Privacy Policy

This is an English translation for convenience. The legally binding version is the German original.

Controller

The controller responsible for the data processing on this website is the provider named in the legal notice.

Hosting & Server Logs

The website is operated on the provider's own servers in Germany (Hetzner Online GmbH, Gunzenhausen). When the site is accessed, technically necessary data is processed (IP address, time, requested resource, user agent). Legal basis: Art. 6 para. 1 lit. f GDPR (DSGVO) (legitimate interest in stable operation). Logs are deleted after a maximum of 14 days.

When signing up for the notification distribution list, the email address is stored via the delivery service provider Resend (Resend Inc., 2261 Market Street #4471, San Francisco, CA 94114, USA). Legal basis: Art. 6 para. 1 lit. a DSGVO (consent). The consent can be withdrawn at any time by email to the address named in the legal notice — the entry is then deleted.

Resend processes personal data on the basis of the EU Standard Contractual Clauses and a data processing agreement.

Payment Processing (Stripe & PayPal)

Purchases in the Kontor are processed via the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). When a purchase is started, the payment form is loaded by Stripe directly on the page; in the process, connection data as well as the payment and contact data entered in the form (e. g. email address, card details) are transmitted directly to Stripe. For this, Stripe sets technically necessary cookies for fraud prevention. Legal basis: Art. 6 para. 1 lit. b DSGVO (performance of a contract) as well as lit. f (fraud prevention). Before clicking "Buy", no data is transmitted to Stripe.

A transfer to third countries (in particular the USA) may take place; Stripe bases it on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Details: stripe.com/de/privacy.

During the payment process, PayPal can additionally be selected as a payment method. If PayPal is selected, a redirect to PayPal takes place (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg); the data required for payment is processed there. In this respect, PayPal is an independent controller and processes the data for its own purposes (including payment processing and fraud prevention). Legal basis: Art. 6 para. 1 lit. b DSGVO (performance of a contract) as well as lit. f (fraud prevention). A transfer to third countries may take place; PayPal bases it on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Details: paypal.com/de/legalhub/privacy-full.

Contact Form

Data submitted via the contact form (name, email address, subject, message) is used exclusively to respond to the inquiry and is not disclosed to third parties. Legal basis: Art. 6 para. 1 lit. b and f DSGVO. After the conversation has concluded, the data is deleted, unless statutory retention obligations apply.

Fonts & Cookies

This website uses exclusively locally embedded fonts — on its own server: "EB Garamond", "Cinzel" and "Great Vibes", each under the free SIL Open Font License. No Google Fonts or other external font services are loaded; therefore, no font-related data is transmitted to third parties when the page is accessed. No cookies are set that are not necessary for technical operation. Therefore, there is no cookie banner.

Data Subject Rights

There are rights to access (Art. 15 DSGVO), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Requests can be sent informally to the email address named in the legal notice.

There is also the right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO).

As of: June 2026