Privacy Policy
As of: February 2026
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information can be found in the sections below of this privacy policy.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The contact details can be found in the section “Controller” as well as in the legal notice (Imprint).
How do we collect your data?
- Provided by you: e.g. when you contact us via contact form or email or (in the future) place an order in the shop
- Collected automatically: technical data (e.g. browser type, operating system, time of access, IP address) is collected by our IT systems when you visit the website
What do we use your data for?
- To ensure the error-free operation and security of the website
- To process contact inquiries
- (In the future) To process orders, payments and possibly customer accounts in the WooCommerce shop
Analytics tools and third-party tools
We currently do not use Google Analytics or comparable web analytics tools. We do not create user profiles for advertising purposes. If analytics tools are used in the future, this will only take place with your explicit consent.
2. Information about us as the Data Controller
The data controller responsible for this website is:
First name: Alexander
Last name: Schiller
Title: Dr. ès sc. habil.
Address: Am Steiger 09
Postal Code / City: 07743 Jena
Emailadresse: schiller@fazilitation.de
3. Hosting and Server Log Files
External Hosting
This website is hosted by an external service provider (hoster). Personal data collected on this website is processed on the hoster’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, website access data, and (in the future) contract and order data.
The hoster is used for the purpose of fulfilling contracts with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing a secure, fast, and efficient online service through a professional provider (Art. 6(1)(f) GDPR).
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hoster.
Hosting provider:
HostPress GmbH
Bahnhofstraße 34, 66571 Eppelborn, Germany
Phone: +49 6881 9999 777
E-Mail: info@hostpress.de.
Server Log Files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation, optimization, and security of the website).
4. Cookies & Consent Management
4.1 Cookie Manager / Consent Tool („Must-Have-Cookie“)
To obtain and manage consent for the use of non-essential cookies and for loading external content, we use a cookie manager: Must-Have-Cookie.
When visiting the website, a cookie or similar storage is created in your browser to document your preferences (consent/refusal), so that you are not asked again on subsequent visits and your choices can be implemented technically.
Typically processed data includes consent status, time of consent, a pseudonymous consent ID, and technical connection data (e.g. IP address). Logging serves as proof of consent.
Legal basis:
Art. 6(1)(c) GDPR (legal obligation to document consent)
Art. 6(1)(f) GDPR (legitimate interest in legally compliant, user-friendly consent management)
You can prevent or restrict cookies through your browser settings. You can also withdraw or adjust your consent at any time via the “Cookie / Privacy Settings”.
4.2 Cookies (General)
Our website uses cookies. Cookies are small text files and do not cause any damage to your device.
They are either stored temporarily (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically after your visit. Persistent cookies remain stored on your device until you delete them or your browser deletes them automatically.
Cookies have various functions. Some cookies are technically necessary for the website to function. Others are required to load external content (e.g. videos or fonts) after consent.
Legal basis:
Art. 6(1)(f) GDPR (necessary cookies)
Art. 6(1)(a) GDPR (consent-based cookies)
5. Contact Requests / Contact Options
5.1 Contact via Email / Phone
If you contact us by email or telephone, the data you provide will be processed for the purpose of handling your request.
Providing this data is necessary to process and respond to your inquiry. Without it, we may not be able to respond or only to a limited extent.
Legal basis: Art. 6(1)(b) GDPR
Your data will be deleted once your request has been fully processed, provided that no legal retention obligations apply (e.g. in the case of subsequent contractual processing).
5.2 Contact Form (Contact Form 7)
If you submit inquiries via the contact form, your data from the form, including the contact details you provide, will be stored for the purpose of processing your request and in case of follow-up questions.
We use the WordPress plugin Contact Form 7 to provide the contact form.
Depending on configuration, your IP address may also be processed (possibly in pseudonymized form) to prevent misuse (e.g. spam protection) and to ensure technical security.
Legal basis: Art. 6(1)(b) GDPR
6. Google Fonts
This website uses Google Fonts for the uniform display of fonts. These fonts are provided by Google.
When you access a page, your browser loads the required fonts to correctly display text and fonts.
For this purpose, your browser must connect to Google’s servers. This allows Google to obtain knowledge that this website was accessed via your IP address. Additional technical information (e.g. browser type, time of request) may also be processed.
Legal basis: Art. 6(1)(a) GDPR (consent), if Google Fonts are loaded externally.
Note on data transfers to third countries:
Processing by Google may take place outside the EU (e.g. USA). In such cases, data transfer is carried out in accordance with GDPR requirements.
7. Embedded Videos (Vimeo)
Videos may be embedded on our website via Vimeo. The provider is Vimeo.com, Inc.
When accessing a page with an embedded Vimeo video, a connection to Vimeo is established. During this process, your IP address and technical information (browser/device) may be processed. Vimeo may also use cookies or similar technologies.
Vimeo content is only loaded if you have consented to external media via the cookie consent tool.
Legal basis: Art. 6(1)(a) GDPR (consent)
8. eCommerce and Payment Providers (WooCommerce – upcoming)
8.1 WooCommerce
We plan to provide an online shop based on WooCommerce. Once the shop is active, personal data will be processed for contract fulfillment and delivery.
Legal basis:
Art. 6(1)(b) GDPR (contract fulfillment)
Art. 6(1)(c) GDPR (legal obligations)
8.2 PayPal
If you choose to pay via PayPal, the data required for payment processing will be transmitted to PayPal.
Provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
Legal basis: Art. 6(1)(b) GDPR
8.3 WooCommerce Payments (Credit Card Payments)
For credit card payments, we use WooCommerce Payments (often technically provided via Stripe).
Payment and transaction data, as well as potentially security and device-related information, may be processed.
We generally do not receive full credit card data, but only confirmations, tokens, and status information.
Legal basis:
Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR (fraud prevention and security)
9. Social Media
We maintain online profiles on social networks in order to communicate with customers, interested parties, and the public and to inform about our services.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in communication and public relations)
Where consent is required: Art. 6(1)(a) GDPR
Please note that we have limited control over data processing by social media providers. For questions or to exercise your rights, please contact the respective provider directly.
Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square, Dublin 2, Ireland
https://privacycenter.instagram.com/policy
Meta/Instagram: https://www.facebook.com/help/contact/540977946302970)
Provider:
LinkedIn Ireland Unlimited Company
Wilton Plaza, Wilton Place, Dublin 2, Ireland
https://de.linkedin.com/legal/privacy-policy
Opt-Out (Retargeting): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
10. Services We Do Not Use (now)
We do not use:
Facebook Pixel
Google Analytics
YouTube embedding
Newsletter services
11. SSL / TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.
You can recognize an encrypted connection by the “https://” in your browser’s address bar and the lock symbol.
12. Rights of Data Subjects
You have the following rights under GDPR:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR), particularly against direct marketing
- Right to withdraw consent (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Right to Object (Art. 21 GDPR)
If processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation.
13. Data Retention
Your data will be deleted or blocked as soon as the purpose of storage ceases, unless statutory retention obligations prevent deletion or otherwise stated in this privacy policy.
14. Objection to Marketing Emails
We hereby object to the use of contact data published in the context of the legal notice obligation for the purpose of sending unsolicited advertising and information material.
15. Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect changes in legal requirements or changes to our services (e.g. activation of the shop).