1. Controller & Contact

As a sole proprietor and AI innovator, we are responsible for processing your personal data on this website.

2. General Information on Data Processing

2.1 Scope of Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing takes place with your consent or where permitted by law.

2.2 Legal Bases

Where we obtain consent: Art. 6 (1) (a) GDPR.

For the performance of a contract or pre-contractual measures: Art. 6 (1) (b) GDPR.

For compliance with a legal obligation: Art. 6 (1) (c) GDPR.

For the purposes of legitimate interests: Art. 6 (1) (f) GDPR — including the optimisation and efficient operation of our website.

Where information is stored on or read from your terminal equipment, Section 25 TDDDG (German Telecommunications Digital Services Data Protection Act) takes precedence.

2.3 Erasure & Storage Period

Your personal data will be erased or blocked as soon as the purpose for storage no longer applies. Storage may continue where required by European or national legislation. Data will also be erased when a statutory retention period expires, unless further storage is necessary for the conclusion or performance of a contract.

3. Your Rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR): Obtain information about the personal data we process about you.
• Right to rectification (Art. 16 GDPR): Have inaccurate or incomplete data corrected without undue delay.
• Right to erasure (Art. 17 GDPR): Request deletion of your personal data, unless statutory retention obligations apply.
• Right to restriction (Art. 18 GDPR): Request restriction of processing.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR): See the separate notice under section 4.
• Right to withdraw consent (Art. 7 (3) GDPR): Withdraw consent at any time with effect for the future.
• Right to lodge a complaint (Art. 77 GDPR): Lodge a complaint with a supervisory authority.

4. Right to Object

5. Website Provision & Log Files

5.1 Hosting by IONOS

Our website is hosted by IONOS SE:

5.2 Automatically Collected Data (Server Log Files)

Each time our website is accessed, our hosting provider automatically collects the following information:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Amount of data transferred
• HTTP response code
• Browser type and version
• Operating system
• Referrer URL (previously visited page)
• Internet service provider

Purpose: Technical operation and security of the website, error analysis.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in functionality and security).
Storage period: Log files are deleted no later than 14 days after collection.
Processing agreement: A data processing agreement under Art. 28 GDPR is in place with IONOS.
Further information: IONOS Privacy Policy

6. Cookies & Local Storage

6.1 What Are Cookies?

Small text files that store information about your use of the website on your device. The same applies to comparable technologies such as local storage.

6.2 Legal Framework

The storage of information on your terminal equipment and access to such information is primarily governed by Section 25 TDDDG. Strictly necessary operations are exempt from consent under Section 25 (2) no. 2 TDDDG; all others require your consent under Section 25 (1) TDDDG. The subsequent processing of the data collected is governed by the GDPR.

6.3 Categories Used

6.4 Managing Your Preferences

You can adjust your settings at any time via our cookie banner or delete cookies in your browser. A list of the specific cookies used, including provider, purpose and storage period, is available in the cookie banner settings. Note: Disabling cookies may limit website functionality.

7. Google Analytics 4

7.1 Use

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

7.2 Scope

The following information is collected: page views, navigation paths, dwell time, bounce rates, device type and screen resolution, browser type and version, approximate geographical origin (country, city), referrer URL and a truncated IP address.

7.3 Handling of IP Addresses

In Google Analytics 4, IP addresses are truncated during collection by design and are not stored persistently. Separate activation by us is neither required nor possible.

7.4 Data Transfers to the USA

Transfers are based on the EU Standard Contractual Clauses under Art. 46 GDPR, supplemented by the EU-US Data Privacy Framework where applicable, and on your consent under Art. 49 (1) (a) GDPR.

7.5 Purposes

Analysis of user behaviour, optimisation of website structure and content, improvement of the user experience, creation of visitor statistics.

7.6 Legal Basis

Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR — consent given via the cookie banner. Google Analytics is not loaded without your consent.

7.7 Storage Period

Data collected at user and event level is automatically deleted after 14 months.

7.8 Withdrawal & Objection

Via the cookie banner (disable analytics), the opt-out browser add-on, or by deleting cookies in your browser. Further information: Google Privacy Policy · Analytics & Privacy.

8. Fonts & Libraries

8.1 Google Fonts (locally hosted)

We use Google Web Fonts for consistent typography. Important: the fonts are stored locally on our server. No connection to Google servers is established when you visit our website, and no personal data is transmitted to Google.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in consistent, professional presentation).

8.2 jQuery via CDN

To optimise loading times, we include the JavaScript library jQuery via a content delivery network. When the files are loaded, your IP address is transmitted to the CDN provider's servers; this is technically necessary in order to deliver the files.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in fast loading times and performance).

9. Social Media Links

9.1 Type of Integration

We integrate external platforms exclusively via simple links. No plugins, iframes or tracking pixels from these providers are embedded.

9.2 Linked Platforms

• Instagram
• LinkedIn
• Xing
• X (formerly Twitter)
• YouTube
• Vimeo

9.3 Data Transfer

Data is transmitted to the respective platform only once you actively click one of these links. Before that, no data is transferred.

9.4 Responsibility

Once you access the external site, the privacy policy of the respective provider applies exclusively. We have no influence over their processing.

9.5 Legal Basis

Art. 6 (1) (f) GDPR (legitimate interest in presenting our work and in networking).

10. Video Embeds

10.1 YouTube (Enhanced Privacy Mode)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are embedded via youtube-nocookie.com. In this mode YouTube sets cookies only when a video is played; however, a connection to Google servers may already be established when the player loads, transmitting your IP address.

Legal basis: Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR (consent). Privacy: policies.google.com/privacy

10.2 Vimeo

Provider: Vimeo, Inc., 555 West 18th Street, New York, NY 10011, USA.

Data processed: IP address, date and time of access, referrer URL, browser and device information, interactions with the player.

Legal basis: Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR (consent). Transfers to the USA are based on the EU Standard Contractual Clauses under Art. 46 GDPR and on your consent under Art. 49 (1) (a) GDPR.

Privacy: vimeo.com/privacy

11. Contact Form & Email

11.1 Contacting Us

We process: name, email address, subject and message content, time of the request, and optionally phone number, company and further voluntary details.

11.2 Purpose

Handling your request, communication, project discussions and quotations.

11.3 Legal Basis

Art. 6 (1) (b) GDPR (pre-contractual measures or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding).

11.4 Storage Period

We delete your data once the request has been resolved, unless statutory retention obligations apply. If a contract is concluded, commercial and tax retention periods of up to 10 years apply.

11.5 Email Security

Emails sent over the internet are generally unencrypted. For confidential information we recommend encrypted channels.

11.6 Spam Protection (hCaptcha)

To protect against automated abuse we use hCaptcha, provided by Intuition Machines, Inc., Los Angeles, CA, USA. IP address, time of access, browser and device information, mouse movements and interaction patterns are analysed in order to distinguish humans from bots.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in protection against spam and abuse). Insofar as information is stored on or read from your terminal equipment, this is strictly necessary under Section 25 (2) no. 2 TDDDG in order to provide the service you have expressly requested — submitting the form.

Privacy: hcaptcha.com/privacy

12. Chat and AI Assistants

No chat widget and no AI-based assistant are currently in use on this website. No personal data is processed in this context.

Should this change, this Privacy Policy will be updated in advance. Users will then be informed at the start of each conversation that they are interacting with an AI system (Art. 50 (1) EU AI Act).

13. AI Tools & Generative Technologies

13.1 Tools Used

13.2 Data Processing

Important: these tools are used internally for content creation. Visitors to this website do not interact with them, and no visitor data is transmitted to these providers.

• Client data (e.g. briefings) may be used on a project basis to create content
• Processing takes place solely on the basis of an assignment and with the client's consent
• Sensitive client data is not sent to AI services without explicit permission
• Tools are selected per project according to privacy and security criteria

13.3 Transfers to Third Countries

Many providers are based in the USA. Transfers are based on the EU Standard Contractual Clauses under Art. 46 GDPR, supplemented by the EU-US Data Privacy Framework where applicable, and on consent under Art. 49 (1) (a) GDPR.

13.4 Data Protection in Projects

For each project we assess individually which tools are appropriate, which protective measures are required, whether a data processing agreement is necessary, and whether a data protection impact assessment must be carried out.

13.5 Transparency Towards Clients

We inform our clients which tools are used, which data is processed, where processing takes place, and which protective measures are in place.

13.6 Legal Basis

Art. 6 (1) (b) GDPR (performance of a contract) and/or Art. 6 (1) (a) GDPR (client consent).

14. AI Transparency under Art. 50 EU AI Act

This website displays images, videos and animations that have been created or edited in whole or in part using generative artificial intelligence.

Where such content closely resembles real persons, places, objects or events and could therefore be mistaken for authentic, it is labelled directly on the content as “AI-generated” — in accordance with the disclosure obligation under Art. 50 (4) of Regulation (EU) 2024/1689 (EU AI Act).

Conventional photographic work involving AI-assisted retouching does not constitute AI-generated content within this meaning and is therefore not labelled separately. The same applies to evidently artificial graphics, illustrations and abstract visuals.

Text published on this website is subject to editorial review and responsibility.

15. Automated Decision-Making & Profiling

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

The AI tools we use serve exclusively to create and edit visual content. They do not make decisions that produce legal effects concerning you or similarly significantly affect you.

16. Applications & Collaboration

16.1 Applicant Data

For applications and collaboration enquiries we process: name and contact details, CV and cover letter, certificates and qualifications, portfolio materials, and references (with consent).

16.2 Purpose

Conducting the application or selection process and assessing suitability for open roles or collaboration.

16.3 Legal Basis

Art. 6 (1) (b) GDPR (performance of pre-contractual measures).

16.4 Storage Period

Up to 6 months after completion of the process. Longer storage — for example in a talent pool — takes place only with your explicit consent.

17. Processors & Third-Party Providers

17.1 Overview

17.2 Data Processing Agreements

Agreements under Art. 28 GDPR ensuring an adequate level of protection are in place with service providers that process personal data on our behalf.

18. Data Security

18.1 Technical & Organisational Measures

• SSL/TLS encryption: All data transfers via HTTPS
• Firewalls: Protection against unauthorised access
• Regular backups: Safeguarding of data
• Access restrictions: Access only by authorised persons
• Up-to-date software: Regular updates of system and components

18.2 Data Breaches

In the event of a personal data breach, we will notify the competent supervisory authority without undue delay — at the latest within 72 hours — and, where required, the individuals affected.

19. Protection of Minors

Our services are aimed at adults. We do not knowingly process data of children and young people under the age of 16 without the consent of a parent or guardian (Art. 8 GDPR). Should we become aware of such processing, we will delete the data without undue delay.

20. Links to Other Websites

Our website contains links to external third-party sites. We are not responsible for their content or privacy practices. Please review the privacy policies of those sites.

21. Changes to This Privacy Policy

We reserve the right to amend this policy where the legal situation, our services or our processing activities change. The current version is always available on this website.

Last update: August 2026

22. Preparation of This Privacy Policy

23. Notice Regarding Legal Complaints

24. Contact for Privacy Questions