Privacy Policy

Data Controller

General Information on Data Processing

Personal data is processed only to the extent necessary to provide a functional, secure, and stable website. Processing is carried out in accordance with the applicable data protection laws, especially the GDPR, the BDSG, and the TDDDG.

Depending on the specific processing activity, the legal basis may in particular be Art. 6(1)(a) GDPR for consent, for example if browser-side Sentry features are activated after consent via the consent banner, and Art. 6(1)(f) GDPR for our legitimate interest in the secure, reliable, and technically stable operation of this website, especially for server log files and server-side error monitoring.

Hosting & Server Log Files

This website is hosted with Netcup in Germany. The data processed through this website is handled on servers in Germany. The servers are managed by us.

When you access this website, server log files may be processed. These may include in particular:

• IP address
• date and time of the request
• requested resource or accessed page
• HTTP status code
• amount of data transferred
• referrer URL
• browser type and version
• operating system
• user agent string

The processing is carried out to ensure the technical provision, stability, and security of the website and to detect and resolve faults or misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of this website.

Server log files are stored temporarily and deleted on container restart or node reboot, after 14 days at the latest, and usually earlier.

External Links

This website may contain links to external websites. When you open such a link, personal data such as your IP address and, depending on your browser settings, the referrer may be transmitted to the respective third-party operator. We have no control over the data processing carried out by those providers.

Error Analysis & Performance (Sentry)

We use Sentry for error analysis and performance monitoring. Browser-side Sentry features are activated only with your explicit consent. Server-side Sentry processing may be used without consent where necessary for the stable and error-free operation of this website.

Depending on the context, the processed data may include error reports, stack traces, performance metrics, session replays (browser-side only, with consent), IP address information in anonymized form, browser and device information or server environment information, cookies and HTTP headers (client-side only), and request metadata (server-side only). No sampling is applied.

The purpose of this processing is to identify, analyze, and fix technical errors and to ensure stable website performance. The legal basis is Art. 6(1)(a) GDPR where browser-side Sentry is used after consent, and Art. 6(1)(f) GDPR for server-side error analysis performed in our legitimate interest in the secure, stable, and error-free operation of this website.

Data processed through Sentry is retained for up to 90 days. Provider: Sentry Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Sentry also has an EU establishment, Sentry Europe GmbH, Oranienstraße 10-11, 10997 Berlin, Germany. A data processing agreement is in place. Where data is transferred to third countries, Sentry states that transfers are based on an adequacy decision where applicable, including certification under the EU-U.S. Data Privacy Framework, or otherwise on appropriate safeguards such as the European Commission's Standard Contractual Clauses. More information is available at https://sentry.io/privacy/.

Automated Decision-Making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

Data Security

Appropriate technical and organizational measures are used to protect personal data. These include encrypted transmission via TLS/SSL, regular security updates, and access controls for the systems used to operate this website.

Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

• right of access under Art. 15 GDPR
• right to rectification under Art. 16 GDPR
• right to erasure under Art. 17 GDPR
• right to restriction of processing under Art. 18 GDPR
• right to data portability under Art. 20 GDPR
• right to object under Art. 21 GDPR
• right to withdraw any consent given at any time with effect for the future

To exercise your rights, please contact [email protected]. We will respond within one month of receiving your request, unless a longer period is permitted by law.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

The competent supervisory authority for this website is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, https://www.baden-wuerttemberg.datenschutz.de/.

Changes to This Privacy Policy

This privacy policy may be updated if this website or the legal requirements change.

Last updated: April 9, 2026.