Privacy Policy

Last updated: October 2026

1. Privacy at a glance

Scope

This privacy policy applies to my website at fiegenbaum.solutions and to my application VSEasy at vseasy.fiegenbaum.solutions. Where this policy refers to “this website”, both are meant unless expressly distinguished.

The controller within the meaning of data protection law is Fiegenbaum & Cie. GmbH, represented by Johannes Fiegenbaum. Where this policy says “I”, it refers to Fiegenbaum & Cie. GmbH.

A note on roles: for the data you enter or upload in VSEasy to prepare your sustainability report, your company remains the controller under data protection law. I process this data on behalf of your company. For operating the website and the application itself, for example audience measurement, user accounts and payment processing, I am the controller; that is what this policy covers.

General information

The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the privacy policy set out below.

Data collection on this website

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. The operator's contact details are given in the section “Information on the controller” in this privacy policy.

How do I collect your data?

Some data is collected because you provide it to me, for example data you enter in a contact form.

Other data is collected by IT systems automatically or after your consent when you visit the website. This is mainly technical data, such as your web browser, operating system or the time of the page request. This data is collected automatically as soon as you enter this website.

What do I use your data for?

Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or erased. If you have given consent to data processing, you can withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact me at any time about this and any other questions on data protection.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be evaluated statistically. This is done mainly with so-called analytics programs.

Which services these are in detail, which cookies they set and on which legal basis I rely is described in section 3 of this policy. An overview of all cookies used can be found there under “Cookies”.

2. Hosting

Website

The website at www.fiegenbaum.solutions is run on the HubSpot content management system and delivered by HubSpot. The provider is HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland, a subsidiary of HubSpot, Inc., USA. My HubSpot account is set up in HubSpot's European data centre; pages are delivered through a content delivery network that HubSpot uses for this purpose. When you visit the website, technically necessary data is processed, in particular your IP address, the date and time of the request, the page requested, the referrer, and your browser and operating system. Further details on HubSpot can be found in the section “HubSpot”.

VSEasy, database and file storage

VSEasy is operated by Scaleway SAS, 8 rue de la Ville l'Evêque, 75008 Paris, France, with servers located in Paris (region fr-par) within the European Union. The database, the supporting documents uploaded by users (object storage) and the public figures shown in a key-figures tile on the website's home page are also stored there. When these figures are loaded, your browser connects to Scaleway servers and your IP address is transmitted. For internal analyses and approval tools, such as weekly overviews of enquiries from my customer relationship management system, I also use Scaleway servers in Paris.

The data stored includes in particular IP addresses, contact requests, metadata and communication data, contract data, contact details, names, access data and other data arising from operation. Server log files are deleted as soon as they are no longer needed for operation and troubleshooting.

Legal basis

The hosting providers are used to perform contracts with my prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of my services by professional providers (Art. 6(1)(f) GDPR). Where consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent covers the storage of cookies or access to information on your device. Consent can be withdrawn at any time.

Data processing agreements

I have concluded data processing agreements under Art. 28 GDPR with HubSpot and Scaleway. These ensure that the providers process personal data only on my instructions and in compliance with the GDPR.

3. Data collection on this website and in VSEasy

Cookies

This website uses so-called “cookies”. Cookies are small text files and do no harm to your device. Cookies are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain on your device until you delete them yourself or your web browser deletes them automatically.

In some cases, cookies from third-party companies may also be stored on your device when you enter this website (third-party cookies). These enable me or you to use certain services of the third-party company, for example measuring the success of ads.

Cookies have various functions. Many cookies are technically necessary because certain functions would not work without them, for example signing in to VSEasy. Other cookies are used to evaluate user behaviour or to measure advertising.

Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (for example signing in to VSEasy) or to optimise the website (for example cookies for audience measurement) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. I have a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of my services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is based exclusively on this consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); consent can be withdrawn at any time.

You can change your choice in the website's cookie banner at any time via the cookie settings. The banner distinguishes the categories analytics, advertising and functionality.

You can set your browser to inform you when cookies are set and to allow cookies only in individual cases, to exclude cookies for certain cases or in general, and to delete cookies automatically when the browser is closed. If cookies are disabled, the functionality of this website may be limited.

The following cookies and comparable storage are used on this website and in VSEasy:

Name	Set by	Purpose	Retention	Basis
__hs_cookie_cat_pref, __hs_opt_out	HubSpot	stores your choice in the website's cookie banner; VSEasy reads this choice as well	set by HubSpot	necessary
__hstc, __hssc, __hssrc, hubspotutk	HubSpot	recognition, audience measurement, linking form submissions	set by HubSpot	consent
ph_<project key>_posthog	PostHog	product and website analytics, recognition across fiegenbaum.solutions and subdomains	up to 12 months	legitimate interest
_gcl_au and other _gcl_*	Google	attributing a conversion to an ad click	up to 90 days	consent
vse_gclid	me (VSEasy)	keeping the click ID for later attribution	90 days	consent
vse_consent_marketing	me (VSEasy)	stores your decision in the consent banner (local storage, not a cookie)	until you delete it	necessary
vsme_session	me (VSEasy)	keeps you signed in	up to 30 days or until you sign out	necessary
vsme_onb	me (VSEasy)	links the onboarding steps before sign-in	up to 6 hours	necessary
local storage (drafts, settings, progress)	me (VSEasy)	temporarily storing entries and view settings on your device	until you delete it	necessary

The lifetimes of the HubSpot cookies are set by HubSpot; the current overview is available at knowledge.hubspot.com.

Details on the individual services can be found in the following sections.

User account and sign-in in VSEasy

To use VSEasy, you create a user account. In doing so, I process your email address, your name, the name of your company and the information you enter while preparing your report. You sign in without a password via a one-time sign-in link that I send to you by email.

The legal basis is Art. 6(1)(b) GDPR, as the processing is necessary to perform the user agreement. I process the data entered in the report on behalf of your company; your company remains the controller for that data. You can have your account deleted at any time; I delete the associated data unless statutory retention obligations prevent this.

Contact

You can reach me by email, by phone or via the contact form. The information from the form, in particular name, email address, company and your message, is stored in my customer relationship management system (CRM) at HubSpot and used there to handle your enquiry and any follow-up questions. HubSpot acts as my processor; the data is not passed on to any other third parties.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual measures, and otherwise my legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). The data remains with me until you request erasure, withdraw your consent or the purpose no longer applies, for example once your enquiry has been dealt with. Statutory retention periods remain unaffected.

Email mailbox

My email mailbox is hosted by mailbox.org, a service of Heinlein Hosting GmbH, based in Berlin. Emails you send me are stored there. The legal basis is Art. 6(1)(b) or (f) GDPR, depending on the reason for your message.

WhatsApp

On the contact page you will find a link you can use to write to me via WhatsApp. A connection to WhatsApp is only established once you click this link. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. WhatsApp processes your phone number, metadata and the content of the communication; a transfer to the USA is possible. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission under Art. 45 GDPR applies. If you do not want this, please use email, phone or the contact form. The legal basis is Art. 6(1)(b) or (f) GDPR.

Appointment booking

To arrange calls, I link to the booking service meetergo of meetergo GmbH, Düsseldorf, for example in emails from VSEasy. If you book an appointment there, meetergo processes your name, your email address and the selected time slot. The legal basis is Art. 6(1)(b) GDPR.

HubSpot

I use HubSpot to run this website and for my online marketing. The provider is HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland, a subsidiary of HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA. I use HubSpot for:

• content management and delivery of the website and blog,
• contact forms and landing pages,
• management of contacts and enquiries (customer relationship management),
• the cookie banner through which you give or refuse consent,
• measurement of page views and traffic sources,
• control of Google Ads conversion tracking (see there).

If you consent to analytics cookies, HubSpot sets cookies (see table) and records which pages you visit, where you come from and how long you stay. If you submit a form, HubSpot links this usage to your contact record. Without consent, HubSpot does not set analytics or advertising cookies; only a cookie recording your refusal is stored.

My HubSpot account is located in HubSpot's European data centre. Access by HubSpot, Inc. in the USA and by its sub-processors can nevertheless not be ruled out. HubSpot, Inc. is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission under Art. 45 GDPR applies; in addition, the standard contractual clauses agreed with HubSpot under Art. 46(2)(c) GDPR apply. A data processing agreement is in place with HubSpot.

The legal basis for analytics and advertising cookies is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings. I base the operation of the website and the cookie banner on Art. 6(1)(f) GDPR, and the processing of form data on Art. 6(1)(b) or (f) GDPR. I store contact data until the purpose no longer applies or you request erasure.

More information on HubSpot's privacy policy

More information from HubSpot on EU data protection regulations

More information on the cookies used by HubSpot can be found here.

PostHog (product analytics)

I use PostHog to analyse how this website and my application VSEasy are used. The provider is PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. I use PostHog's EU cloud with servers located in the European Union. On the website, data is transmitted to PostHog via an address under my domain (v.fiegenbaum.solutions); PostHog operates this forwarding through the network of an infrastructure provider (Cloudflare). In VSEasy, your browser sends the data directly to PostHog's EU cloud (eu.i.posthog.com).

The purpose is to understand how my pages and my application are used, where users get stuck, which features are needed and where technical errors occur. I do not pursue any advertising purposes with this and do not serve ads on this basis.

The data collected includes pages visited, time spent and scroll depth, interactions such as clicks on buttons and form elements, technical information on browser, operating system, approximate region and screen size, error messages that occur and, in VSEasy, certain functional events such as completing an onboarding step. In VSEasy, session recordings are also made; entries in form fields are masked and not transmitted.

For recognition, a cookie with a random ID is set that applies to the entire domain fiegenbaum.solutions including its subdomains, so that a visit to the website and subsequent use of the application can be recognised as one process. In VSEasy, a profile is kept for this ID even if you are not signed in. When you sign in to VSEasy, I link the ID to your user ID and your email address. In addition, my servers send individual events directly to PostHog, for example when a report is saved or when an email to you is sent and delivered; for these I use your user ID or, failing that, your email address. No information is stored on your device for these server-side events.

The legal basis is my legitimate interest in designing my services to meet needs and in troubleshooting them under Art. 6(1)(f) GDPR. Where consent has been requested, processing is based exclusively on that consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG; consent can be withdrawn at any time. You can object to the processing under Art. 21 GDPR at any time, for example by emailing me.

As a US company, PostHog may access data. The transfer is based on the standard contractual clauses under Art. 46(2)(c) GDPR, which form part of the data processing agreement with PostHog. I keep event data and session recordings for as long as they are needed for the purposes described.

Further information can be found in PostHog's privacy policy at posthog.com/privacy

Google Ads conversion tracking

I use Google Ads conversion tracking on this website. VSEasy is also prepared for it; if tracking is active there, the paragraph on VSEasy below applies. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The purpose of the processing is to measure the success of my search ads. This tells me whether, after a click on an ad, an enquiry was made, a trial was requested or a subscription was taken out, as a total per ad, not in relation to individual people.

When you click on an ad, Google appends a click ID to the target address (Google Click Identifier, “GCLID”). This ID and information on time, device and browser are processed.

On the website, HubSpot's cookie banner loads the Google script only after you have consented to the “advertising” category. Before that, no connection to Google is made.

In VSEasy, the Google library is loaded when the page is opened, and your IP address is transmitted to Google. Until you consent, all advertising and analytics signals are set to “denied” in Google's consent mode (Consent Mode v2): no cookies are set and no information is read from your device. In this state, Google may receive cookieless signals. Only after your consent do I store the click ID in the cookie vse_gclid (90 days), and Google sets _gcl_* cookies (up to 90 days). I record your decision in local storage under vse_consent_marketing. If you have already made a choice in the website's banner, VSEasy adopts that choice.

Storing and reading information on your device is based exclusively on your consent under Section 25(1) TDDDG; I base the subsequent processing on Art. 6(1)(a) GDPR. You can use this website and VSEasy in full if you decline.

Google may transfer data to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission under Art. 45 GDPR applies. In addition, standard contractual clauses under Art. 46(2)(c) GDPR apply.

You can withdraw your consent at any time with effect for the future: on the website via the cookie settings, in VSEasy via the “Cookie settings” entry in the footer. When you withdraw, I delete vse_gclid. The lawfulness of processing carried out before withdrawal remains unaffected.

Further information can be found in Google's privacy policy at policies.google.com/privacy and in its information on advertising at policies.google.com/technologies/ads

Anthropic (AI-assisted text and document analysis)

VSEasy generates explanatory texts for your sustainability report and analyses documents you upload. For this, I use language models from Anthropic via its application programming interface. The contracting party for customers in the European Economic Area is Anthropic Ireland, Limited, Ireland (“Anthropic”).

The data transmitted includes the content of your report, such as company name and figures on energy, emissions, waste and workforce, and, for document analysis, the text content of the files you upload, and for files without extractable text also images of the individual pages, for example existing sustainability reports, waste balances or strategy papers. These may contain personal data if you include it in the documents. Data is only transmitted after an owner of your workspace has enabled AI processing in the settings, and only when the relevant function is triggered. This approval can be revoked at any time.

Anthropic does not use content transmitted via the API to train its models; this is laid down bindingly in Anthropic's Commercial Terms. Inputs and outputs are deleted automatically within 30 days and may be reviewed during this period for security and abuse checks. I do not use services with longer retention, such as the Files API.

Use of the service is governed by Anthropic's Data Processing Addendum under Art. 28 GDPR, which automatically forms part of the Commercial Terms; it contains the European Commission's standard contractual clauses. The Irish contracting party concerns the contractual relationship, the applicable law and the place of jurisdiction, not the place of processing: data is stored in the United States, and processing may take place in other countries. This transfer is based on the standard contractual clauses mentioned under Art. 46(2)(c) GDPR. You can view the agreement at anthropic.com/legal/data-processing-addendum, and the current list of sub-processors at trust.anthropic.com/subprocessors

The legal basis is Art. 6(1)(b) GDPR, as this analysis is part of the service commissioned. Further information can be found at anthropic.com/legal/privacy

Scaleway Generative APIs (reading receipts)

If you upload a receipt in VSEasy, for example an electricity or gas bill, that my own parsers do not recognise, I have the text content of the file read automatically by a language model. For this, I use the Generative APIs of Scaleway SAS, 8 rue de la Ville l'Evêque, 75008 Paris, France, the same provider that operates VSEasy. The models run on Scaleway servers in Paris; no transfer to a third country takes place.

The text content of the file is transmitted. It may contain personal data, such as names or addresses on an invoice. I store the result as a suggestion that you review and confirm. Scaleway does not store the content of requests and responses permanently and does not use it for training; only in the event of incidents may requests be retained temporarily for troubleshooting.

The legal basis is Art. 6(1)(b) GDPR, as reading receipts is part of the service you use. Processing takes place under my data processing agreement with Scaleway.

Perplexity (company research)

When you search for your company at the start of VSEasy, I look up publicly available information such as legal form, sector and size. For this, I use a service of Perplexity AI, Inc., 115 Sansome Street Suite 900, San Francisco, CA 94104, USA. Only the company name you enter and, where applicable, the website address are transmitted, no personal data about you.

I use Perplexity's Chat Completions API. Perplexity does not store data sent via this interface and does not use customer data for training models or for any purpose other than handling the respective request. Only billing metrics are recorded, namely token count, model used, time and duration of the request and the ID of the API key used; these contain no content of requests or responses. The data protection agreement is part of the API terms of use.

The legal basis is Art. 6(1)(b) GDPR, as the research is part of the function you trigger. Processing takes place in the United States. Perplexity is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission under Art. 45 GDPR applies; in addition, the standard contractual clauses under Art. 46(2)(c) GDPR apply, which form part of Perplexity's data protection agreement.

Mollie (payment processing)

For paid VSEasy subscriptions, I use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands (“Mollie”).

When you take out a subscription, you are redirected to Mollie's payment page. Mollie processes the payment details entered there, such as bank details or card data, under its own responsibility; I do not receive them. I transmit to Mollie the amount payable, the name of the package booked and an internal ID of your user account so that the payment can be assigned to the correct account. In return, I receive the payment status and the customer and subscription ID assigned by Mollie.

The legal basis is Art. 6(1)(b) GDPR, as the processing is necessary to perform the subscription contract, and Art. 6(1)(c) GDPR with regard to retention obligations under commercial and tax law. Mollie processes the data within the European Union.

Further information can be found in Mollie's privacy policy at mollie.com/en/privacy

Sending emails (Scaleway Transactional Email)

To send sign-in links, system messages, reminders and notices about your report, I use the Transactional Email service of Scaleway SAS, 8 rue de la Ville l'Evêque, 75008 Paris, France. Messages are sent from servers in Paris (region fr-par) via the sender domain updates.fiegenbaum.solutions. Your email address, your name where applicable, the subject and the content of the message are transmitted.

Scaleway reports to me whether a message was delivered, rejected or reported as spam. If an address is permanently rejected or reported as spam, I block it for further messages. I do not record whether a message was opened or a link was clicked; my emails contain no tracking pixels and no redirected links. I record sending and delivery status as an event in my product analytics for troubleshooting (see “PostHog”).

The legal basis for sign-in and contract-related messages is Art. 6(1)(b) GDPR, and for delivery reports and block lists my legitimate interest in reliable delivery (Art. 6(1)(f) GDPR). Messages that are not required to perform the contract, such as reminders and weekly summaries, contain an unsubscribe link. No transfer to a third country takes place. A data processing agreement is in place with Scaleway.

4. General information and mandatory information

Data protection

I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data I collect and what I use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet, for example when communicating by email, may have security gaps. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller responsible for data processing on this website is:

Fiegenbaum & Cie. GmbH
represented by Johannes Fiegenbaum
Gerstäckerstraße 9
20459 Hamburg
Germany

Phone: +49 176 20810953
Email: johannes@fiegenbaum.solutions

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (such as names or email addresses).

Retention period

Unless a more specific retention period has been stated in this privacy policy, your personal data remains with me until the purpose of the processing no longer applies. If you assert a justified request for erasure or withdraw your consent to data processing, your data will be deleted unless I have other legally permissible reasons for storing your personal data, such as retention periods under tax or commercial law; in the latter case, deletion takes place once these reasons cease to apply.

General information on the legal bases of data processing on this website

If you have consented to data processing, I process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. In the case of express consent to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (for example via device fingerprinting), processing is additionally based on Section 25(1) TDDDG. Consent can be withdrawn at any time. If your data is necessary to perform a contract or to carry out pre-contractual measures, I process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, I process your data where it is necessary to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR. Processing may also be based on my legitimate interest under Art. 6(1)(f) GDPR. The individual sections of this privacy policy state the legal basis relevant in each case.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out before withdrawal remains unaffected by the withdrawal.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, I WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS I CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that I process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to me as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser's address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to me cannot be read by third parties.

Information, erasure and correction

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction or erasure of this data. You can contact me at any time about this and any other questions on personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact me at any time about this. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by me, I usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was or is unlawful, you can request the restriction of data processing instead of erasure.
• If I no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you have lodged an objection under Art. 21(1) GDPR, your interests and mine must be weighed against each other. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may, apart from being stored, only be processed with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Last updated: October 2026