Privacy Policy

This Privacy Policy explains how personal information may be collected, used and protected when someone visits this website.

The website can be viewed without creating an account. In normal use, the main information processed is technical data needed to load pages, keep the site secure and understand basic performance. If a visitor contacts the site directly, the information included in that message may also be processed.

This policy is written with reference to UK data protection rules, including the UK GDPR and the Data Protection Act 2018. For cookies and similar technologies, the Privacy and Electronic Communications Regulations may also apply.

1. Who is responsible for the data

The website operator is responsible for deciding how and why personal data is processed.

The full contact details of the operator should be listed on the Contact page, Impressum page, Legal Notice page or another clearly visible section of the website. Any privacy request should be sent through those contact details.

2. Information collected automatically

When a visitor opens the website, some technical information may be processed automatically.

This can include:

  • IP address;
  • date and time of access;
  • requested page URL;
  • browser type and version;
  • device type;
  • operating system;
  • language settings;
  • referring page;
  • server log information.

This information is used to deliver the website, maintain security, investigate errors, prevent abuse and keep the service technically stable.

3. Information provided voluntarily

If a visitor sends a message, fills in a form or contacts the website operator, the information included in that communication may be processed.

This may include a name, email address, message content, subject line and any other details the visitor chooses to provide.

This information is used only to review the request, respond where appropriate and keep a limited record of the communication if needed.

4. Cookies and similar technologies

The website may use cookies or similar technologies.

Some cookies are necessary for basic technical functions. Others may be used for analytics, performance measurement, security checks or remembering user preferences.

Non-essential cookies should only be used where the visitor has been given a fair choice and, where required, has provided consent. Visitors should be able to reject non-essential cookies as easily as they accept them.

Cookie settings can usually be changed through the website’s cookie banner, preference centre or browser settings.

5. Why personal data is used

Personal data may be processed for the following purposes:

  • to make the website available;
  • to protect the website from misuse;
  • to monitor technical performance;
  • to respond to messages;
  • to maintain records where necessary;
  • to comply with legal obligations;
  • to improve content and usability in an aggregated way.

The website should not use personal data for purposes that are incompatible with the reason it was collected.

6. Legal basis for processing

Depending on the situation, processing may rely on different legal bases.

Technical data may be processed because it is necessary for the legitimate interests of running, securing and improving the website.

Contact form data may be processed because it is necessary to respond to a request made by the visitor.

Where cookies, analytics or optional tracking tools require consent, processing should only take place after that consent has been given. Consent can be withdrawn at any time.

7. Analytics and performance tools

If analytics tools are used, they should be configured in a privacy-conscious way.

Analytics may show how many people visit a page, which devices are used, how long pages take to load and whether technical errors occur. Where possible, information should be aggregated or anonymised.

If a specific analytics provider is used, the final version of this policy should name that provider and explain what data is processed.

8. Service providers

The website may rely on third-party service providers.

These may include hosting companies, security tools, analytics providers, email services, maintenance providers or cookie management platforms.

Service providers should only receive access to data that is necessary for their role. Where required, appropriate data processing terms should be in place.

9. International transfers

Some service providers may process data outside the United Kingdom.

Where this happens, appropriate safeguards should be used. These may include adequacy regulations, standard contractual clauses, international data transfer agreements or other lawful transfer mechanisms.

The final version of this policy should be adjusted to reflect the actual providers used by the website.

10. Data retention

Personal data should not be kept for longer than necessary.

Server logs may be stored for a limited period for security and error analysis. Contact messages may be kept while the request is being handled and for a reasonable period afterwards if follow-up is needed.

Data may be kept for longer where required by law, dispute handling, security investigation or record-keeping obligations.

11. Data security

Reasonable technical and organisational measures should be used to protect personal data.

These may include access controls, secure hosting, HTTPS encryption, software updates, backups and limits on who can access administrative systems.

No online system can be guaranteed to be completely secure, but the website operator should take proportionate steps to reduce risk.

12. User rights

Under UK data protection law, individuals may have the right to:

  • request access to their personal data;
  • ask for inaccurate data to be corrected;
  • request deletion of data in certain cases;
  • restrict processing in certain cases;
  • object to certain types of processing;
  • request data portability where applicable;
  • withdraw consent where processing is based on consent.

Requests can be sent using the contact details provided on the website.

13. Complaints

If a visitor is concerned about how their personal data is handled, they should first contact the website operator.

They also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.

14. Updates to this policy

This Privacy Policy may be updated when the website changes, when new tools are added or when legal requirements change.

The version published on this page is the current version.