Privacy policy

This page is a skeleton. The sections below are the ones a German site of this kind must carry under the GDPR; each needs to be completed with the actual processing this site performs, and reviewed by a lawyer before publication.

Controller

to be completed — name, address and contact of the controller, and a data protection officer if one is appointed.

Hosting

to be completed — hosting provider, location of processing, and the order processing agreement. Measure the live system rather than assume it.

Fonts and external resources

This site currently loads webfonts from Google Fonts, which transmits the visitor's IP address to a third country. Either self-host the fonts, which removes the transfer entirely, or document the transfer and its legal basis here.

Enquiry and newsletter forms

to be completed — what is collected, on what legal basis (Art. 6(1)(b) and (f) GDPR for enquiries, consent under Art. 6(1)(a) for the newsletter), how long it is kept, and who processes it.

Rights of data subjects

to be completed — access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to a supervisory authority.

Cookies and analytics

to be completed. As built, this site sets no cookies and runs no analytics; if that changes, a consent banner becomes necessary.