# Privacy Policy

In short: this website is deliberately data-minimal. No cookies, no tracking, no analytics, and no external fonts, scripts, or other third-party content are loaded. No personal data is collected for marketing or analytics purposes. Only technically necessary access data is processed by the host.

## 1. Controller

## 2. No cookies, no tracking

This website sets no cookies. No analytics or tracking tools and no advertising technologies are used. No external fonts, scripts, or other third-party content are loaded. The site works without any consent to the processing of personal data for analytics, tracking, or marketing purposes.

## 3. Hosting and server log files

This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

When the website is accessed, the host processes technically necessary access data, which may include in particular:

- IP address
- date and time of the request
- the requested resource
- the amount of data transferred
- referrer URL, if transmitted
- the user agent of the browser used
- technical information about the request

This processing serves the delivery, stability, security, and technical provision of the website, in particular protection against attacks and misuse. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in the secure, stable, and uninterrupted operation of the website.

Insofar as personal data is transferred to the USA, this is done on the basis of appropriate safeguards, in particular the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Where required, a data processing agreement pursuant to Art. 28 GDPR is in place with the host.

## 4. Contacting us

If you contact us by email, we process the information you provide in order to handle your request. The legal basis is Art. 6 (1) (f) GDPR where the processing serves to answer your request, and additionally Art. 6 (1) (b) GDPR where your request is aimed at concluding or performing a contract. The data is deleted once it is no longer required for the purpose and no statutory retention obligations apply.

## 5. No disclosure to third parties

Your personal data is not passed on to third parties, with the exception of the host named above, within the scope of the technical provision and protection of this website.

## 6. Your rights

Under the GDPR you have the following rights:

- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to object to processing (Art. 21 GDPR)
- right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal email to the address above is sufficient.

Last updated: May 2026