Privacy Policy

Unsubscribe / Withdrawal: You can unsubscribe at any time by clicking the unsubscribe link at the bottom of each newsletter. Alternatively, you can email us directly using the contact details below. After unsubscribing, your data will be deleted from our and rapidmail’s systems unless retention is required by law. A brief listing in a suppression file may be kept to prevent accidental resending.

Processing & Data Protection: We have a data processing agreement with rapidmail under Art. 28 GDPR. This obliges rapidmail to process newsletter recipient data only in accordance with our instructions and in compliance with EU data protection regulations. rapidmail does not transfer data to third countries. The company is based in Germany and subject to strict GDPR rules. More details at rapidmail.de.

6. Contact Form and Inquiries (HubSpot CRM)

If you contact us via the contact form or other forms (e.g., appointment scheduling), your details will be processed to handle the request. We use HubSpot, a software provider from the USA (HubSpot, Inc., Cambridge, MA, USA) with a branch in Ireland (HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1).

Form Data Processing: We collect the mandatory fields marked in the contact form (typically: first name, last name, email address, company, and your message). These data are stored on HubSpot’s servers in our account and used to respond to your inquiry and perform requested actions (e.g., send documents, arrange a consultation). By submitting the form, you consent to the processing of your personal data. Depending on the inquiry, processing may be based on contract initiation (Art. 6 para. 1 lit. b GDPR) or on our legitimate interest in efficient communication (Art. 6 para. 1 lit. f GDPR). In Switzerland, this is based on Art. 31 para. 2 lit. a revDSG.

Meetings/Bookings: If you book appointments via HubSpot, the above also applies. The entered data (e.g., name, email, desired date) will be used to schedule the meeting. You may receive automated emails (confirmation/reminders). These processes are also based on Art. 6 para. 1 lit. b GDPR.

HubSpot CRM: We also use HubSpot as a CRM system for managing contacts. Form data and other communications (e.g., emails) may be saved to maintain a history of interactions. This is based on our legitimate interest in effective customer management (Art. 6 para. 1 lit. f GDPR). Without your consent, contact data is not used for unsolicited marketing.

Website Tracking via HubSpot: HubSpot offers analytics that tracks visitor behavior — but only with your explicit consent via the cookie banner (Art. 6 para. 1 lit. a GDPR). When consent is given, HubSpot can collect page visits, session times, device/browser info, and geographic data. If a prior interaction exists (e.g., newsletter signup), HubSpot can associate visits with known contacts and trigger automated responses. Without your consent, no personal tracking occurs, and no cookies are set. Data is typically aggregated or anonymized. IP addresses are not permanently stored unless linked to a user via interaction.

Data Transfer & Security: HubSpot processes data primarily in the EU/EEA. However, some data may be transferred to the USA. We have a data processing agreement with HubSpot including EU Standard Contractual Clauses. HubSpot Inc. is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework. See HubSpot's privacy policy and data transfer details at hubspot.de/data-privacy.

Retention: Contact inquiries are retained only as long as necessary or legally required. Business correspondence may be stored for 6–10 years per tax and commercial law. Pure interest-based inquiries are deleted once no further contact is expected. You may request deletion at any time (see rights below).

7. Web Analytics and Marketing

Google Analytics 4: Our website uses Google Analytics 4 (GA4) from Google Ireland Ltd., provided you consent via our cookie banner. GA4 uses cookies or similar technologies to analyze how you use the website. It collects data such as visited pages, session duration, browser and device info, general location (city/region), and referral source. Importantly: GA4 does not store your IP address; it is anonymized immediately. No precise location or device IDs are recorded without consent. Data processing is based solely on your consent (Art. 6 para. 1 lit. a GDPR). Without it, GA4 remains inactive.

Processor Agreement: Google Ireland Ltd. acts as our processor. We have a data processing agreement under Art. 28 GDPR. Google is also certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework. Additionally, we rely on EU Standard Contractual Clauses. Data is retained for 14 months (maximum) before deletion. Aggregated statistics remain available.

Opt-Out: You can disable tracking with the browser add-on (tools.google.com/dlpage/gaoptout). For more information, see Google's privacy pages.

Google Tag Manager: We use GTM to manage analytics and marketing tags. GTM itself does not use cookies or process personal data. However, when loading, your IP is transmitted to Google for technical reasons. GTM operates on a cookieless domain. Tags are only loaded after your consent. Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).

Google Ads (Conversion Tracking & Remarketing): We use Google Ads for advertising and to analyze campaign effectiveness.

Conversion Tracking: If you reach our site via a Google ad, a cookie (“_gcl_aw”) is set to determine if a desired action occurred (e.g., form submission). Each advertiser gets a unique cookie. Data is anonymized. The cookie expires after approx. 30 days.

Remarketing: We may use remarketing tags to display targeted ads to past visitors. Google collects pseudonymized usage data (e.g., viewed subpages) to display ads across the web. We do not receive any personally identifiable data.

Legal basis: Consent, Art. 6 para. 1 lit. a GDPR. Google Ads tags are only active with your consent.

Data Transfer: Google may transfer data to the USA. Google LLC is certified under the DPF. We also use EU Standard Contractual Clauses.

Opt-Out: You can revoke consent at any time or disable ads via Google Ads Preferences, Network Advertising Initiative, or YourOnlineChoices.

8. Data Subject Rights

Access, Correction, Deletion, Restriction: You have the right to access your personal data (Art. 15 GDPR; Art. 25 revDSG), correct inaccurate data (Art. 16 GDPR; Art. 32 revDSG), and, under certain conditions, request deletion (Art. 17 GDPR). In Switzerland, deletion is carried out on request, provided there’s no legal obligation to retain data. You may also restrict processing (Art. 18 GDPR), e.g., if accuracy is contested or processing is unlawful.

Right to Object: If data is processed based on legitimate interest (Art. 6 para. 1 lit. f GDPR), you may object at any time for personal reasons (Art. 21 GDPR). In case of direct marketing, objection always applies (Art. 21 para. 2 GDPR).

Withdrawal of Consent: You may revoke your consent at any time with future effect. This includes cookie/tracking and newsletter consent. Processing remains lawful up to the time of withdrawal.

Data Portability: You have the right to receive data provided to us in a machine-readable format (Art. 20 GDPR; Art. 28 revDSG).

Complaint: If you believe your rights are violated, you may lodge a complaint with the relevant data protection authority (e.g., Hamburg, Austria DSB, or Switzerland’s FDPIC). We encourage you to contact us first to resolve concerns directly.

9. Further Information

Data Security: We protect personal data through appropriate technical and organizational measures. Our site uses SSL/TLS encryption (see “https://” and lock symbol). This prevents data from being read by third parties. Note: email communication may involve security gaps – for highly confidential matters, please consider postal mail.

External Links: Our website may link to other sites (e.g., partners). We are not responsible for their content or privacy practices. Please review their respective privacy policies.

Changes to This Privacy Policy: We may update this policy as needed, e.g., due to changes in our services or legal updates. The current version is available on this site. Significant changes will be clearly indicated. (As of August 2025)