Data Controller
Responsible party (Art. 4 No. 7 GDPR): Steffen Grell
Address: Clemensstr. 54, 53225 Bonn, Germany
Email: [email protected]
Phone: +49 (0) 151 – 50 700 521
We take the protection of your personal data very seriously. This privacy policy is intended to inform you about how we handle your personal data when you visit our website. Our data protection practices comply with the European General Data Protection Regulation (GDPR) and German Data Protection Act (BDSG).
Website Delivery and Log Files
Every time you access our website, our system automatically collects data and information from your device's access channel. The following data is collected:
- Browser type and version
- Operating system of the device
- Hostname of the access device
- IP address of the device
- Date and time of access
- Pages and resources visited on our website
- Referrer page
- Request status and volume of data transferred
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest consists of ensuring that the website functions correctly.
Storage duration: Technical data is deleted when it is no longer necessary, at most 3 months after access.
Statistical Analysis — Matomo (local)
We use Matomo, which is hosted on our own server infrastructure within the European Economic Area. Matomo is configured so that data is not transferred to third parties. IP addresses are anonymized before processing. The browser's "Do Not Track" function is respected.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in optimizing the website).
External Web Services
Our website actively uses content from external providers (web-based services). When you access our website, these external providers may receive information about your visit. The following services are used:
Legal Text Excerpts (Website-Check GmbH)
We use the service from Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, to load updated legal text. Data transfer is carried out exclusively to servers within the European Economic Area. Legal basis: Art. 6 para. 1 lit. c GDPR.
Data Security
Your personal data is protected through technical and organizational measures during collection, storage, and processing. For information with high confidentiality levels, we recommend encrypted communication or postal mail.
Your Rights
In accordance with GDPR, you have the following rights:
- Right of access (Art. 15 GDPR): Right to obtain confirmation of whether personal data about you is being processed.
- Right to rectification (Art. 16 GDPR): Right to correct inaccurate personal data.
- Right to erasure (Art. 17 GDPR): Right to request deletion of your data when it is no longer necessary.
- Right to restrict processing (Art. 18 GDPR): Right to request restriction of processing in certain cases.
- Right to withdraw: If you have given consent, you can withdraw it at any time.
- Right to object (Art. 21 GDPR): Right to object to processing based on legitimate interest.
- Right to data portability (Art. 20 GDPR): Right to receive your data in a structured, commonly used machine-readable format.
To exercise your rights, you can contact:
Right to Lodge a Complaint with a Supervisory Authority
If you suspect that your data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You can contact the data protection authority in the EU member state where you reside, work, or where the violation allegedly occurred.