Privacy notice

1. Data controller

The responsible operator is:

2. Technical access and server logs

When you access this website, technical connection data, in particular the IP address and the requested resource, are processed to deliver the page. Depending on the server configuration, the date and time, browser information and HTTP response status may also be recorded in access or error logs. The logged fields depend on the actual web-server configuration.

This processing serves to provide the website, maintain its security and diagnose technical faults. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are providing a secure and reliable website, diagnosing technical faults and preventing misuse.

Retention period for access and error logs

30 days

The website is hosted using contracted technical service providers. According to the operator's confirmation following a review of subcontractors, website hosting, email services and the associated subprocessors process personal data exclusively within the EU or EEA. No third-country transfer is planned for these processing operations. For confidentiality, internal server identifiers and paths are not published.

3. Additional visitor statistics (currently inactive)

The website does not currently load an additional visitor analytics script or tracking pixel. The operator has reported that this domain does not produce entries in the separate visitor statistics dashboard. Technical web-server access logs are described in section 2 and are separate from visitor analytics.

If additional visitor measurement is introduced later, we will update this notice and obtain any legally required consent before enabling the technology. Choices previously saved in the cookie notice are not treated as advance consent to a future, unspecified analytics service.

4. Cookie notice and preference storage

The first-party cookie "lf_privacy_choice" stores the value "necessary" for up to 30 days after you acknowledge the cookie notice. It does not contain a visitor ID, tracking identifier or usage history. It is used only to remember your acknowledgement so that the notice does not reappear on every page view. You can reopen the information using "Cookie settings" in the footer.

We currently do not set optional analytics cookies or load optional analytics scripts in the supplied website implementation. The cookie is used solely to remember the acknowledgement explicitly selected by the visitor (section 25(2) no. 2 TDDDG). Where personal data are processed in this context, the legal basis is Article 6(1)(f) GDPR (avoiding repeated display of the notice).

The 30-day cookie duration is separate from the 30-day retention period indicated for web-server logs. Browser cookie preferences are not used as a substitute for valid consent if analytics are introduced later.

5. Email enquiries and external links

If you contact us by email, we process the sender address, the content of your message, and any other data or attachments you provide in order to handle and answer your enquiry. Depending on the reason for the contact, the legal basis may be Article 6(1)(b) GDPR (pre-contractual or contractual communication) or Article 6(1)(f) GDPR (legitimate interest in responding to enquiries and operating the portal).

Correspondence is retained only for as long as needed for the relevant purpose and any applicable statutory retention or documentation obligations. Once an enquiry has been dealt with, correspondence is deleted when it is no longer required for its purpose and no applicable statutory retention or documentation obligation prevents deletion.

Recipient categories include contracted website hosting and email service providers, as well as their authorised subprocessors where needed for operating these services. According to the operator's contractual review, they operate and access data solely within the EU/EEA. Internal server identifiers and server paths are not published.

Links to independent services, such as the CSSF or ALFI websites, open separately operated sites. Their operators are responsible for the privacy practices of those services.

6. Your data protection rights

Subject to statutory conditions, you may have rights of access, rectification, erasure, restriction, data portability and objection. You may also lodge a complaint with a competent data protection supervisory authority. If consent is used for processing, it can generally be withdrawn with future effect.

For privacy enquiries, please contact the operator using the details above. Based on the German operator address provided, the regional supervisory authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW). You may also complain to another competent supervisory authority.

The supplied website implementation does not use automated individual decision-making, profiling or an additional visitor analytics service.

LDI NRW – File a complaint ↗