Data protection
Data collection, use and disclosure
What data is collected?
The following personal data is typically collected via the contact form (depending on the fields in the form):
name
E-mail address
Content of your message
Optional additional information that you provide voluntarily (e.g. phone number)
The data you enter will not be permanently stored on the website when you submit it, but will only be forwarded to me via email in order to process your request.
Purpose of data processing
The data transmitted via the contact form is processed for the purpose of handling your request, contacting you, and, if applicable, initiating or executing a contractual relationship.
Legal basis for processing
The legal basis for processing the data transmitted via the contact form is:
Article 6 paragraph 1 letter b GDPR, insofar as your request is related to the initiation or fulfillment of a contract (e.g. request for a quotation).
Article 6 paragraph 1 letter f GDPR, insofar as there is a legitimate interest in processing your general request (e.g. general contact, questions about services).
Separate consent is generally not required in these cases, provided that only the data necessary for processing your request is requested.
Data transfer
The data collected via the contact form will generally not be passed on to third parties by me.
Excluded from this is the technically necessary processing by service providers whom I use to provide email communication and the website (e.g. hosting providers, email providers); these may act as data processors and are contractually obligated to process the data only according to my instructions and to take appropriate technical and organizational measures to protect the data.
Your data will only be transferred to a third country (outside the EU/EEA) if special legal requirements are met or you have expressly consented.
Storage duration
The data you submit via the contact form will be stored by me for as long as is necessary to process your request.
They will then be deleted unless statutory retention periods (e.g. commercial or tax law retention obligations for contract documents) prevent this; in this case, the deletion will take place after the expiry of the corresponding periods.
Control over data
You have the following rights regarding your personal data, provided the legal requirements are met:
Right to information pursuant to Art. 15 GDPR (information about which data I process about you).
Right to rectification pursuant to Art. 16 GDPR (correction of inaccurate or incomplete data).
Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR.
Right to restriction of processing pursuant to Article 18 GDPR.
Right to data portability pursuant to Article 20 GDPR.
Right to object to processing pursuant to Art. 21 GDPR, in particular in the case of processing based on Art. 6 para. 1 lit. f GDPR.
To exercise your rights, you can contact me at any time using the contact details provided in the legal notice or above.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
Data security
I take appropriate technical and organizational measures to protect your personal data from loss, destruction, access, alteration or dissemination by unauthorized persons.
The data you enter in the contact form is transmitted – if technically possible – via an encrypted connection (e.g. TLS/SSL); you can typically recognize this by the address bar “https://” and a lock symbol in your browser.
Nevertheless, I would like to point out that data transmission on the Internet can have security vulnerabilities and that complete protection of data from access by third parties is not possible.