Privacy Policy

Last updated: 15 October 2026

This notice explains, in accordance with Article 13 of the General Data Protection Regulation (GDPR), how personal data is processed when you visit our website or contact us.

1. Controller

2. Website operation, hosting and server logs

Our website is hosted using Microsoft Azure. Requests involve the processing of technically necessary data. This may include your IP address, access date and time, the requested address, HTTP status, data volume, browser and operating system information, and the referring website.

This processing enables us to deliver the website, maintain its technical functionality, and detect and prevent faults and attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

As our technical service provider, Microsoft receives the data necessary for hosting and operation. Processing on our behalf is subject to Article 28 GDPR and the contractual data protection terms for the Microsoft services used.

Retention

The retention of technical logs depends on how long the data is required to deliver the website, analyse faults, or investigate and prevent a specific security incident. Once the relevant purpose no longer applies, the data must be deleted unless statutory retention obligations or the protection of legal claims require further retention.

3. Contact by email or telephone

If you contact us, we process your contact details and the information you provide to handle and respond to your enquiry. Our business email is provided through Microsoft services; Microsoft processes the message and connection data necessary for transmission and storage.

Where your enquiry concerns entering into or performing a contract with you, processing is based on Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR; our legitimate interest is handling and responding to your enquiry. Processing required by law is based on Article 6(1)(c) GDPR.

We retain enquiries for as long as necessary to handle the matter and, where applicable, perform the contract. After completion, we delete the data unless statutory retention requirements or legitimate grounds for establishing, exercising or defending legal claims require further retention. Documents subject to retention requirements are restricted from processing for other purposes.

Data is disclosed only where a legal basis permits it, for example for necessary processing by technical service providers, compliance with legal obligations, or on the basis of your consent.

4. Microsoft services and international processing

We use Microsoft as our technical service provider for hosting and email communication. Depending on the service, operational processes and support activities, processing outside the European Economic Area cannot be ruled out. Such transfers are subject to Articles 44 et seq. GDPR.

Microsoft describes its processing arrangements, subprocessors and safeguards for international transfers in the Microsoft Products and Services Data Protection Addendum (DPA). These include EU Standard Contractual Clauses where applicable. You may request information on the safeguards applicable to our services using the contact details above.

5. Cookies, analytics and external content

Our website content does not use analytics or advertising cookies and does not embed web analytics tools, externally loaded fonts or social media plugins. The website does not store your language choice in cookies or local browser storage.

When you follow an external link, you leave our website. The respective operator is responsible for data processing on the destination website.

6. Your rights

Subject to the applicable legal requirements, you have the following rights:

• Access to your personal data under Article 15 GDPR;
• Rectification of inaccurate or incomplete data under Article 16 GDPR;
• Erasure under Article 17 GDPR and restriction of processing under Article 18 GDPR;
• Data portability under Article 20 GDPR where its conditions are met;
• Objection under Article 21 GDPR to processing based on legitimate interests;
• Withdrawal of consent at any time with effect for the future under Article 7(3) GDPR. Withdrawal does not affect the lawfulness of processing before withdrawal.

7. Right to object

Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing that data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing is necessary for establishing, exercising or defending legal claims.

8. Right to lodge a complaint

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. The authority responsible for our registered office in Hilden is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).