Privacy policy

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

General information and legal bases

The processing of personal data on this website is carried out only where a legal basis exists. As a rule these are: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract, e.g. answering an enquiry) and Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website). Where cookies or comparable technologies are used, § 25 TDDDG applies in addition.

Hosting

This website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. Personal data collected on this website is stored on netcup's servers in data centres within the European Union. netcup processes this data solely on our instructions and under a data processing agreement pursuant to Art. 28 GDPR, in order to provide a secure and reliable service. The legal basis is Art. 6(1)(f) GDPR.

Server log files

When you visit this website, the host automatically collects and stores information in server log files that your browser transmits. This is: browser type and version, operating system, referrer URL, host name of the accessing device, time of the server request and the IP address. This data is not merged with other data sources and is used only to ensure a smooth connection, comfortable use, and to evaluate system security and stability. The legal basis is Art. 6(1)(f) GDPR. Log files are stored for a short period and then deleted or anonymised.

SSL/TLS encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries you send to us. You can recognise an encrypted connection by the “https://” in the address bar of your browser. While SSL/TLS encryption is active, the data you submit cannot be read by third parties.

Cookies and local storage

This website does not use tracking, advertising or analytics cookies and does not build user profiles. It stores information on your device only in these two cases, both of which are strictly necessary for a function you request and therefore do not require consent under § 25(2) TDDDG:

— A functional cookie named “rita_lang” is set only when you actively use the language switch (EN/DE), to remember your choice on the next page. It contains only the value “en” or “de” and expires after one year. If you never use the switch, no cookie is set.

— The audio player stores your current playback position in your browser's session storage so that a track continues where you left off as you move between pages. This information stays on your device and is deleted when you close the browser tab.

You can delete cookies and local storage at any time in your browser settings and configure your browser to refuse them.

Web fonts

This website uses the typefaces Fraunces, Work Sans and IBM Plex Mono. These are served from this website's own server. No connection to a third-party server (such as the Google Fonts CDN) is made, and no data about you is transmitted to a font provider when the fonts load.

Enquiry form

If you use the enquiry form, the details you enter (your name, your email address, the reason for your enquiry and your message, plus any further fields you fill in) are processed in order to deal with your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or steps prior to a contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). Providing this data is voluntary, but without it we cannot answer your enquiry.

A submitted enquiry is sent to us by email and is additionally stored in the protected administration area of this website (as an entry of the type “enquiry”) so that it is not lost and can be followed up. The data is not passed on to third parties beyond the email delivery described below.

We keep enquiries until they have been fully dealt with and no further questions arise, and then delete them, unless statutory retention periods require longer storage. You can ask for an enquiry to be deleted at any time (see “Your rights” below).

Contact by email

If you contact us by email, the data you provide (your email address, your message and any details it contains) is processed in order to deal with your request, on the legal bases set out above for the enquiry form. Email delivery is handled on our behalf by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, under a data processing agreement pursuant to Art. 28 GDPR. In this connection data may also be processed by Google LLC in the USA; Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission issued an adequacy decision on 10 July 2023.

Social media links

This website links to profiles on Instagram and YouTube. These are plain links: no content from those platforms is embedded, and no connection to their servers is made until you actively click a link and leave this website. Once you are on those platforms, their operators' privacy policies apply.

Recipients and transfers to third countries

Personal data is disclosed only to the processors acting on our behalf that are named in this policy: netcup GmbH (hosting) and Google Ireland Ltd. (email delivery). We do not sell data and do not pass it to third parties for their own purposes. The only transfer to a country outside the EU/EEA is the possible processing of email by Google LLC in the USA, on the basis of the EU–US Data Privacy Framework (European Commission adequacy decision of 10 July 2023).

Your rights

You have the right, at any time and free of charge, to: obtain information about the personal data we hold about you (Art. 15 GDPR); have inaccurate data corrected (Art. 16 GDPR); have your data erased (Art. 17 GDPR); have processing restricted (Art. 18 GDPR); receive your data in a portable format (Art. 20 GDPR); and object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). Where processing is based on your consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, contact us using the details under “Controller” above.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for the controller is:

No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Changes to this policy

We update this privacy policy when changes to the website or to the law make it necessary, so that it always reflects the current processing. This version is current as of the date shown by the page’s last update.