Privacy Policy

The German version is authoritative.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. Your Rights

You have the right at any time to obtain free information about your stored personal data, as well as the right to rectification, restriction of processing, data portability, and erasure of this data. Insofar as processing is based on your consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. For questions or to exercise your rights, you may contact the address stated above at any time.

3. Hosting and Server Log Files

This website is hosted by an external service provider. The hosting provider automatically collects data in so-called server log files that your browser transmits: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and the IP address. This data is used for the technical provision, security, and stability of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). A data processing agreement (DPA) is in place with the hosting provider.

Hosting provider: This website is hosted via MehrHost (Mehrpouyan Web Technology Development Co.) on infrastructure operated by Hetzner Online GmbH in Germany; the server is located in Falkenstein, Saxony (DE). The data is therefore processed exclusively on servers within the European Union, so no transfer to a third country takes place for hosting.

4. Contact Form (Web3Forms)

When you use the contact form, the data you enter (name, email address, and your message) is processed for the purpose of handling your enquiry. Delivery takes place via the Web3Forms service, which acts as a technical service provider and forwards the data to my mailbox. The legal basis is Art. 6 (1) (a) and (b) GDPR. The data is deleted as soon as it is no longer required for processing.

Web3Forms privacy policy: web3forms.com/privacy-policy

5. Spam Protection (hCaptcha)

To protect the contact form against automated submissions (spam), hCaptcha is used, a service provided by Intuition Machines, Inc. (USA). For this purpose, hCaptcha analyses various information (including IP address, dwell time, mouse movements, and device information). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse). This may involve a transfer of data to the USA.

hCaptcha privacy policy: hcaptcha.com/privacy

6. Map Service (OpenStreetMap / Leaflet)

Interactive maps are displayed using the Leaflet library; the map material (tiles) is loaded from servers of the OpenStreetMap Foundation. When the map is loaded, your IP address is transmitted to these servers. The Leaflet library itself is loaded via a content delivery network (unpkg), which also transmits your IP address. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an appealing presentation).

OpenStreetMap privacy policy: wiki.osmfoundation.org/wiki/Privacy_Policy

7. Embedded YouTube Videos

Videos from the YouTube platform (Google Ireland Limited) are embedded on this website. When you play a video, a connection to YouTube's servers is established; in doing so, data – including your IP address – is transmitted to Google and cookies may be set. This may include a transfer of data to the USA. The videos are only loaded after your explicit consent; the legal basis is Art. 6 (1) (a) GDPR.

Google/YouTube privacy policy: policies.google.com/privacy

8. Cookies

Some of the services mentioned above (in particular YouTube and hCaptcha) may store cookies or comparable technologies on your device. Cookies that are not technically necessary are only set once you actively load the relevant content or interact with it. You can configure your browser to inform you about the setting of cookies, to allow them only on a case-by-case basis, or to refuse them in general.

9. Encryption (SSL/TLS)

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar begins with “https://”.

10. Changes to this Privacy Policy

I reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to the services used. The new privacy policy will then apply to your next visit.