2. Data Collection on Our Website Server Log Files When you visit our website, information is automatically transmitted to the server of our website by the browser you are using. This information is temporarily stored in so-called server log files. The following information is collected without your intervention and stored until it is automatically deleted: IP address of the requesting device Date and time of access Name and URL of the retrieved file Website from which the access originated (referrer URL) Browser used and, if applicable, the operating system of your device Name of the access provider The processing of this data is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring a smooth connection to the website, a user-friendly experience, the evaluation of system security and stability, as well as for other administrative purposes. This data will not be combined with other data sources. Cookies Our website uses cookies. Cookies are small text files that are stored on your device by your browser. They help make our website more user-friendly, efficient, and secure. We differentiate between: Necessary cookies (e.g., for operating the site, consent management) Statistics and analytics cookies (e.g., Google Analytics) Marketing cookies (e.g., Facebook Pixel, Google Ads Remarketing) The storage and use of non-essential cookies takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time via our cookie consent tool [Complianz].

3. Contact Contact Form If you send us inquiries via the contact form provided on our website, the data you enter (e.g., name, telephone number, email address, message) will be stored by us for the purpose of processing your request and in case of follow-up questions. This data will not be passed on without your consent. The processing of the data entered in the contact form is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) as well as on Art. 6(1)(f) GDPR (legitimate interest in the effective handling of inquiries). Email and Telephone If you contact us by email or telephone, your details (e.g., name, telephone number, email address, inquiry) will also be stored by us for the purpose of processing your request. Again, this data will not be shared with third parties without your consent. The processing of this data is carried out depending on the nature of the inquiry either on the basis of Art. 6(1)(b) GDPR or on the basis of our legitimate interest in accordance with Art. 6(1)(f) GDPR.

4. Analytics and Tracking Tools Google Analytics Our website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of your use of our website. The information generated by the cookie about your use of this website (including your IP address) is usually transmitted to a Google server in the USA and stored there. We have activated IP anonymization on this website, so that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The storage of Google Analytics cookies and the use of this analysis tool are carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time via our cookie consent tool [Complianz]. Further information on how Google handles user data can be found in Google’s privacy policy: https://policies.google.com/privacy . Google Ads Conversion Tracking & Remarketing We also use Google Ads Conversion Tracking and Google Ads Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With the help of Google Ads Conversion Tracking, we can see which actions users take on our website after clicking on or viewing an ad. Google Ads Remarketing allows us to re-engage visitors to our website on other websites within the Google advertising network. The processing of your data in this context is also based solely on your consent pursuant to Art. 6(1)(a) GDPR, which you may revoke at any time. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy . Facebook (Meta) Pixel To measure conversions and optimize our advertising campaigns, we use the Meta Pixel. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Meta Pixel enables us to track the behavior of website visitors after they have been redirected to our website by clicking on a Facebook or Instagram advertisement. This allows us to evaluate the effectiveness of ads for statistical and market research purposes and to optimize future advertising campaigns. This data is collected solely on the basis of your consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time via our consent tool. Further information can be found in Meta’s privacy policy: https://www.facebook.com/about/privacy .

5. Plugins and Third-Party Tools Google Fonts Our website uses Google Fonts for the uniform display of fonts, provided by Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page, your browser loads the required fonts directly from Google’s servers. In doing so, your IP address is transmitted to Google, and data may be transferred to servers in the USA. The use of Google Fonts is based on your consent pursuant to Art. 6(1)(a) GDPR. For more information, please see: https://policies.google.com/privacy . YouTube Our website integrates videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you start a YouTube video on our website, a connection to YouTube’s servers is established. This informs the YouTube server which of our pages you have visited. In addition, YouTube may store various cookies on your device or use similar technologies to collect information about your user behavior. The use of YouTube is based on your consent pursuant to Art. 6(1)(a) GDPR. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy . Instagram Feed Our website includes functions of Instagram, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you visit our pages, the plugin establishes a direct connection between your browser and the Instagram servers. This allows Instagram to receive information that you have visited our site with your IP address. If you are logged into your Instagram account, Instagram can associate your visit to our website with your user account. The use of Instagram functions is based solely on your consent pursuant to Art. 6(1)(a) GDPR. For more information: https://help.instagram.com/519522125107875 .

Google Maps Our website uses the Google Maps map service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. We have no influence on this data transmission. The use of Google Maps is based solely on your consent (Art. 6(1)(a) GDPR). For more information, please see Google’s privacy policy: https://policies.google.com/privacy .

6. Data Sharing with Third Parties and Data Processing Hosting with IONOS Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS automatically collects and stores information in so-called server log files, which your browser automatically transmits (see Section 2 of this privacy policy). The use of IONOS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the secure, fast, and efficient provision of our website by a professional hosting provider. Data Processing Agreement To ensure data protection-compliant processing, we have concluded a data processing agreement (Art. 28 GDPR) with IONOS. This ensures that IONOS processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Disclosure to Other Third Parties Your personal data will only be transferred to other recipients if: you have given your explicit consent (Art. 6(1)(a) GDPR), the transfer is necessary for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), there is a legal obligation to do so (Art. 6(1)(c) GDPR), or the transfer is based on our legitimate interest (Art. 6(1)(f) GDPR).

7. Rights of Data Subjects As a data subject, you have the following rights regarding your personal data under the General Data Protection Regulation (GDPR): Right of access (Art. 15 GDPR) You have the right to obtain free information at any time about the origin, recipients, and purpose of your stored personal data. Right to rectification (Art. 16 GDPR) You have the right to request the immediate correction of inaccurate data or the completion of your data stored by us. Right to erasure (“right to be forgotten”) (Art. 17 GDPR) You have the right to request the deletion of your personal data, provided that no other statutory retention obligations conflict with this. Right to restriction of processing (Art. 18 GDPR) You may request the restriction of the processing of your personal data under certain conditions. Right to data portability (Art. 20 GDPR) You have the right to receive the data concerning you, which we process on the basis of your consent or in performance of a contract, in a commonly used, machine-readable format and to have those data transmitted to another controller. Right to object (Art. 21 GDPR) You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. Right to withdraw consent (Art. 7(3) GDPR) You have the right to withdraw any consent you have previously given for data processing at any time with effect for the future. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

8. Storage Period and Deletion Deadlines We store personal data only for as long as is necessary to fulfill the purposes stated in this privacy policy or as required by statutory retention periods. Specifically, this means: Server log files are generally stored for a maximum of 7 days and then automatically deleted. Contact details from inquiries (via form, email, or telephone) are retained for as long as necessary to process your request. They are deleted afterwards, provided no statutory retention obligations exist. Data from contractual relationships (e.g., invoicing data) are stored for the duration of the statutory retention periods (6 years under the German Commercial Code (HGB), 10 years under the German Fiscal Code (AO)). Cookies and tracking data are stored for as long as necessary for the respective purpose or until you revoke your consent. Once the applicable retention period has expired, the corresponding data will be routinely deleted in accordance with the statutory provisions.

9. Data Security SSL/TLS Encryption For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the website operator, our website uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the address bar of your browser from “http://” to “https://” and by the lock icon in your browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties. Technical and Organizational Measures In addition, we implement appropriate technical and organizational measures (TOMs) to protect your data as effectively as possible against loss, misuse, unauthorized access, or disclosure. These measures are regularly reviewed and adapted to the state of the art.

10. Changes to this Privacy Policy We reserve the right to update this privacy policy from time to time to ensure it always complies with current legal requirements or to reflect changes in our services (e.g., when introducing new tools or services). The version of the privacy policy published at the time of your visit shall apply. The date of the last update can be found at the end of this page.