Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

The appointment of a data protection officer is not required under Section 38 (1) of the German Federal Data Protection Act (BDSG), as fewer than 20 people are regularly engaged in the automated processing of personal data. For any data protection queries, please contact the address given above.

This website does not set cookies, does not use analytics or tracking services, and does not embed advertising networks. No profiling and no automated decision-making within the meaning of Article 22 GDPR takes place.

As no non-essential technologies are used, no cookie banner under Section 25 TDDDG is required either.

When you access this website, your browser automatically transmits technical information which the hosting provider stores in so-called server log files. This includes in particular:

This processing serves the technical operation, stability, and security of the website as well as the prevention and investigation of abusive access. The legal basis is Article 6 (1) (f) GDPR. My legitimate interest lies in the trouble-free and secure operation of this website.

This data is not combined with other data sources and is not evaluated for marketing purposes. Log files are deleted after 7 days at the latest, unless they are exceptionally required for longer to investigate a specific security incident.

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The provider processes the data mentioned above on my behalf as a processor on the basis of an agreement pursuant to Article 28 GDPR. The data is processed on servers within the European Union; no transfer to third countries takes place as part of the hosting.

If you contact me by email, I process the data you provide (in particular your email address, your name, and the content of your message) solely to handle your enquiry and for any follow-up questions.

The legal basis is Article 6 (1) (b) GDPR insofar as your enquiry is aimed at concluding or performing a contract, and otherwise Article 6 (1) (f) GDPR based on my legitimate interest in responding to enquiries.

Your data will be deleted once your enquiry has been dealt with conclusively and no statutory retention obligations prevent this. Commercial correspondence is subject to the retention periods of six and ten years respectively under German commercial and tax law (Section 257 HGB, Section 147 AO).

Please note: unencrypted email can in principle be read by third parties in transit. For confidential content I am happy to offer an alternative channel.

For scheduling appointments I link to the external booking service Cal.com. This service is not embedded into this website: no data whatsoever is transmitted to Cal.com unless you actively click the link.

Only when you click a booking link do you leave this website and open the booking page. From that point onward, the provider's privacy policy applies; Cal.com is independently responsible for the processing that takes place there. The links I use point to the instance operated within the European Union (cal.eu).

If you book an appointment there, I process the data you provide (name, email address, requested time, and optional details about your enquiry) in order to hold the appointment. The legal basis is Article 6 (1) (b) GDPR.

This website uses TLS encryption to protect data in transit. You can recognise an encrypted connection by the address bar of your browser beginning with "https://" and by the padlock symbol.

This website uses the typefaces Montserrat and IBM Plex Mono. The font files are served entirely from my own server and are not loaded from external servers when you visit the site. No connection to Google servers is established and your IP address is not transmitted to third parties.

With regard to the personal data concerning you, you have the following rights:

Where processing is based on Article 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. I will then no longer process the data concerned unless I can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

Without prejudice to any other legal remedy, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR. The supervisory authority responsible for me is:

Providing personal data is neither legally nor contractually required. You can use this website without providing any personal data. However, if you wish to contact me or book an appointment, I do need the information required for that purpose in order to handle your request.

I will adapt this privacy policy whenever changes to this website or to the legal situation make it necessary. The version available on this page applies in each case.