Users have the right to:

• Access to the stored data (Art. 15 GDPR)
• Rectification or erasure (Art. 16 and 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a data protection authority (Art. 77 GDPR, e.g. Hessian Data Protection Commissioner)

When you access our website, server log files are automatically collected:

• Browser type and version
• Operating system
• Referrer URL
• Date and time of access
• IP address (shortened where possible)

Legal basis: Art. 6 para. 1 lit. f) GDPR (legitimate interest in security and functionality). The data is deleted after 7 days.

We use necessary cookies for the operation of the website and optional cookies for statistical and marketing purposes.

• Necessary cookies:
  Enable basic functions and cannot be disabled.
• Statistical and marketing cookies:
  Used only with your consent (Art. 6 para. 1 lit. a) GDPR).
• Consent can be changed or withdrawn at any time via our cookie banner.

a) Matomo (formerly Piwik)

• Self-hosted open-source web analytics software
• Data is stored anonymized (without reference to the IP address)
• No transmission to third parties or external servers
• Opt-out possible: You can disable tracking in the cookie settings

b) YouTube and Vimeo

• Embedded videos may set cookies
• Data transfer only with your consent
• Privacy notices: YouTube | Vimeo

c) Cloudflare
We use Cloudflare (Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA) on our website as bot protection and a captcha service on forms. When used, the IP address and technical browser data are processed. Transfer to the USA is possible. The legal basis is Art. 6 para. 1 lit. f) GDPR (legitimate interest in protection against misuse). Further information: Cloudflare Privacy Notice.

d) Kinsta
Our website is hosted by Kinsta Inc. (8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA). The servers used are located in Frankfurt am Main (EU).

We use SendGrid (Twilio Inc., 645 Harrison Street, Suite 200, San Francisco, CA 94107, USA) to send newsletters and press mailing list emails. Processing may involve transfer to the USA. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. Further information: SendGrid Privacy Notice.

• Registration requires double opt-in
• Storage of the registration IP address to prevent misuse
• Newsletter and press mailing list tracking:
  Measurement of open rates using tracking pixels (withdrawal possible at any time)

• For inquiries by email or contact form, the data is stored for processing (Art. 6 para. 1 lit. b) GDPR)
• Deletion takes place after processing has been completed

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found here.

The legal bases for the processing of personal data in this context are Art. 6 para. 1 lit. c) GDPR and Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.