1. Responsible person

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

expert PR & HWM Communications GmbH

Gutzkowstraße 9

60594 Frankfurt am Main

Germany

Telephone: 49 (0)69 230404

Email: mail@expertpr.de

2. General information on data processing

The protection of your personal data is very important to us. We process personal data exclusively in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the relevant national data protection provisions.

Below we inform you about which personal data is processed in connection with your visit to our website, for what purposes this is done, on what legal basis the processing is based and what rights you have.

3. Hosting and website builder

Our website is operated and hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, using the MyWebsite Creator website builder. IONOS processes data to the extent necessary for the provision, secure operation, and technical administration of the website.

IONOS is used as a data processor in accordance with Article 28 GDPR. The processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable, and efficient provision of our online services.

Further information on data processing by IONOS can be found at:

https://www.ionos.de/terms-gtc/datenschutzerklaerung/

4. Provision of the website and server log files

When you access our website, the servers we use automatically collect information necessary for the technical provision and to ensure the stability and security of our IT systems. In particular, the following data may be processed:

- IP address of the requesting device,

- Date and time of access,

- accessed page or file,

- amount of data transferred,

- HTTP status code,

- Referrer URL,

- Browser type and browser version,

- Operating system and device type used.

The processing is carried out for the purpose of providing the website, ensuring system security and stability, and detecting and preventing unauthorized access or other disruptions. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and technically flawless provision of our website.

The data will only be stored for as long as necessary for the stated purposes. Longer storage may occur if required to investigate a specific security incident or to comply with legal obligations.

5. IONOS WebAnalytics

IONOS provides web analytics for website operation. According to IONOS, this analysis is carried out using log files or a tracking pixel and without the use of cookies. Specifically, the previously visited website, the accessed page or file, browser type and version, operating system, device type, and access time may be processed. According to IONOS, the IP address transmitted during page access is immediately anonymized and subsequently processed without reference to any individual.

The evaluation serves the purpose of statistical analysis and technical optimization of the website. The legal basis for the temporary processing of the IP address is Article 6(1)(f) GDPR. Our legitimate interest lies in the technical optimization and needs-based design of our website. .

6. Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. They may be technically necessary or – with your consent – used to provide additional functions.

Technically necessary cookies are used to the extent that they are strictly necessary to provide the website or a function you have expressly requested. The legal basis for storing or accessing information on your device is Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TMG). Insofar as personal data is processed in this context, this is done on the basis of Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the secure and functional provision of our online services.

Cookies and similar technologies that are not technically necessary will only be used with your prior consent. The legal basis for this is Section 25 Paragraph 1 of the German Telemedia Act (TDDDG) and Article 6 Paragraph 1 Letter a of the GDPR. You can change or withdraw your consent at any time with effect for the future via the cookie settings.

7. Consent management with Termly

To obtain, manage and document your decisions regarding cookies and similar technologies, we use the consent management platform of Termly Inc., 8 The Green, Suite B, Dover, Delaware 19901, USA (Termly).

Termly processes, in particular, a user ID, an anonymized IP address, the country derived from the IP address, browser and device information, your cookie preferences, the date and time of your decision, and the website and consent page URLs as part of its consent management. This processing serves to provide the appropriate consent banner, save your selection, and be able to prove whether consent has been granted or refused.

Storing your consent decision on your device is technically necessary so that your chosen settings can be applied to subsequent page visits. The legal basis for this is Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TMG). The processing of consent data is based on Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the legally compliant, verifiable, and user-friendly management of consents.

Termly states that it stores consent logs encrypted on Amazon Web Services servers in the USA. For data transfers to the USA, Termly relies on the EU-US Data Privacy Framework and, where necessary, on the standard contractual clauses approved by the European Commission.

Your consent data will be stored for as long as necessary to document your decision and to fulfill legal obligations. You can change or withdraw your consent at any time via the cookie settings.

Further information can be found at:

https://termly.io/our-privacy-policy/

8. Making contact

You can contact us via the contact form on our website, by email or by telephone.

When you use the contact form, we process the following information in particular:

- Name,

- E-mail address,

- Telephone number, if voluntarily provided,

- Content of your message.

Your data is processed to handle and respond to your inquiry. The legal basis for this processing is Article 6(1)(b) GDPR if your inquiry relates to the conclusion or performance of a contract. In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of incoming inquiries.

The data submitted via the contact form will be forwarded to the email address we have on file and additionally stored in the website's administration area to process and track inquiries. The data will be deleted as soon as the inquiry has been fully processed and there are no legal retention obligations or other legitimate reasons for further storage.

When you contact us by email or telephone, we also process the personal data you provide solely for the purpose of handling your inquiry. The legal basis for this is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

9. Map data from Mapbox

Our contact page uses a map service from Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, DC 20005, USA, to graphically display our location.

The map service is categorized as a "service" in the consent management system. A connection to Mapbox will only be established if you have consented to the use of this service via the consent banner. Following your consent, your IP address, the date and time of access, browser and device information, as well as technically necessary data relating to the retrieved map content, may be transmitted to Mapbox.

The legal basis for activating the map service and the associated data processing is Section 25 Paragraph 1 of the German Telemedia Act (TDDG) and Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time with effect for the future via the cookie settings.

Mapbox also processes data in the USA. According to its own statements, Mapbox bases international data transfers primarily on the EU-US Data Privacy Framework and, where necessary, on standard contractual clauses of the European Commission.

Further information can be found at:

https://www.mapbox.com/legal/privacy

10. Links to social networks and communication services

Our website contains links to our profiles and contact options on LinkedIn and WhatsApp. These are simply standard hyperlinks. No personal data is transmitted to the respective providers simply by visiting our website via these links.

Data is only transferred when you actively click on the respective link. From that point on, the privacy policy of the respective provider applies.

11. Encrypted transmission

Our website uses TLS encryption to protect transmitted content from unauthorized access by third parties. You can recognize an encrypted connection in particular by the address bar of your browser beginning with "https://".

12. Recipients of personal data

Within our company, only those departments that need personal data to fulfill the respective processing purposes receive access to it.

Furthermore, we use external service providers to the extent necessary for the operation of the website or the processing of inquiries. These include, in particular, hosting and website service providers, consent management providers, and third-party providers engaged with the appropriate consent. Where service providers process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 GDPR.

13. Data transfers to third countries

Where personal data is transferred to recipients outside the European Union or the European Economic Area in individual processing operations, this is done in compliance with Articles 44 et seq. of the GDPR. Details regarding the respective recipients and the transfer mechanisms used can be found in the relevant sections of this privacy policy.

14. Storage duration

Unless a more specific retention period is stated in this privacy policy, we store personal data only as long as necessary to fulfill the respective processing purpose. Afterwards, the data is deleted unless statutory retention obligations, the establishment, exercise or defense of legal claims, or other legal reasons preclude deletion.

15. Rights of data subjects

Subject to the legal requirements, you are entitled in particular to the following rights:

- Right of access pursuant to Art. 15 GDPR,

- Right to rectification pursuant to Article 16 GDPR,

- Right to erasure pursuant to Article 17 GDPR,

- Right to restriction of processing pursuant to Article 18 GDPR,

- Right to data portability pursuant to Art. 20 GDPR,

- Right to object pursuant to Article 21 GDPR,

- Right to withdraw consent pursuant to Art. 7 para. 3 GDPR.

The withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal.

16. Right of appeal and objection

According to Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection regulations.

If personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right, pursuant to Article 21 GDPR, to object at any time to the processing of personal data concerning you on grounds relating to your particular situation.

17. Timeliness

As of August 2026

We reserve the right to amend this privacy policy if this becomes necessary due to changes in legal, technical or factual developments.