Legal // Privacy
Privacy notice.
This privacy notice provides information, pursuant to Article 13 of the General Data Protection Regulation (GDPR), on the processing of personal data in connection with the use of this website. Personal data within the meaning of Article 4(1) GDPR refers to any information relating to an identified or identifiable natural person.
Controller
The controller for the processing of personal data on this website within the meaning of the GDPR is:
Iltis & Wiesel UG (haftungsbeschränkt) & Co. KG
Lindwurmstr. 70
80337 München
Deutschland
Data Protection Officer
We have not appointed a Data Protection Officer, as the criteria of Art. 37 GDPR and § 38 BDSG do not apply to our operations.
What this website does not do
Before describing what we process, here is what we deliberately do not do on this website:
- No cookies are set, neither technically necessary nor analytical or marketing.
- No tracking pixels, fingerprinting, or browser-based identifiers.
- No third-party fonts (all fonts are served directly from our server).
- No content delivery network (CDN) — all assets come from our infrastructure.
- No social media embeds, share buttons, or external scripts.
- No marketing, advertising, or behavioral tracking — only privacy-respecting page-view analytics, as described below.
- No web forms — contact is handled via direct email only.
Data processing on this website
Server access logs
Operating the website reliably, protecting against malicious requests, and identifying technical issues.
- IP address of the requesting device
- Date and time of the request
- Requested URL and HTTP method
- HTTP status code and response size
- User agent (browser and operating system)
- Referrer URL, if transmitted by the browser
Our hosting provider, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, processes these logs on our behalf under a data processing agreement (Art. 28 GDPR).
Art. 6(1)(f) GDPR (legitimate interest in operating and securing the website).
Server logs are automatically deleted after 30 days. Earlier deletion may occur if the data is no longer needed.
Contact via email
Processing and responding to your inquiry. The email address is revealed only when you actively click the contact button — bots scraping the page cannot harvest it.
- Your name and email address (provided by you when sending the email)
- Content of your message
- Any attachments you choose to include
Your email is received by our mail server and read by the team member responsible for the inquiry. No third party processes the content.
Art. 6(1)(f) GDPR (legitimate interest in communicating with you). If your inquiry concerns the conclusion or performance of a contract, Art. 6(1)(b) GDPR also applies.
Emails are stored as long as necessary to fully process your inquiry and any follow-up communication. Inquiries that do not lead to a business relationship are deleted at most after 12 months.
Website analytics (Umami)
Understanding how visitors interact with the website to improve content and structure.
- Page URL viewed
- Referrer URL
- Anonymized country (derived from IP, IP itself is not stored)
- Browser and operating system family
- Screen size category
Analytics data is processed by Umami, a privacy-focused, open-source analytics platform that we self-host on our own infrastructure. No data is transmitted to third parties.
Art. 6(1)(f) GDPR (legitimate interest in understanding website usage). No cookies or device identifiers are set; consent under § 25 TDDDG is therefore not required.
Aggregated analytics data is retained for 12 months for trend analysis. No individual user can be identified from this data.
Your rights as a data subject
You have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR)
- You may request information about whether and which personal data we process, for what purpose, to whom or to which categories of recipients the data is disclosed, and how long it is stored.
- Right to rectification (Art. 16 GDPR)
- You may request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.
- Right to erasure (Art. 17 GDPR)
- You may request the erasure of your personal data, in particular if it is no longer necessary, you withdraw your consent, or the data has been unlawfully processed.
- Right to restriction of processing (Art. 18 GDPR)
- You may request the restriction of the processing of your data, for example if the accuracy of the data is contested.
- Right to data portability (Art. 20 GDPR)
- You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR)
- You may object at any time to the processing of your personal data for reasons relating to your particular situation.
- Right to withdraw consent (Art. 7(3) GDPR)
- Where processing is based on your consent, you may withdraw it at any time. The lawfulness of processing up to the point of withdrawal remains unaffected.
- Right to lodge a complaint (Art. 77 GDPR)
- You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is the data protection authority of the federal state in which our company is registered.
Data security
We use TLS encryption (HTTPS) for all connections to this website. Server access is restricted to authorized personnel. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, loss, or misuse. Note that data transmission over the internet may have security gaps; complete protection against third-party access is not possible.
Changes to this privacy notice
We may update this privacy notice from time to time, for instance when adding new functionality to the website or in response to changes in legislation. The current version is always available at this URL. The "Last updated" date at the top indicates when the most recent revision was made.