Privacy notice

Last revised 3 August 2026.

1. Controller

Ferdinand Toma, Froni
Bettenhäuser Strasse 36
34266 Niestetal, Germany
Email: [email protected]

2. Hosting and delivery (Cloudflare)

This website is served through Cloudflare Pages and delivered over Cloudflare's content delivery network. When you open the page, Cloudflare processes technically necessary connection data, in particular your IP address, the date and time of access, the requested resource and the user agent. This processing serves the delivery of the page, its stability and the defence against attacks.

The legal basis is Article 6 (1) (f) GDPR, a legitimate interest in secure and efficient operation. Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. Connection data is stored only briefly.

3. No cookies

This website sets no cookies, stores nothing on your device and reads nothing from it. No third-party scripts are loaded.

4. Reach measurement (PostHog)

To understand how many people visit the page and where they come from, page views and signup submissions are counted server-side while the page is delivered. Nothing runs in your browser and nothing is stored on your device. Instead of a cookie, a pseudonymous identifier is computed from your IP address and browser characteristics with a hash that changes every day; the raw IP address is not stored with the event, and the identifier cannot be traced back to you after the day ends.

The legal basis is Article 6 (1) (f) GDPR, a legitimate interest in measuring the reach of the page. You can object to this processing at any time by writing to [email protected]. Provider: PostHog Inc.; the data is processed and stored on PostHog's European Union cloud. A data processing agreement is in place.

5. Email signup (Klaviyo)

If you enter your email address, it is transmitted server-side to our sending provider Klaviyo. Processed are the email address, the time of signup and the record of confirmation. Signup uses double opt-in: you receive a confirmation email and are only added after you confirm.

The purpose of the processing is the sending of the announced messages: the record of the making of the edition and the notice when the edition opens. The legal basis is your consent, Article 6 (1) (a) GDPR, in connection with Section 7 (2) UWG. You can withdraw consent at any time, through the unsubscribe link in every email or by writing to [email protected]. After withdrawal the address is suppressed for marketing purposes.

Provider: Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. A data processing agreement under Article 28 GDPR is in place with Klaviyo. The data is stored in the United States. Klaviyo is certified under the EU-US Data Privacy Framework; standard contractual clauses under Article 46 GDPR apply in addition.

6. Your rights

You have the right, towards the controller, to access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on Article 6 (1) (f) GDPR (Article 21). Consent you have given can be withdrawn at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Wiesbaden.

7. Voluntary provision

Providing your email address is voluntary. Without it, no message is sent; the website can be used without providing any data.