Privacy Notice

1. Controller

The person responsible for processing personal data on this website is:

2. Website delivery and security

This website is delivered by Cloudflare Pages (Cloudflare, Inc., USA). When you visit, Cloudflare processes your IP address, requested URL, date and time, browser and operating-system information, the page that referred you, and HTTP, routing and security data to deliver and protect the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are publishing the portfolio reliably and securely and preventing abuse and attacks. Your browser must transmit this data; otherwise the website cannot be delivered.

Cloudflare handles this data on our behalf under an agreement required by Article 28 GDPR. It also processes network, operational and security data to operate its services. We do not run analytics in your browser or create visitor profiles. Cloudflare keeps data for as long as needed to provide and secure its services or meet legal obligations, as described in its policies. Data may be processed outside the European Economic Area. For transfers covered by the EU–U.S. Data Privacy Framework, we rely on the European Commission's decision that the framework provides an adequate level of protection (Article 45 GDPR). Other transfers use the European Commission's Standard Contractual Clauses, which are safeguards for data sent abroad (Article 46 GDPR). See Cloudflare’s Privacy Policy and Data Processing Addendum.

3. OpenFreeMap map

When you open the Map page, your browser loads map styles, tiles, fonts and symbols directly from OpenFreeMap (Hyperknot Software Kft., Hungary). OpenFreeMap and the service providers it uses to deliver these resources receive your IP address, browser and operating-system information, the page that referred you, and the date and time of the request. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is displaying the geographic context of the published collections. OpenFreeMap states that it uses no cookies or visitor tracking and does not normally record IP addresses. During a security incident, it may temporarily record IP addresses for up to 30 days. See OpenFreeMap's Privacy Policy.

4. Contact by email

If you email us, we process your sender address, any name you provide, your message, attachments and technical details transmitted with the email in order to respond. Ordinary messages are processed under Article 6(1)(f) GDPR, based on our legitimate interest in responding to messages addressed to us. Requests to exercise data-protection rights are processed under Article 6(1)(c) GDPR. The email services used to deliver and store messages process this information as part of their services. Sending an email is optional; without a reachable sender address, we cannot reply. We delete messages when they are no longer needed to handle your inquiry. We may retain them longer where necessary to comply with legal obligations or to establish, exercise or defend legal claims.

5. Cookies and analytics

We do not set cookies ourselves and use no analytics, advertising or tracking cookies. If Cloudflare presents a security challenge, it may set a necessary security cookie to remember the result and prevent abuse. By default, the cookie lasts 30 minutes. Where it is strictly necessary to provide the website you requested, it does not require consent under section 25(2)(2) TDDDG. Personal data connected with the cookie is processed under Article 6(1)(f) GDPR based on our interest in website security. See Cloudflare’s Challenge Passage documentation.

6. Your rights

If the legal requirements are met, you may ask us to give you access to your personal data, correct or delete it, restrict how it is used, or provide it in a portable format. To exercise your rights, email [email protected]. You may also lodge a complaint with a data-protection supervisory authority. Our competent authority is the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany.

Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will then cease the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.