Privacy policy

Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR; Datenschutz-Grundverordnung, DSGVO) is:

Phone

+49 3379 9976627

Email

info@gewerberaum-schoenefeld.de (subject “Data protection”)

Gewerberaum Schönefeld is a service of WestX GmbH. This privacy policy applies to the website www.gewerberaum-schoenefeld.de and to enquiries you send us via the form, by email, via WhatsApp or by phone.

We have not appointed a data protection officer because we are not legally required to do so. Please send any questions about data protection to our management at the contact details above.

Consent notice and cookies

On your first visit, a notice asks whether you allow Google Ads conversion tracking (see Google Ads conversion tracking). The website works fully without your consent.

• Without consent: until you have agreed – and if you decline – the website sets no cookies and loads no content from Google or any other provider. No “cookieless” signals are sent to Google either.
• No embedded third-party content: fonts, graphics, stylesheets and scripts are served from our own web server. Maps, videos, social media plug-ins and review widgets are not embedded. The WhatsApp link is a simple link as well: it sets no cookies, loads nothing from WhatsApp and therefore does not require your consent. We do not use analytics or statistics services such as Google Analytics.
• We store your decision on your device: whether you allowed or declined, when, and for which version of the notice is kept in your browser’s local storage (localStorage) – not as a cookie and not on our server. This is the only way we can respect your decision on further pages. After 12 months, or if the notice changes significantly, we ask again. If you have consented, your browser also remembers the references of enquiries already reported (at most 20) so that the same enquiry is not counted twice.

This storage is strictly necessary to provide the service you have expressly requested with your decision (§ 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG); no consent is required for it. These entries do not leave your device. The other scripts on the website only serve to operate it, for example the menu on small screens and the enquiry form.

Changing or withdrawing your decision: at any time with effect for the future via the “Cookie settings” link at the bottom of every page . If you withdraw your consent, the website no longer loads the Google script, and we delete the Google Ads cookies of our domain (_gcl_…) in your browser. You can also clear local storage and cookies in your browser settings; we will then ask again on your next visit.

Google Ads conversion tracking

We advertise with Google ads. To measure whether these ads lead to enquiries, we use – only with your consent – Google Ads conversion tracking including the “conversion linker”. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

How it works: after you consent, your browser loads Google’s “gtag.js” script from Google’s servers. If you came to the website via one of our Google ads, the address contains a click identifier (gclid); the script stores it in the “_gcl_aw” cookie on our domain. It also sets further cookies whose names begin with “_gcl_”, in particular “_gcl_au” (depending on the visit, also e.g. “_gcl_gs” or “_gcl_gb”). If you send an enquiry, the thank-you page reports this to Google once – together with the reference of your enquiry as a transaction ID, so that an enquiry is not counted twice. The reference consists of the date, time and a random number; we do not transmit details from the form such as your name, email address or phone number to Google (no “enhanced conversions”). Google only provides us with aggregated reports, for example how many enquiries came from ads, and no information that would allow us to identify you personally.

Data processed: IP address, date and time, the address of the page visited (on the thank-you page without appended parameters) and of the previous page, browser and device information, the click identifier (gclid), the identifiers in the “_gcl_” cookies (in particular “_gcl_aw” and “_gcl_au”) and, for an enquiry, the conversion with the enquiry reference.

No personalised advertising: we do not use remarketing, and with every request we tell Google that the data may not be used for personalised advertising.

Purpose and legal basis: we want to know whether our ads lead to enquiries in order to manage our advertising and assess its costs. The legal basis is your consent (Art. 6(1)(a) GDPR); storing and accessing information on your device is also based on your consent (§ 25(1) TDDDG). You can withdraw your consent at any time with effect for the future (see Consent notice and cookies); this does not affect the lawfulness of processing carried out before the withdrawal.

Storage period: according to Google, the “_gcl_” cookies (in particular “_gcl_aw” and “_gcl_au”) are stored for 90 days unless you delete them earlier or withdraw your consent. How long Google stores the data it receives is determined by Google (see Google’s privacy policy).

Responsibility: Google processes the data as an independent controller under the “Google Ads Controller-Controller Data Protection Terms”, not as our processor. For the collection of data on our website and its transmission to Google, we may be jointly responsible with Google under the case law of the Court of Justice of the European Union (judgment of 29 July 2019, C-40/17 “Fashion ID”); Google alone is responsible for the subsequent processing. You can exercise your rights with us and with Google.

Transfers to the USA: Google may also process the data on servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; transfers to certified companies are covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR; for the status of the proceedings, see Email mailbox and document storage with Google Workspace). In addition, Google’s data protection terms for its advertising products provide for the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Further information: Google’s privacy policy (external link), How Google uses information from sites that use its services (external link), Cookies in Google’s advertising products (external link) and the Google Ads Controller-Controller Data Protection Terms (external link).

Hosting and server log files

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (“ALL-INKL”). The servers are located in Germany. We have concluded a data processing agreement with ALL-INKL in accordance with Art. 28 GDPR; ALL-INKL processes the data only on our instructions.

Whenever a page or file is requested, your browser necessarily transmits data to our web server. The server stores this data in log files (server log files):

• IP address of the requesting device,
• date and time of the request,
• page or file requested and amount of data transferred,
• status code of the response (for example “page found” or “not found”),
• the page visited before (referrer), if your browser transmits it,
• browser type and version and operating system (user agent).

Purpose: we need this data to deliver the website, to keep it stable and secure, to find errors and to detect and fend off attacks. We do not analyse the log files for marketing purposes, do not create user profiles from them and do not combine them with other data.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and without errors.

Retention: the log files are deleted automatically after 7 days. Entries that we need to investigate a specific security incident are kept until the incident has been resolved.

Enquiry form

You can request a non-binding offer using our enquiry form – on the enquiry page and on the home page. We process the details you enter in the form:

• Required details: your name and email address,
• Optional details: phone number, what you need (e.g. business address, desk, company formation) and your message,
• technical data: the language and the page on which you filled in the form, where applicable the offer you pre-selected via a link, and, for spam protection, the time taken to fill in the form,
• date and time of the enquiry.

Only your name and email address are required; all other details are voluntary.

How your enquiry is processed: the form transmits your details in encrypted form to our web server at ALL-INKL. A program on this server forwards them by email to our mailbox (see Email mailbox and document storage with Google Workspace) and also saves a backup copy as a file on the server – in a directory that cannot be accessed from the internet. The copy ensures that no enquiry is lost if an email is not delivered. The backup copy is deleted automatically after 180 days; the deletion routine runs every hour.

Spam protection: to fend off automated mass enquiries, we only use our own methods without third parties and without cookies: a field that is invisible to people and only filled in by bots, a minimum time between opening and submitting the form, and a limit on the number of enquiries per internet connection. For this limit, the server does not store your IP address itself, only a pseudonymised check value derived from it (a hash); it is no longer used after 60 minutes and is deleted automatically no later than one hour after that. We do not include your IP address in the email or in the backup copy of your enquiry. We do not use captcha services such as Google reCAPTCHA.

Purpose and legal basis: we use your details to answer your enquiry, to clarify any questions and to prepare an offer for you. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request) where you yourself become our contractual partner – for example as a sole proprietor or founder. If you enquire on behalf of a company, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in handling the company’s enquiry. The legal basis for spam protection is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the form against misuse. We only learn whether an enquiry came from a Google ad if you have consented (see Google Ads conversion tracking).

For how long we keep enquiries, see Retention periods. Please do not send identity documents or other confidential documents via the form – you only present your ID document to us – in the original – before the contract is concluded.

Contacting us by email or phone

If you email or call us, we process the details you give us – such as your name, your email address or phone number and what your request is about. When you call, your phone number is displayed to us unless you withhold it. We use these details to deal with your request.

Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract with us; otherwise Art. 6(1)(f) GDPR – our legitimate interest lies in answering your request.

Emails to us are processed in our mailbox with Google Workspace (see the next section). For how long we keep correspondence, see Retention periods.

Email mailbox and document storage with Google Workspace

We run our mailbox info@gewerberaum-schoenefeld.de on Google Workspace. The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (“Google”). Emails you send us, our replies and the enquiries from the form are therefore stored and processed on Google’s servers. We also store documents – for example from the identity verification under the Money Laundering Act – with Google Workspace.

Google processes this data as our processor under Art. 28 GDPR on the basis of Google’s data processing terms (Cloud Data Processing Addendum) and only on our instructions. The legal basis for using Google Workspace is Art. 6(1)(f) GDPR; our legitimate interest lies in reliable and secure email communication and storage of our documents. The processing of your details as such is based on the legal bases set out under Enquiry form, Contacting us by email or phone and If your enquiry leads to a contract.

Transfers to the USA: it cannot be ruled out that Google also processes data on servers in the USA or in other countries outside the EU. Google LLC (USA) is certified under the EU-U.S. Data Privacy Framework. Transfers to certified companies are covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). The General Court of the European Union upheld this decision on 3 September 2025 (Case T-553/23); an appeal against it is pending before the Court of Justice of the European Union (Case C-703/25 P). As an additional safeguard, Google’s data processing terms provide for the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Contacting us via WhatsApp

The WhatsApp link on our website. Our website contains a link you can use to message us on WhatsApp. It is a simple link, not an embedded feature: as long as you do not click it, no data is transferred to WhatsApp and no cookies are set. Only when you click the link does your device open the WhatsApp app or the WhatsApp website. In the process, WhatsApp receives your IP address and information about your browser or device, among other data. Your browser does not tell WhatsApp which of our pages you came from. WhatsApp is responsible for this processing.

For users in the European Union, WhatsApp is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“WhatsApp”), a Meta company. WhatsApp’s terms of service and privacy policy apply to your use of WhatsApp (www.whatsapp.com/legal).

When you message us on WhatsApp, we process your mobile number, your WhatsApp profile name and – depending on your settings – your profile photo and “About” text. We also process the content and time of your messages. We use this information to respond to your request, for example to answer questions about our services or to arrange an appointment.

Legal basis: Art. 6(1)(b) GDPR where your message relates to a contract with us; otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to your request through the channel you have chosen.

How we use WhatsApp. We use the WhatsApp Business app on a dedicated business mobile phone. Only employees of WestX GmbH have access to the chats. We reply in German or English. Under WhatsApp’s terms for the Business app, WhatsApp processes the data of our communication with you as our processor (Art. 28 GDPR, WhatsApp Business Data Processing Terms). Separately, WhatsApp acts as an independent controller for data about your use of the service, such as your account data and connection and usage data (for example, when you communicate with whom). According to WhatsApp, messages between you and a business using the WhatsApp Business app are end-to-end encrypted, so WhatsApp cannot read their content; this does not apply to connection and usage data. We do not synchronise our address book with WhatsApp.

Transfers to the USA. WhatsApp also transfers data to WhatsApp LLC and Meta Platforms, Inc. in the USA. Both companies are certified under the EU-U.S. Data Privacy Framework. Transfers to them are covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). The General Court of the European Union upheld this decision on 3 September 2025 (Case T-553/23); an appeal is pending before the Court of Justice of the European Union (Case C-703/25 P). For transfers that WhatsApp carries out on our behalf, WhatsApp’s terms provide for the European Commission’s standard contractual clauses as a fallback (Art. 46(2)(c) GDPR).

Please do not send confidential documents. Please do not send us identity documents via WhatsApp – not even photos of them – or any other confidential documents. For confidential matters, please speak to us in person on site. You present your ID document to us in the original before the contract is concluded.

Storage location and retention period. We store your messages on our business mobile phone. We do not back up the chats to a cloud storage service such as Apple iCloud. We delete chats about enquiries that do not lead to a contract at the latest 6 months after our last contact. If a contract is concluded, we keep contract-related messages (commercial and business letters) for up to 6 years (§ 257 HGB, § 147 AO); beyond that, only for as long as we need them to establish, exercise or defend specific legal claims (Art. 17(3)(e) GDPR). For details of the retention periods, see Retention periods.

Voluntary. Using WhatsApp is up to you. You can also reach us by email, via the enquiry form or in person.

Fonts

We use the typefaces “Inter” and “Source Serif 4”. The font files are stored on our own web server and loaded from there. There is no connection to Google Fonts, Adobe Fonts or any other font provider; the only data involved is that described under Hosting and server log files.

Links to map services and other websites

Our website contains links to other providers – for example to OpenStreetMap and Google Maps for directions, to our business profile with reviews on Google Maps, or to statutes and public authorities. We read the figures on our reviews on Google (average, number, date) ourselves and include them as text; nothing is loaded from Google for this. Maps are not embedded on our pages; our location map is a simple graphic served from our own server.

Only when you click such a link does your browser open the provider’s website and transmit, among other things, your IP address to it. As a rule, the provider does not learn which of our pages you were on – your browser only transmits our domain. The respective provider alone is responsible for the processing on the linked website, for example the OpenStreetMap Foundation (United Kingdom) or Google Ireland Limited (Ireland); their privacy notices apply. We ourselves do not receive any data in this process.

If your enquiry leads to a contract

If you enter into a contract with us – for example for a business address or a desk – we process the data required for it: contact and contract details, information about your company and the persons acting for it, payment and invoicing data, and our correspondence with you. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) where you yourself are our contractual partner. For data of persons acting for a company (such as managing directors or employees), the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in performing the contract with the company. Where retention obligations under commercial and tax law apply, Art. 6(1)(c) GDPR applies.

Before the contract is concluded, we explain in separate privacy notices for tenants how we process data during the contractual relationship – for example for identity verification, accepting your mail and access to the premises.

Scan service: processing on your behalf

Our scan service is only provided on request. If you commission it, we open and scan your letters and send you the scans by email. In doing so, we process the data contained in your mail on your behalf as a processor under Art. 28 GDPR; you, as our tenant, are then the controller of this data. This is based on a separate data protection agreement which governs, among other things, instructions, confidentiality, sub-processors and the retention and deletion of the scans. We do not open your mail without your instruction. We are ourselves the controller for accepting, holding and handing over unopened mail and for the data from the rental agreement, invoicing and identity verification.

Identity verification under the Money Laundering Act

As a provider of business addresses for companies, we are obliged under the German Money Laundering Act (Geldwäschegesetz, GwG; § 2(1) no. 13 GwG) to identify our contractual partners, the persons acting on their behalf and the beneficial owners before the business relationship begins, to obtain proof of registration for entities that must be entered in the transparency register (Transparenzregister), and to monitor the business relationship on an ongoing basis. This applies to corporations and partnerships such as GmbH, UG, GbR, OHG and KG. For this purpose we collect in particular name, place and date of birth, nationality and residential address, as well as the type, number and issuing authority of the ID document (§ 11(4), § 8(2) GwG). The legal basis is Art. 6(1)(c) GDPR in conjunction with §§ 10 to 12 and § 11a GwG. As a company, you are legally obliged to provide us with the information and documents required for identification and to notify us of any changes without delay (§ 11(6) GwG). Without this information we may not conclude a contract with a company (§ 10(9) GwG). Where facts indicate money laundering or terrorist financing, we are legally obliged to report them to the Financial Intelligence Unit (Zentralstelle für Finanztransaktionsuntersuchungen, § 43 GwG); if the information in the transparency register differs from what we have established, we report this to the registrar (§ 23a GwG). We also establish whether our contractual partners or the beneficial owners are politically exposed persons (§ 10(1) no. 4 GwG) and check them against the sanctions lists of the European Union. We make a copy of the ID document you present to us in the original for our records (§ 8(2) sentence 2 GwG).

This statutory obligation does not apply to sole proprietorships. Here, too, we identify you before the contract is concluded using the same identification form and check you against the sanctions lists of the European Union – on a contractual basis and as part of our risk management (Art. 6(1)(b) and (f) GDPR; our legitimate interest lies in protecting our address against misuse). We only make a copy of your ID document with your consent (Art. 6(1)(a) GDPR; § 20(2) of the German ID Cards Act, Personalausweisgesetz; § 18(3) of the Passport Act, Passgesetz). Consent is voluntary; the contract can be concluded without a copy – in that case we only record the type, number and issuing authority of your ID document. You can withdraw your consent at any time with effect for the future; you may black out the card access number (CAN) on the copy. The copy is marked as such and is not passed on to third parties.

For companies, we keep the identity verification records for five years and then destroy them (§ 8(4) GwG). The period begins at the end of the calendar year in which the business relationship ends. Other statutory retention obligations remain unaffected; in total, we keep these records for no more than ten years.

For sole proprietorships, we delete the copy of your ID document at the latest when the contract ends. We keep the identification form until the regular limitation period has expired – that is, until the end of the third calendar year after the contract ends (§§ 195, 199 of the German Civil Code, BGB) – so that we can answer questions about the use of our address, and delete it afterwards. If you withdraw your consent to the copy of your ID document, we delete the copy.

Video surveillance on our premises

The entrances and the terrace of our premises at Rathausgasse 17 are under video surveillance – to protect the premises and the mail and documents we keep for our tenants, and to investigate incidents. The legal basis is Art. 6(1)(f) GDPR. Recordings are stored on a recorder on our premises and deleted automatically after 72 hours, unless an incident has occurred. All information required under Art. 13 GDPR – purposes, legitimate interests, retention period, recipients and your rights – is set out in our video surveillance notice.

Recipients and transfers to third countries

Within our company, only the people who need your data to handle your enquiry or perform the contract have access to it. Outside our company, data is only received by:

• our processors ALL-INKL (website hosting, processing of the form and sending of emails), Google (email mailbox and document storage) and – if you message us there – WhatsApp (communication via WhatsApp), which process the data only on our instructions,
• if you message us on WhatsApp: WhatsApp (WhatsApp Ireland Limited) additionally as an independent controller for your use of the service (see Contacting us via WhatsApp),
• only with your consent: Google as the provider of Google Ads conversion tracking (see Google Ads conversion tracking),
• our tax advisers, who support us in meeting our tax and commercial-law obligations and receive the documents needed for this, such as invoices. They process the data independently, as controllers in their own right (§ 11(2) of the German Tax Advisers Act, Steuerberatungsgesetz). The legal basis for passing on the data is Art. 6(1)(f) GDPR; our legitimate interest lies in meeting these obligations properly with professional support,
• bodies we involve to meet legal obligations or that have their own statutory powers – for example tax authorities and, where required by law, other authorities or courts,
• only at your express request: professionals from our network (for example tax advisers, notaries, lawyers, start-up advisers and insurance brokers), to whom we pass on your name and contact details so that they can get in touch with you. These professionals are independent controllers. The legal basis is your request for an introduction (Art. 6(1)(b) GDPR) or your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future,
• when a contract is concluded digitally: the e-signature service we use, as our processor; which service we use and on what basis data may be transferred to countries outside the European Union in the process is set out in our privacy notice for tenants, which you receive before the contract is concluded,
• for the scan service (only on request): the sub-processors we use as your processor; which they are and where they process the data is set out in the separate data protection agreement (see Scan service: processing on your behalf),
• for payments, the banks and payment service providers involved. Our business account is held with Qonto SA (formerly Olinda SAS), Paris, France, a payment institution that operates in Germany through its branch in Berlin. For managing the account and executing payments, Qonto processes the payment data – for example the payer’s name and account details, the amount and the payment reference – as an independent controller, including to meet its own statutory obligations to combat money laundering and terrorist financing. We also create our invoices via Qonto; invoices for separate services are, as a rule, also sent via Qonto. For this purpose, Qonto receives the invoice details (name or company name, address and email address of the invoice recipient, the service and the amounts). According to its privacy policy, Qonto stores the data on servers in France and Germany; where transfers to countries outside the EU are necessary, Qonto states that it bases them on an adequacy decision of the European Commission (Art. 45 GDPR) or on EU standard contractual clauses (Art. 46(2)(c) GDPR).

We do not sell data. Data only reaches Google for advertising purposes with your consent (conversion measurement, no personalised advertising).

A transfer to countries outside the European Union or the European Economic Area is only possible in connection with our email mailbox and document storage at Google, with communication via WhatsApp and – only with your consent – with Google Ads conversion tracking; the safeguards for this are described under Email mailbox and document storage with Google Workspace, Contacting us via WhatsApp and Google Ads conversion tracking. There are no other transfers to third countries in connection with this website; for Qonto, see the list above, and otherwise, for the contractual relationship, see our privacy notice for tenants (If your enquiry leads to a contract).

Retention periods

We only keep personal data for as long as is necessary for the respective purpose or required by statutory retention obligations. After that we delete it; until a retention period has expired, we restrict processing to that purpose.

The periods under commercial and tax law follow from § 257 of the German Commercial Code (Handelsgesetzbuch, HGB) and § 147 of the German Fiscal Code (Abgabenordnung, AO), for invoices also from § 14b of the German VAT Act (Umsatzsteuergesetz, UStG). They begin at the end of the calendar year in which the document was created or the last entry was made. If you ask us to delete an enquiry earlier, we will do so unless a retention obligation prevents it.

Data security

We protect your data with technical and organisational measures in accordance with Art. 32 GDPR. In particular, the connection to our website and the transmission of the form are encrypted (TLS, recognisable by “https://” in your browser’s address bar), the website and the form processing run on servers in Germany, and the backup copies of enquiries cannot be accessed from the internet.

Please note: ordinary emails are not end-to-end encrypted. For this reason, please do not send us identity documents or other confidential documents by email, via WhatsApp or via the form. You present your ID document to us in the original before the contract is concluded.

Your rights

With regard to the personal data concerning you, you have the following rights against us:

• access to the data we process (Art. 15 GDPR),
• rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR),
• erasure, unless a statutory retention obligation prevents it (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability – receiving the data you have provided to us in a common, machine-readable format (Art. 20 GDPR),
• objection to certain processing (Art. 21 GDPR, see below),
• withdrawal of any consent given, at any time with effect for the future (Art. 7(3) GDPR) – for Google Ads most easily via “Cookie settings” at the bottom of every page.

To exercise your rights, an informal message to the contact details given under Controller is sufficient – the easiest way is an email to info@gewerberaum-schoenefeld.de. To make sure your data does not reach unauthorised persons, we may ask you to prove your identity.

Right to lodge a complaint

If you consider that the processing of your data infringes data protection law, you can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is:

Brandenburg Commissioner for Data Protection and Access to Information
(Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg)
Stahnsdorfer Damm 77
14532 Kleinmachnow, Germany
www.lda.brandenburg.de (external link)

You are, of course, also welcome to contact us first.

Provision of data and automated decisions

You are under no statutory or contractual obligation to provide personal data to us via this website. However, the technical data transmitted when you open a page, in particular your IP address, is necessary for us to deliver the website to you. Without the details marked as required in the enquiry form we cannot process your enquiry, and to conclude a contract we need the information required for it.

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Changes to this privacy policy

We update this privacy policy when our website, our processing activities or the legal situation change. The version published here applies (last updated: October 2026). In case of doubt, the German version (Datenschutzerklärung) prevails.