Privacy Policy

1. Controller

Prof. Dr. Pascal Laube

Allmannsdorfer Straße 51

78464 Konstanz, Germany

Email: pascal.laube@kint.pro

2. Hosting and Server Log Files

This website is hosted by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access this website, Cloudflare automatically collects information in server log files that your browser transmits. This includes:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Referrer URL (previously visited page)
• Browser and operating system used

This data is collected to ensure reliable operation of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). This data is not merged with other data sources.

Cloudflare may set a technically necessary cookie (__cf_bm) for bot protection. This cookie is strictly necessary for the operation of the website and does not require consent.

Cloudflare may process data in the USA. The basis for this is the adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) and Cloudflare's participation in standard contractual clauses. For more information, see the Cloudflare Privacy Policy.

3. Fonts

This website uses locally hosted fonts (self-hosting). No fonts are loaded from external servers. No data is transmitted to third parties in this context.

4. Contact and Demo Forms

The contact form and demo booking form on this website use Web3Forms, a form processing service provided by Web3Forms (Jeeva Marketer LLC). When you submit a form, the following data is transmitted to Web3Forms:

• Your name
• Your email address
• Your message or form contents

Web3Forms processes this data solely to deliver the form submission to us via email. Web3Forms does not use cookies, does not track users, and does not store submissions beyond the time needed for delivery. The legal basis is Art. 6 (1) (b) GDPR (processing necessary for pre-contractual measures at your request).

Providing your data is voluntary. Without an email address, we can't respond to your inquiry.

For more information, see the Web3Forms Privacy Policy.

5. YouTube Videos

This website embeds videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use a two-click solution. When you visit this website, no personal data is transmitted to YouTube. Only when you actively click on a video thumbnail and consent to the data transfer is a connection to YouTube servers established. The thumbnail image is loaded locally from our server.

After your consent, the following data may be transmitted to YouTube:

• Your IP address
• The URL of the visited page
• Device and browser information
• Date and time of access

If you are logged into your Google or YouTube account, YouTube may associate your browsing behavior with your personal profile.

We use YouTube in enhanced privacy mode (domain: youtube-nocookie.com). According to YouTube, this mode prevents YouTube from storing information about visitors to this website before they play a video. The sharing of data with YouTube partners is not necessarily excluded by the enhanced privacy mode.

The legal basis for data processing is Art. 6 (1) (a) GDPR and § 25 (1) TDDDG (consent). You may revoke your consent at any time with effect for the future by reloading the page.

Google may process data in the USA. The basis for this is the adequacy decision of the European Commission (EU-U.S. Data Privacy Framework). For more information, see the Google Privacy Policy and the YouTube Terms of Service.

6. Web Analytics (Pirsch Analytics)

This website uses Pirsch Analytics, a privacy-friendly web analytics service provided by Emvi Software GmbH, Danziger Straße 17, 20099 Hamburg, Germany.

Pirsch Analytics does not use cookies and does not collect or store personal data. It works by generating a daily-rotating hash from the visitor's IP address, user agent, and a random salt. The IP address is neither stored in full nor in part. The hash cannot be reversed to identify individual users and is automatically invalidated after 24 hours. Visitors cannot be tracked across multiple websites or recognized across days.

The following anonymized data is collected:

• Page URL visited
• Referrer URL
• Browser and operating system (from user agent)
• Device type (desktop/mobile)
• Country (derived from IP, IP itself is not stored)
• Screen resolution

No consent is required for Pirsch Analytics as no cookies are set and no personal data is processed. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in understanding website usage to improve our offering).

All data is processed and stored on servers in Germany. For more information, see the Pirsch Analytics Privacy Policy.

7. Recipients of Your Data

We use the following third-party service providers to operate this website. Each provider may receive personal data only to the extent described in the respective sections above:

• Cloudflare, Inc. (hosting, CDN, bot protection)
• Web3Forms / Jeeva Marketer LLC (form delivery)
• Google / YouTube (video embeds, only after consent)
• Emvi Software GmbH / Pirsch Analytics (anonymized web analytics)

We do not sell, rent, or otherwise share your personal data with third parties for their own purposes.

8. Cookies

This website itself does not use tracking, marketing, or analytics cookies. Cloudflare may set a technically necessary cookie for bot protection (see section 2). If you play an embedded YouTube video, YouTube may set cookies on your device. This only occurs after your explicit consent (see section 5).

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons. An encrypted connection is indicated by "https://" in the browser address bar and the lock icon.

10. Your Rights

Under the GDPR, you have the following rights:

• Access (Art. 15) — You can request a copy of the personal data we hold about you.
• Rectification (Art. 16) — You can ask us to correct inaccurate data.
• Erasure (Art. 17) — You can ask us to delete your data, under certain conditions.
• Restriction (Art. 18) — You can ask us to restrict processing of your data.
• Data portability (Art. 20) — You can request your data in a machine-readable format.
• Objection (Art. 21) — You can object to data processing based on legitimate interest.
• Withdraw consent (Art. 7(3)) — Where processing is based on your consent, you can withdraw it at any time with effect for the future.

We do not store personal data ourselves. Processing is limited to what our third-party service providers collect as described above. For access or deletion requests, please contact us at the email address in section 1.

11. Automated Decision-Making

No automated decision-making or profiling pursuant to Art. 22 GDPR takes place.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg

www.baden-wuerttemberg.datenschutz.de

13. Changes to This Policy

We review this privacy policy regularly and update it when our data processing changes. The current version is always available on this page.