Privacy Policy

Preamble

With the following privacy policy we would like to inform you which types of your personal data (hereinafter also abbreviated as "data") we process for which purposes and in which scope. The privacy statement applies to all processing of personal data carried out by us, both in the context of providing our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online services").

The terms used are not gender-specific.

Last Update: 10. September 2025

Table of contents

• Preamble
• Controller
• Overview of processing operations
• Relevant legal bases
• Security Precautions
• General Information on Data Retention and Deletion
• Rights of Data Subjects
• Use of Cookies
• Contact and Inquiry Management
• Newsletter and Electronic Communications
• Profiles in Social Networks (Social Media)
• Changes and Updates

Controller

Overview of processing operations

The following table summarises the types of data processed, the purposes for which they are processed and the concerned data subjects.

Relevant legal bases

Relevant legal bases according to the GDPR:

In the following, you will find an overview of the legal basis of the GDPR on which we base the processing of personal data.

• Consent (Article 6 (1) (a) GDPR) - The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
• Performance of a contract and prior requests (Article 6 (1) (b) GDPR) - Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legitimate Interests (Article 6 (1) (f) GDPR) - the processing is necessary for the protection of the legitimate interests of the controller or a third party.

National data protection regulations in Germany:

In addition to the data protection regulations of the GDPR, national regulations apply to data protection in Germany.

Relevant legal basis according to the Swiss Data Protection Act:

If you are located in Switzerland, we process your data based on the Federal Act on Data Protection (referred to as "Swiss DPA").

Security Precautions

We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to, input, transmission, securing and separation of the data.

General Information on Data Retention and Deletion

We delete personal data that we process in accordance with legal regulations as soon as the underlying consents are revoked or no further legal bases for processing exist.

In particular, data that must be retained for commercial or tax law reasons, or whose storage is necessary for legal prosecution or protection of the rights of other natural or legal persons, must be archived accordingly.

Data Retention and Deletion according to German law

• 10 Years - Retention period for books and records, annual financial statements
• 8 years - Accounting documents, such as invoices
• 6 Years - Other business documents
• 3 Years - Data required to consider potential warranty and compensation claims

Data Retention and Deletion according to Swiss law

• 10 years - Retention period for books and records, annual financial statements
• 10 years - Data necessary to consider potential claims for damages

Rights of Data Subjects

Rights of the Data Subjects under the GDPR:

As data subject, you are entitled to various rights under the GDPR, which arise in particular from Articles 15 to 21 of the GDPR:

• Right to Object
• Right of withdrawal for consents
• Right of access
• Right to rectification
• Right to Erasure and Right to Restriction of Processing
• Right to data portability
• Complaint to the supervisory authority

Rights of the data subjects under the Swiss DPA

• Right to information
• Right to data release or transfer
• Right to rectification
• Right to object, deletion, and destruction

Use of Cookies

The term "cookies" refers to functions that store information on users' devices and read it from them. We use cookies in accordance with legal regulations.

Information on legal data protection bases: Whether we process personal data using cookies depends on users' consent.

Storage duration:

• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user leaves an online service and closes their device.
• Permanent cookies: Permanent cookies remain stored even after the device is closed.

General information on withdrawal and objection (opt-out): Users can withdraw their consent at any time and also object to the processing according to legal regulations.

Contact and Inquiry Management

When contacting us (e.g. via mail, contact form, e-mail, telephone or via social media) as well as in the context of existing user and business relationships, the information of the inquiring persons is processed to the extent necessary to respond to the contact requests and any requested measures.

Contact form: Upon contacting us via our contact form, email, or other means of communication, we process the personal data transmitted to us for the purpose of responding to and handling the respective matter.

Newsletter and Electronic Communications

We send newsletters, emails, and other electronic notifications (hereinafter "newsletters") exclusively with the consent of the recipients or based on a legal basis.

Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to be able to demonstrate previously given consent.

The logging of the registration process is based on our legitimate interests for the purpose of proving its proper execution.

Content:

Information about us, our services and new blogs.

Opt-Out: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter at the end of each newsletter.

Profiles in Social Networks (Social Media)

We maintain online presences within social networks and process user data in this context in order to communicate with the users active there or to offer information about us.

We would like to point out that user data may be processed outside the European Union. This may entail risks for users.

Furthermore, user data is usually processed within social networks for market research and advertising purposes.

For a detailed description of the respective forms of processing and the opt-out options, we refer to the data protection declarations and information provided by the operators of the respective networks.

In the case of requests for information and the assertion of data subject rights, we point out that these can be asserted most effectively with the providers.