Privacy Policy

1. Controller

The controller responsible for data processing on this website is: [company name, address, email, authorised representative]. For privacy questions, contact us at [privacy contact / data protection officer, if applicable].

2. Hosting and server log files

The website is hosted by [hosting provider / own server infrastructure]. When you access it, technically necessary access data (server log files) automatically transmitted by your browser are processed:

• page/file accessed, plus date and time
• amount of data transferred and confirmation of successful retrieval
• browser type and version, operating system
• shortened / processed IP address (legal basis: Art. 6(1)(f) GDPR — secure, uninterrupted operation)

Log file retention period: [e.g. 7–30 days], after which they are deleted or anonymised.

3. Cookies and local storage

This website uses no cookies for marketing or tracking purposes and embeds no third-party trackers (e.g. Meta Pixel, Google Ads). For this reason, no cookie consent banner is required.

We use your browser's local storage (localStorage/sessionStorage) exclusively for the site to function, and it transmits no data to us:

• display preference (light/dark/contrast) — stored permanently in the browser, purely local
• temporary storage of your inputs during the enquiry configurator until completion — only for your current session

Legal basis: Section 25(2) TDDDG (German Telecommunications-Digital Services Data Protection Act; technically necessary storage) in conjunction with Art. 6(1)(f) GDPR.

4. Fonts (self-hosted)

Fonts are delivered locally from our own server. There is no connection to Google Fonts or other third parties; no IP address is therefore transmitted to external font services when the page is displayed.

5. Traffic measurement (cookieless, without consent)

To improve our offering, we record page views in anonymised, cookieless form on our own first-party infrastructure. In doing so:

• no cookies are set and no cross-device recognition takes place
• no IP addresses or personally identifiable characteristics are stored
• only the path accessed and (if present) the referrer domain are processed in aggregated form

Do Not Track (DNT) and Global Privacy Control (GPC) signals are respected: if either is active in your browser, no measurement takes place. Legal basis: Art. 6(1)(f) GDPR.

6. Contacting us and the contact form

If you contact us via the form or email, we process the data you provide (e.g. name, email, company, message) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (responding to enquiries). Data is deleted once it is no longer required and no statutory retention obligations apply.

7. Bookings and payment processing

For bookings we process the data required to perform the contract (Art. 6(1)(b) GDPR). Payment processing is carried out via [payment service provider, e.g. Stripe — once activated, with its own privacy notice and data processing agreement]. Details will be added once payment integration goes live.

8. Chat assistant "Lexi"

You can ask questions via the chat. Your input is processed to provide an answer and may be stored to follow up with you. Processing/forwarding is carried out via [the AI/backend component used and its legal basis/data processing agreement]. Please do not enter special categories of personal data in the chat.

9. Your rights

Under the GDPR, you have the right to:

• access (Art. 15), rectification (Art. 16), and erasure (Art. 17)
• restriction of processing (Art. 18) and data portability (Art. 20)
• object to processing based on Art. 6(1)(f) (Art. 21)
• lodge a complaint with a data protection supervisory authority (Art. 77)

An informal message to the controller named above is sufficient to exercise these rights. Competent supervisory authority: [relevant state/data protection supervisory authority].

10. Version and changes

We will update this privacy policy whenever data processing changes (e.g. once payment integration is activated). Last updated: [date].