Privacy policy.

This is a courtesy translation. Only the German version (Datenschutzerklärung) is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Christoph Lukas Eisner
Geyerstraße 21
80469 Munich
Germany
Email: christoph.lukas.eisner@googlemail.com
Phone: +49 1525 2171089

2. The essentials at a glance

This website is deliberately built to collect as little data as possible:

• We use no cookies and do not store any information on your device.
• We use no analytics, tracking or marketing tools.
• Fonts, scripts, images and videos are delivered exclusively from our own hosting. No third-party content (e.g. Google Fonts or YouTube) is loaded when you visit.
• Personal data is only processed for technical reasons when you open the site (see Hosting) and when you contact us yourself.

3. Hosting and server log files

This website is hosted by Cloudflare, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare delivers the website via a worldwide server network and protects it against attacks and misuse.

When you visit the website, Cloudflare automatically processes information transmitted by your browser (so-called server log files). This includes in particular:

• IP address of the requesting device
• date and time of access
• page or file requested and amount of data transferred
• referrer URL (the previously visited page)
• browser and operating system used

This processing is necessary to deliver the website, to ensure its stability and security and to fend off attacks. The legal basis is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). We do not combine this data with other data sources.

We have concluded a data processing agreement with Cloudflare (Art. 28 GDPR). Data may be transferred to the USA in the process. Cloudflare is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46(2)(c) GDPR).

Cloudflare only stores the log data for as long as necessary for the purposes mentioned. More information: Cloudflare’s privacy policy.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar. Data you send to us cannot be read by third parties.

5. Contact by email or phone

If you contact us by email or phone, we process your details (e.g. name, email address, phone number and the content of your enquiry) in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to the initiation or performance of a contract. In all other cases, the processing is based on our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

To receive emails, we use the Gmail service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework.

We delete your data as soon as it is no longer needed to handle your enquiry, unless statutory retention obligations (e.g. under commercial or tax law) apply.

6. Appointment booking via Calendly

To arrange introductory meetings, we link to the Calendly service of Calendly LLC, USA. Calendly is only linked and not embedded in this website; no data is transferred to Calendly when you visit our site.

Only when you click the link and book an appointment does Calendly process the data you enter (e.g. name, email address, preferred date). The legal basis is Art. 6(1)(b) GDPR (initiation of a contract). Calendly’s privacy policy applies.

7. Links to social networks

This website contains links to our profiles on Instagram (Meta Platforms Ireland Limited, Ireland) and LinkedIn (LinkedIn Ireland Unlimited Company, Ireland). These are simple links, not embedded plugins. No data is therefore transferred to these networks when you visit our website.

Only when you click a link are you taken to the respective provider’s site, where their privacy policy applies.

8. Videos

The videos on this website are delivered directly from our own hosting. No video platforms such as YouTube or Vimeo are embedded; playing a video does not cause any additional data to be processed by third parties.

9. Your rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)

Right to object: Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, an informal message to the email address above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), www.lda.bayern.de.

10. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

11. Status of this privacy policy

This privacy policy was last updated in October 2026. We will update it if the website or the legal requirements change.