Privacy Policy

1. Data controller

The controller responsible for processing personal data on this website is:

For any privacy-related question or request, contact us at the email address above.

2. What data we collect

3. Purposes and legal bases (Art. 6 GDPR)

• Answering your request and preparing a quote — Art. 6(1)(b) GDPR (steps prior to entering into a contract, taken at your request).
• Bot protection and abuse prevention (Cloudflare Turnstile, server logs) — Art. 6(1)(f) GDPR (our legitimate interest in keeping the site secure and spam-free).
• Analytics to understand how the site is used — Art. 6(1)(a) GDPR (your consent, which you can withdraw at any time).

4. Recipients and processors

We share personal data only with the service providers needed to run this site:

• Google Analytics 4 (Google Ireland Ltd. / Google LLC) — Usage analytics, active only after your consent. GA4 truncates IP addresses. Data may be transferred to the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses.
• Microsoft Clarity (Microsoft Corporation) — Product analytics that captures pseudonymized session recordings and heatmaps of how pages are used, active only after your consent. Data may be transferred to the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses.
• Cloudflare, Inc. (Turnstile) — Bot protection on form submissions. Processes your IP address and browser signals transiently to distinguish people from bots.
• Email delivery provider — Your form submission is delivered to us as an email through our email provider.
• Telegram — Form submissions may also reach us as Telegram notifications. Telegram may process data outside the EU/EEA, which constitutes an international transfer.
• Hosting provider — This site runs on hosting infrastructure that processes requests and keeps standard server logs.

Fonts are self-hosted together with the site. Your browser never connects to Google Fonts, and no data is sent to Google just by loading our pages.

5. How long we keep data

• Requests sent via the forms: kept for up to 6 months after our last contact, then deleted — unless a contract follows, in which case statutory retention periods apply.
• Analytics data: in Google Analytics, event data is retained for 2 months and user-level data for 14 months; the user-data period resets with each new visit.
• Server logs: retained by our hosting provider for a short rolling period of no more than 30 days.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• withdraw consent at any time with effect for the future (Art. 7(3)) — for analytics, use “Cookie settings” in the footer

To exercise any of these rights, email the controller listed in section 1. We respond within one month.

You also have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work. The authority competent for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

7. Cookies and local storage

Every cookie and local-storage entry this site uses — including how to withdraw analytics consent — is listed in the Cookie Policy.

8. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy when the site or legal requirements change. The current version, with its date, is always published on this page.