Privacy Policy

1. Introduction and Controller

The following information explains how personal data is processed when this website is used. Personal data means any information that can be used to identify you personally.

2. Website Provision and Server Log Data

When you access this website, your IP address is technically necessary to transmit the requested content to your browser. The hosting operator also processes information about the requested page or file, the previously visited page (referrer, if transmitted), browser, operating system, device type and access time. According to the hosting provider, IP addresses are anonymised in the stored access logs. These logs are retained for eight weeks for the security and stability of the service.

To the extent that personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of the website and the detection and prevention of disruptions and misuse. Without the technically necessary transmission of data, particularly the IP address, the website cannot be provided.

3. Hosting

We use the webspace package provided by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. For technical operation, united-domains uses IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. According to united-domains, the servers for this webspace package are located in Germany.

Further information from the provider about webspace and log data processing is available in the united-domains privacy information.

4. Encrypted Transmission

This website is provided over HTTPS using TLS encryption. HTTP requests are redirected to HTTPS. Encryption protects transmission between your browser and the web server.

5. Display Preferences in Your Browser

When you select options in the “Adjust display” menu, we save them in your browser’s local storage (localStorage) under the entry mammut-display-v1. These include settings such as text size, text spacing, contrast and reduced motion. This keeps your chosen display preferences available when you visit other pages.

Under the current technical implementation, preference values are stored exclusively locally in your browser and are not used for analytics, advertising or profiling purposes. Storage supports the display function you have selected (Section 25(2)(2) TDDDG). To the extent that personal data is processed, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is to provide the accessible display you have requested.

The settings remain in this browser without a fixed expiry date. “Reset all settings” in the display menu deletes this entry. It is also removed when all stored options are returned to their default values. Alternatively, you can delete the website data in your browser settings. The website does not store session-storage status values for reveal animations.

6. Contact

If you contact us by email or telephone, we process your contact details, the content of your enquiry and any attachments you provide to handle your request and follow-up questions. For general enquiries and communication with company representatives, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is handling business enquiries and maintaining business relationships. Where processing is necessary for a contract with you as the data subject or for steps taken at your request before entering into a contract, the legal basis is Article 6(1)(b) GDPR.

We use the email package provided by united-domains GmbH (address in section 3) for our domain’s mailboxes. This involves processing message content, attachments, sender and recipient details and technical delivery information.

Contacting us is voluntary. Without the information necessary to respond, we may be unable to handle your enquiry. As a rule, we delete general enquiries that are not subject to retention obligations no later than two years after processing has been completed. Where correspondence is subject to statutory retention obligations as commercial or business correspondence or as an accounting record, we retain it for the applicable statutory retention period. Statutory retention is based on Article 6(1)(c) GDPR; storage necessary for legal claims is based on Article 6(1)(f) GDPR.

7. Fonts and External Content

The Roboto font is loaded from our web server without establishing a connection to Google Fonts. This website does not embed analytics or marketing services, external maps, external videos or social media widgets. Links to external websites open those services only when you follow the links. Processing on those websites is governed by the respective provider’s privacy information.

8. Recipients

Recipients of technically necessary data are the hosting and email providers named in sections 3 and 6 and their technical subcontractors used for the respective service. Within our company, the people responsible for handling your enquiry have access to the extent necessary for that purpose.

9. Your Rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR) and data portability (Article 20 GDPR). You can exercise your rights using the contact details above. Where processing is based on your consent, you may withdraw it at any time with effect for the future, without affecting the lawfulness of processing prior to withdrawal.

You may lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly in the place of your habitual residence, place of work or the alleged infringement. The authority responsible for our company is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).

10. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then cease processing the data concerned unless we can demonstrate compelling legitimate grounds or the processing is required for the establishment, exercise or defence of legal claims.

11. Retention Period

Personal data is retained only for as long as necessary for the respective purpose or as required by statutory retention obligations. If the purpose no longer applies and no statutory or legitimate grounds require continued storage, the data is deleted.

12. Updates to this Notice

Last updated: 24 September 2026. This privacy notice will be updated if the website, the services used or the legal requirements change.