1. Data protection at a glance
Personal data is any information by which you can be personally identified. When you visit this site, technically necessary connection data is processed. Further data is collected only when you submit it through the contact form or contact us by email or telephone.
2. Controller
Sabine Patricia Haas
Sofienstr. 5
63225 Langen
Germany
Phone: +49 (0) 163 250 8888
Email: [email protected]
3. Hosting and server logs
This site is served through Cloudflare. When it is accessed, Cloudflare processes technically necessary connection data, in particular the IP address, time and destination of the request, referrer, browser and operating system information. This processing provides a secure, stable and technically reliable website and is based on Art. 6(1)(f) GDPR.
Cloudflare may process data outside the European Union. Transfers are made under the data protection safeguards provided by Cloudflare. For details, see Cloudflare’s privacy policy and Data Processing Addendum.
4. Cookies, local media and analytics
Google Analytics 4 loads only if you choose “Accept all” in the consent banner. It measures page visits, contact-form interactions and successful contact enquiries. Before this consent, the service is not loaded and no analytics or marketing cookies are set by this website. “Accept all” also enables preference storage for language and contact-form autofill. Fonts, images and videos are served locally; no social media plugins are loaded when a page is merely viewed.
To remember your choice, we store the technically necessary sph_cookie_consent cookie for six months after you make a selection. If you consent to preference storage, we also store the sph_language cookie for six months to remember your selected language.
If you choose “Accept all” and provide your details in the contact form, your name and email address may also be stored for six months in your browser’s local storage under sph_contact_preferences, so the contact form can be prefilled on the same device. This storage does not send those details to third parties. Consent for analytics and preference storage is collected under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can change your choice at any time through “Cookie settings” in the footer. If you choose “Necessary only”, Google Analytics is not loaded or is disabled for future use, and saved language and contact details are removed. The provider’s privacy information applies to data processed after consent: Google.
5. Contact form
If you use the contact form, we process your name, email address, optional company name, message and the technical data required for transmission to handle your enquiry and prevent misuse. Required fields are identified as such.
For contractual or pre contractual enquiries, processing is based on Art. 6(1)(b) GDPR. In other cases, it is based on our legitimate interest in efficient communication under Art. 6(1)(f) GDPR.
Email delivery is provided by Zoho Mail. In particular, your email address, name and message content are transmitted to Zoho. See Zoho’s privacy policy for more information.
6. Contact by email or telephone
If you contact us by email or telephone, the information and contact details you provide are processed to handle your enquiry. The legal bases described in section 5 apply.
7. Recipients and retention
Personal data is available only to service providers and parties that require it for the purposes described above, in particular Cloudflare for hosting and security, Zoho Mail for contact form delivery and, if you consent, Google for audience measurement. It is otherwise disclosed only where necessary to perform a contract, comply with a legal obligation, pursue a legitimate interest or act on your consent.
Your data is deleted once the processing purpose no longer applies and no statutory retention duty or other legal ground requires continued storage. Enquiries are generally retained for the time needed to handle them and afterwards only for as long as required for evidentiary, contractual or statutory retention purposes.
8. External links and social networks
Links to LinkedIn, XING, X and external press sites are ordinary links. A connection to the provider is made only when you choose to open a link. The provider’s privacy terms apply from that point.
9. Your rights
Subject to applicable law, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with future effect.
Where processing is based on Art. 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.
You may also lodge a complaint with a data protection supervisory authority. The authority for Hesse is the Hessian Commissioner for Data Protection and Freedom of Information.
10. Data security
This website uses TLS encryption. Even so, transmitting data over the internet may involve security vulnerabilities, and complete protection is not technically possible.
11. Status and updates
Last updated: August 2026. This policy will be updated if the services used by the site or the applicable legal requirements change.