Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

We have not appointed a data protection officer; the statutory thresholds for doing so are not met.

2. What happens when you open a page

To deliver a page, your browser transmits technical data that is necessary for the connection — in particular your IP address, the time of the request, the page requested, the referring page, and your browser and operating system version. This data is processed by our hosting provider on our behalf as a processor under Art. 28 GDPR, for the purpose of operating and securing the website.

The legal basis is our legitimate interest in a website that is technically reliable and protected against attack, Art. 6 (1) (f) GDPR. Server log data is not merged with other data and is not used to identify individual visitors.

3. What this website does not do

The following is not a promise of restraint but a description of the site as it is built:

• No cookies. The site stores nothing on your device — no cookies, no local storage, no session identifiers. That is also why you are not asked to consent to anything.
• No analytics and no tracking. No web analytics, no tracking pixels, no advertising networks, no social media plugins, no A/B testing.
• No third-party requests. Typefaces, images and scripts are served from our own server. Opening a page establishes no connection to Google Fonts, a content delivery network or any other third party.
• No contact form. There is nothing on this site that collects your data. Contact runs by email or phone.
• No profiling. No automated decision-making within the meaning of Art. 22 GDPR takes place.

4. When you contact us

If you write to us by email or call us, we process the data you provide — your name, contact details, and the content of your enquiry — in order to answer it and to handle any resulting business relationship.

The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns a contract or its initiation, and otherwise our legitimate interest in answering enquiries addressed to us, Art. 6 (1) (f) GDPR.

Please note that email is not an encrypted channel end to end. If your enquiry contains confidential information, tell us and we will agree on a different route.

5. How long data is kept

Server log data is deleted or anonymised by our hosting provider after a short period, as soon as it is no longer needed to detect and correct faults.

Correspondence is kept as long as it is needed to process the matter. Where correspondence forms part of a commercial or tax record, the statutory retention periods under German commercial and tax law apply — six or ten years depending on the document. Once they expire, the data is deleted.

6. Recipients and transfers

Personal data is passed on only where this is necessary to operate the website or to process your enquiry — in particular to our hosting and email providers, each acting as a processor bound by a data processing agreement. No data is sold, and none is passed on for advertising purposes.

A transfer to a country outside the European Economic Area is not intended. Should it become necessary in the course of a specific project, it will take place only on one of the legal bases set out in Art. 44 et seq. GDPR, and we will inform you beforehand.

7. Your rights

Under the GDPR you have the right, in respect of the personal data we hold about you, to:

• request information about it, free of charge, Art. 15 GDPR;
• have inaccurate data corrected, Art. 16 GDPR;
• have data erased, Art. 17 GDPR;
• have processing restricted, Art. 18 GDPR;
• receive the data in a portable format, Art. 20 GDPR;
• object to processing based on legitimate interests, Art. 21 GDPR;
• withdraw any consent you have given, with effect for the future, Art. 7 (3) GDPR.

To exercise any of these rights, an email to eduard.decker@edbio.de is enough.

8. Right to lodge a complaint

If you believe that we process your data unlawfully, you can lodge a complaint with a supervisory authority. The authority responsible for us is:

9. Changes to this policy

We update this policy when the way the website works changes — for example if a contact form or an analytics tool is added. The current version always applies, dated 30 July 2026.