Privacy Policy

1. Data controller

The data controller decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).

2. Data collection on this website

Server log files

When you visit this website, the hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR.

3. Contact form

When you send us enquiries via the contact form, your details from the form, including the contact data you provide, are stored for the purpose of processing the enquiry and for follow-up questions.

Form data is processed via Netlify Forms and stored on servers operated by Netlify, Inc. (see section 5, Hosting).

The processing of data entered into the contact form is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. An informal message by email to us is sufficient.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

4. Cookies

This website uses only technically necessary cookies. Cookies are small text files that your web browser stores on your device.

The following cookies are set on this website:

• cookie-consent - Stores your cookie preferences (retention: 1 year). Technically necessary.
• lang-pref - Stores your language preference so the website is displayed in your chosen language (retention: 1 year). Technically necessary.

These cookies are stored on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically correct presentation of our website.

You can configure your browser to inform you about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.

5. Hosting

This website is hosted by Netlify, Inc. The servers are located in the USA and Europe.

The use of Netlify is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website.

For more information about data protection at Netlify, see: https://www.netlify.com/privacy/

6. External services

Fonts (locally hosted)

This website uses the fonts "Cormorant Garamond" and "Work Sans" for consistent display. The fonts are stored locally on our server. No connection to external servers (e.g. Google) is made.

Web analytics (Umami, self-hosted)

This website uses Umami, a privacy-friendly web analytics tool. Umami is self-hosted, meaning all analytics data remains on our own servers. No data is transmitted to third parties.

Umami collects only anonymised usage data such as page views, referrer, browser type, and screen size. No cookies are set and no personal data (e.g. IP addresses) is stored. Identifying individual visitors is not possible.

Data processing is based on our legitimate interest in statistical analysis of user behaviour (Art. 6(1)(f) GDPR).

Cal.com (appointment booking)

We use Cal.com for appointment booking. When you book an appointment, the data you enter (name, email address, and any other details) is transmitted to Cal.com and processed there.

Provider: Cal.com, Inc. For more information, see: https://cal.com/privacy

Data processing is based on your consent (Art. 6(1)(a) GDPR).

7. Your rights

Under applicable law, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as the right to correction, blocking, or deletion of this data.

You have essentially the following rights:

• Right of access (Art. 15 GDPR): You can request information about your processed personal data.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided no legal retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing of your data.
• Right to data portability (Art. 20 GDPR): You can request that we provide your data in a common, machine-readable format.
• Right to object (Art. 21 GDPR): You can object to the processing of your data at any time.

If you have given consent to data processing, you can revoke it at any time. The revocation does not affect the lawfulness of the processing carried out until then.

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

8. Changes to this privacy policy

We reserve the right to update this privacy policy to ensure it always complies with current legal requirements, or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will apply to your next visit.

Last updated: February 2026