Privacy policy

1. Controller

This website is currently a product preview. There is no sign-up, no purchase, no forms, no analytics or tracking tools, no advertising and no cookies.
Fonts, images and scripts are loaded exclusively from our own hosting. No third-party content is embedded.

Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Source: Cloudflare privacy policy and data processing addendum (cloudflare.com/privacypolicy, cloudflare.com/cloudflare-customer-dpa), read on 11 Nov 2026.
When you visit the website, Cloudflare processes technically necessary data, in particular IP address, date and time, requested address, browser identifier (user agent) and possibly the previously visited page, to deliver the website and protect it against attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to deliver the website reliably and to protect it against attacks and misuse.
Retention: Cloudflare states no fixed period for these logs, only processing “for a limited period of time”.
According to Cloudflare, it processes these logs as a processor. Under section 6.1 of the Cloudflare Self-Serve Subscription Agreement, the data processing addendum (DPA) is incorporated by reference where personal data of European data subjects is involved; the agreement also covers free services (section 2.6).
Transfer to the USA: according to Cloudflare, it relies on its certification under the EU-U.S. Data Privacy Framework and, as a fallback, on standard contractual clauses.

When you switch the language or between light and dark, the website stores this setting locally in your browser (Local Storage, key “awbsk.v1.prefs”). It is not sent to us and contains no information about you. Merely visiting the site stores nothing.
This storage is strictly necessary to keep the setting you explicitly requested (§ 25(2) no. 2 TDDDG); no consent is required for it. No cookies are set.
You can delete the setting at any time in your browser settings.

If you email us, we process your email address and the content of your message to answer your request.
If you call us, we process the information you give us during the call for the same purpose and on the same legal bases; your phone number is transmitted unless you withhold it.
The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract with us or steps prior to entering into one, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering requests).
Retention: we delete your message once your request has been fully dealt with. Only where a statutory retention obligation applies to a message — e.g. commercial or business letters under § 147(1) nos. 2 and 3 AO, insofar as we are obliged to retain them — do we keep it for the statutory period (six years from the end of the calendar year, § 147(3) and (4) AO) and delete it afterwards.
Email provider: We receive and send emails via a mailbox at Google (Gmail). The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the content and connection data of emails as part of this service under its own privacy policy (policies.google.com/privacy). There is no data processing agreement with Google. Processing in the USA is possible; for this, Google states that it relies on the EU-U.S. Data Privacy Framework and, where required, on standard contractual clauses.

You are not legally or contractually obliged to provide us with data. Without the technically necessary connection data (e.g. IP address) the website cannot be delivered, however; without your email address we cannot reply to you.

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21).
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).
No automated decision-making, including profiling, takes place.