Privacy Policy

1. Controller

The controller responsible for the processing of your personal data under GDPR is:

If you have questions about data protection or wish to exercise your rights, you can contact us at any time.

2. What Data We Collect

We only collect data that is necessary to operate the website and process your inquiries. When you visit our website, your IP address is briefly processed by the web server (see section 6). Beyond that, we only collect data that you voluntarily provide to us via the contact form.

Voluntarily provided via contact form:

• Contact form: Name, email address, message

What we do NOT collect:

• No tracking services (Google Analytics, etc.)
• No advertising cookies
• No social media plugins

3. Purpose of Processing and Legal Basis

Your data is used exclusively for the following purposes:

• Contact form: Processing and answering your inquiry. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in communicating with users)
• Server logs: Website provision, error analysis, and system security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and stability)

No advertising – We don't send newsletters and no profiling

No sharing – Your data is not sold

4. No Disclosure to Third Parties

Your personal data is not disclosed, sold or exchanged with third parties.

Exceptions:

• Only with your explicit consent
• When legally required (e.g., in criminal investigations)
• Within the scope of data processing by our hosting provider (see section 9)

5. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You can at any time request what data we store about you
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, unless a statutory retention period applies
• Right to withdraw consent (Art. 7(3) GDPR): You can revoke consent you have given at any time with effect for the future
• Right to data portability (Art. 20 GDPR): You can receive your data in a machine-readable format
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR

To exercise your rights, please contact us by email.

6. Server Logs

Each time you visit our website, the web server automatically records information in so-called server logs. These are technically necessary for the operation of the website:

• IP address of the requesting device (truncated after 48h)
• Page accessed (URL)
• Date and time of access
• Data volume transferred
• User-Agent (browser identification)

The IP address is anonymized after a maximum of 7 days (last octet removed). The full logs are used exclusively for error analysis and defense against attacks. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in security and stability).

7. Cookies

Strictly Necessary Cookies

This website uses a session cookie (VELION_SESSID) that is strictly necessary to provide the administration interface. This cookie does not store personal data and is deleted when the browser is closed.

• Purpose: Authentication for the admin area
• Name: VELION_SESSID
• Storage duration: End of session

No tracking cookies: No cookies for analytics, advertising, or social media are set.

You can visit all public pages of the website without any cookies being set. The session cookie is only set when logging into the admin area.

8. Retention Period

Contact form messages are stored for a maximum of 12 months and then automatically deleted, unless a statutory retention period (e.g., tax regulations) applies. Server logs are anonymized after a maximum of 7 days.

9. Hosting

This website is operated on the provider's own servers. The servers are located in a German data center. Your data is not transferred to external hosting providers. The provider has sole access to the servers and the data processed on them.

10. Contact

Contact us if you have questions about data protection or wish to exercise your rights: