clauses (Art. 46 GDPR) contained in that agreement, additionally supported by the EU-US Data Privacy Framework.

4. Cookies and consent (Cookiebot)

We use the consent tool Cookiebot (Usercentrics A/S, Denmark). Services that are not technically necessary are only loaded after your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie icon. The current, complete list of cookies is displayed automatically below.

5. Google services

Provider: Google Ireland Ltd., Dublin. Google Analytics and Google Tag Manager are no longer used. The following Google services are only loaded after your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG):

- Google Maps: map display (contact page)

- YouTube: embedded videos (enhanced privacy mode, youtube-nocookie)

Where data is transferred to the USA, Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission).

Google Fonts are not used; fonts are rendered exclusively using the device's system fonts. No connection to Google servers takes place as a result.

6. Other services

- Statsig: function/usage analysis; loaded as part of the Squarespace platform (sub-processor of Squarespace) and covered by the Squarespace data processing agreement (incl. Standard Contractual Clauses). Only after your consent (Art. 6(1)(a) GDPR).

- Weglot (Weglot SAS, France/EU): website translation; technically necessary. Legal basis: Art. 6(1)(f) GDPR.

- jsDelivr (public open-source CDN): delivery of design/functionality files (no tracking, no cookies); your IP address is transmitted to the CDN. Legal basis: Art. 6(1)(f) GDPR.

7. Newsletter

If you subscribe, we process your e-mail address (double opt-in). Legal basis: Art. 6(1)(a) GDPR. To prove your consent, we log the date, time and IP address of your registration (Art. 7(1) GDPR). You can unsubscribe at any time via the link in the newsletter.

8. Contact

For enquiries via form or e-mail, we process the information you provide in order to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR.

9. Storage period and your rights

Unless a specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of the processing ceases to apply, you withdraw your consent, or you request erasure. Mandatory statutory provisions - in particular retention periods - remain unaffected.

You have the following rights regarding your personal data:

- Right of access (Art. 15 GDPR)

- Right to rectification or erasure (Art. 16 and 17 GDPR)

- Right to restriction of processing (Art. 18 GDPR)

- Right to data portability (Art. 20 GDPR)

- Right to object to processing (Art. 21 GDPR)

- Right to withdraw consent given (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (for us: the Hamburg Commissioner for Data Protection and Freedom of Information).

10. SSL/TLS

This website uses SSL/TLS encryption. As of: July 2026.