Privacy policy

[Vollständiger Firmenname inkl. Rechtsform]
[Straße und Hausnummer]
[PLZ] [Ort], Germany
Represented by: [Vor- und Nachname des Inhabers / der Geschäftsführung]
Phone: [Telefonnummer]
Email: [E-Mail-Adresse]

You can use this website without providing any personal information. We only process personal data to the extent necessary for the technical operation of the website or to answer your enquiries. We do not use any analytics, tracking or advertising services, social media plugins or embedded maps or videos. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

This website is delivered via the Cloudflare Workers platform of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Each time a page is requested, technically necessary data is processed: IP address, date and time, the requested address, referrer URL, browser type and operating system. We need this data to deliver the website, ensure its security and fend off attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and stable operation of the website. Cloudflare deletes log data automatically after a few days.

Cloudflare processes the data on our behalf (Art. 28 GDPR). A transfer to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR); the EU Standard Contractual Clauses apply in addition.

We store the content of this website (e.g. reference projects and photos) and enquiries sent via the contact form in a database (Cloudflare D1) and a file storage (Cloudflare R2) provided by Cloudflare. The data is stored on servers in the European Union. The information on processing on our behalf and third-country transfers in section 3 applies.

If you contact us via the contact form, by email or by phone, we process your details in order to answer your enquiry: name, email address, subject and message (mandatory) and, optionally, company and phone number. Without the mandatory details we cannot process your enquiry.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

To prevent abuse, we store a non-reversible hash of your IP address for no more than 24 hours in order to limit the number of messages sent. The IP address itself is not stored. The legal basis is Art. 6(1)(f) GDPR (protection against spam and abuse).

We delete your enquiry once it has been fully dealt with, but no later than after 12 months. If your enquiry leads to an order, we retain the business correspondence in accordance with statutory retention obligations (German law: § 257 HGB, § 147 AO – six or ten years).

The admin area of this website is intended exclusively for our staff and is protected by Cloudflare Access. When logging in, the email address of the authorised person, a one-time login code and a technically necessary cookie (CF_Authorization) are processed. This has no effect on visitors of the public website.

The public website does not set any cookies and does not store any information on your device. In the protected admin area, only technically necessary cookies are set for logging in; no consent is required for this (§ 25(2) no. 2 of the German TDDDG).

All fonts, images and scripts are loaded from our own server. No connection is made to Google Fonts or any other third party. Links to external websites (e.g. in the photo credits) are only opened when you click them; the respective provider is responsible for their content and data processing.

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

You have the right at any time to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). Simply contact us using the details above.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence. The authority responsible for us is: [Landesbeauftragte/r für Datenschutz des Bundeslandes …].

We will update this privacy policy if the website or legal requirements change. The version published here applies.