Zum Inhalt springen

Privacy policy

I. Information on the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)

1. Person responsible

Responsible for this website is:

Address of the person responsible (as an image)

2. Data processed for the provision of the website and the creation of log files

a. What data is processed for what purpose?

Each time you access content on the website, data is temporarily stored that may allow you to be identified. The following data is collected:

  • Date and time of access
  • IP address
  • Host name of the accessing computer
  • Website from which the website was accessed
  • Websites that are accessed via the website
  • Visited page on our website
  • Message whether the retrieval was successful
  • Amount of data transferred
  • Information about the browser type and version used
  • Operating system

Temporary storage of the data is necessary for the course of a website visit to enable delivery of the website. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies in these purposes.

b. What is the legal basis for processing this data?

The data is processed on the basis of Article 6(1)(f) GDPR.

c. Are there other recipients of the personal data besides the controller?

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The hoster receives the above-mentioned data as a processor.

d. How long is the data stored?

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. When the website is provided, this is the case when the respective session has ended. The log files are stored for a maximum of 48 hours and are accessible directly and exclusively to administrators. After that, they are only available indirectly via the reconstruction of backup tapes and are permanently deleted after a maximum of six weeks.

3. Rights of data subjects

a. Right of access

You can request information in accordance with Art. 15 GDPR about your personal data that we process.

b. Right to object

You have the right to object for specific reasons (see point II).

c. Right to rectification

If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

d. Right to erasure

You can request the erasure of your personal data in accordance with Art. 17 GDPR.

e. Right to restriction of processing

In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.

f. Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 (1) GDPR. The competent supervisory authority in Poland is:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2
00-193 Warsaw
Poland
https://uodo.gov.pl/

g. Right to data portability

In the event that the requirements of Art. 20 para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, but are justified pursuant to Art. 6(1)(f) GDPR. The requirements of Art. 20 (1) GDPR are therefore not fulfilled in this respect.

II. Right to object pursuant to Art. 21 (1) GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (f) of Article 6(1) GDPR. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.

III. Other recipients of the personal data

4. External services and content

a. Use of Cloudflare as a proxy and CDN

We use the Cloudflare service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare is placed between your browser and our hosting provider (reverse proxy). This protects our website against attacks and enables efficient delivery. The following data is processed:

  • IP address of the user
  • Access data (date, time, page accessed)
  • Technical information (e.g. browser type, operating system)

Cloudflare may set technically necessary cookies to ensure the security and functionality of the website.

Legal basis: Processing is carried out on the basis of Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the secure and efficient provision of our website and in protection against attacks.

Recipients and third-country transfer: Cloudflare processes the data as a processor. Data is transferred to the USA on the basis of Cloudflare's certification under the EU-US Data Privacy Framework.

Further information: Information on data processing by Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/.

b. AI-Powered Text Generation and Chatbot (OpenAI GPT)

  • We use the OpenAI GPT service for two functions: a support chatbot answers your questions. When you use the contact form, a short summary of your message is generated and sent to you, and a draft reply is prepared for us only.
  • Depending on your input, personal data (e.g., email address, name, or free-text entries) may be processed and transmitted to OpenAI. This data is used solely to answer and handle your request.
  • Legal basis:
    • Art. 6(1)(f) GDPR (legitimate interest in efficient customer support),
    • or Art. 6(1)(b) GDPR (performance or initiation of a contract), if applicable.
  • Recipient: OpenAI, USA (processing based on EU standard contractual clauses).
  • Only data required for the respective function is transmitted. Chat conversations are not permanently stored without your explicit consent.
  • Chat histories are stored for quality assurance purposes for a period of 30 days and then automatically deleted, unless you have explicitly agreed to a longer storage period.
  • More information: OpenAI Privacy Policy.

c. Email sending (Amazon Web Services – SES)

  • We use Amazon Simple Email Service (SES) to send emails (e.g., for contact requests or system notifications).
  • Email addresses and, if applicable, names and the content of the request are processed to enable delivery – no other personal data.
  • Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in reliable communication).
  • Recipient: Amazon Web Services EMEA SARL, Luxembourg. The data may also be processed in data centers outside the EU as part of order processing. This is done on the basis of the EU standard contractual clauses.
  • Further information: AWS Privacy Policy.

d. Use of Google reCAPTCHA

We use Google reCAPTCHA to protect form submissions (e.g., on our contact form) against automated attacks and spam generated by bots. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA analyzes the behavior of website visitors based on various characteristics (e.g., IP address, duration of stay on the website, or mouse movements made by the user). The data collected during this analysis is forwarded to Google and processed there.

Legal basis: The processing is carried out on the basis of Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in protecting our web services from abusive automated crawling and spam.

Further information: For more information about Google reCAPTCHA and Google's Privacy Policy, please visit: https://policies.google.com/privacy and https://policies.google.com/terms.

5. Web Analytics and Statistics

To analyze and improve our online offering, we use a privacy-friendly web analytics tool. This analysis is carried out without the use of tracking cookies and is based on pseudonymized usage data.

We use Matomo, an open-source software for statistical analysis of website usage. Matomo is operated on servers provided by our hosting provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

Which data is processed? The following data is collected:

  • Visited pages and navigation path
  • Time spent on pages
  • Country of origin (without precise location data)
  • Operating system, browser type, and version

Data anonymization: The IP address is processed in a shortened form (IP anonymization) before storage, making direct identification of individual users impossible. The processing is carried out without the use of tracking cookies.

Legal basis: The processing is based on Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in improving our services and optimizing the technical performance of our website.

6. Use of cookies

a. Which cookies are used?

Our website uses cookies to ensure functionality, improve the user experience and provide certain services. These are:

  • Necessary cookies: These cookies are necessary for the operation of our website. Without them, certain functions could not be provided.

b. Legal basis of the processing

Processing is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interest) for necessary cookies and on the basis of Art. 6(1)(a) GDPR (consent) for all other cookies.

c. How can cookies be managed?

You can disable or delete cookies in your browser settings. Please note that this may affect the functionality of our website.