Privacy Policy
1. Privacy at a Glance
General Information
We take your privacy seriously. This policy explains what information is processed when you visit our website, how it is handled, and your rights under privacy regulations like the General Data Protection Regulation (GDPR).
2. Data Collection & Privacy by Design
Controller:
The data controller responsible for this website is the operator listed in the Imprint (Legal Notice).
Server Access Data Anonymization:
To guarantee maximum privacy by design, we have configured our Nginx web servers to immediately and permanently replace all incoming client IP addresses in the server logs with 0.0.0.0. We do not store or collect your actual IP address or any other personally identifiable information (PII) during your visit. As a result, no personal data within the meaning of the GDPR is retained in our log files.
SSL/TLS Encryption:
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the change in the browser's address line from "http://" to "https://" and the lock symbol in your browser address bar.
3. Hosting
Our website is hosted on a virtual private server (VPS) provided by OVH inside the European Union. Since we anonymize all server access logs immediately by replacing client IPs with 0.0.0.0, no personal data is transferred to or stored by the hosting provider. The processing of anonymous access data is conducted under Art. 6(1)(f) GDPR to ensure server stability.
4. Cookie-Free & CDN-Free Architecture
This website is built with a strict **no-tracking design**.
We do **not use cookies** and do not store any data in the local storage of your browser. Consequently, user consent under **§ 25(1) TDDDG** (Telecommunications-Telemedia-Data-Protection-Act, formerly TTDSG) is not required. No cookie consent banners are loaded.
Furthermore, we host all stylesheets and typography fonts (Inter, Outfit) locally on our own servers. No external assets are loaded from third-party CDNs (like Google Fonts servers), preventing unauthorized data transmission to external domains.
5. Rights of the Data Subject
Under GDPR (Articles 15-21), you have the right to access, rectify, restrict, or delete any personal data concerning you.
However, since we do not store any personal data (as IP addresses are immediately anonymized), we generally do not possess any data that can be linked to you personally. For any inquiries regarding your rights, please reach out to the contact email listed in the Imprint.