Privacy

Privacy Policy

The protection of your personal data is important to me. Below, I inform you about which data is processed when you visit this website, for what purpose, and on what legal basis. The decisive framework is the General Data Protection Regulation (GDPR) in conjunction with the German Federal Data Protection Act (BDSG) and the TDDDG.

Controller

The controller responsible for data processing on this website is:

CTSEO | Christopher Tepper
Erkrather Str. 401
40231 Düsseldorf
Germany

Phone:0211 158 981 79
Email:info@ctseo.de
Internet:www.ctseo.de

The controller alone or jointly with others determines the purposes and means of the processing of personal data, such as names or contact details.

Your rights as a data subject

At any time and within the framework of the legal requirements, you have the following rights: the right to information about the data stored about you (Art. 15 GDPR), to rectification of incorrect data (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), as well as a right to object to certain processing (Art. 21). You can revoke a consent you have given at any time with effect for the future (Art. 7(3)). An informal message to the contact details given above is sufficient for a request.

Right to data portability

You have the right to have data that I process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

Revocation of your consent to data processing

Many processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal message by email is sufficient for this. The lawfulness of the data processing carried out up to the revocation remains unaffected by the revocation.

Right to object (Art. 21 GDPR)

If data is processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. I will then no longer process the data concerned, unless there are compelling legitimate grounds that override your interests, or the processing serves to assert, exercise, or defend legal claims.

Right to lodge a complaint with the supervisory authority

In the event of a breach of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The authority responsible for my place of business is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf. A list of all data protection officers together with contact details can be found at bfdi.bund.de.

SSL and TLS encryption

For security reasons and to protect confidential content, this website uses SSL or TLS encryption. As a result, data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the prefix "https://" in the address bar and the padlock symbol in your browser.

Hosting and server log files

This website is hosted by a German provider. The provider is united-domains GmbH, Gautinger Strasse 10, 82319 Starnberg, Germany. The provider processes personal data on my behalf that arises when the website is visited, in particular the following technical access data that your browser automatically transmits:

The servers are located in Germany. This data is evaluated for the secure, stable, and functional provision of the website and is not merged with other data sources. The legal basis is my legitimate interest in reliable operation (Art. 6(1)(f) GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the provider.

Cookies

This website currently sets no analytics, marketing, or tracking cookies and does not embed any corresponding third-party services. Only technically necessary operations are used, which are required for the operation and delivery of the page and do not require consent. Should services requiring consent be added in the future, they will only be used after your active consent via a cookie banner pursuant to § 25 TDDDG; consent can be revoked at any time.

Contact form

If you send me an inquiry via the contact form, I process the data you enter (in particular your name, email address, and optionally phone number, website, and your message) in order to handle your inquiry and to be available for any follow-up questions. The transmission is encrypted.

The processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR), which you expressly give in the form, and, insofar as your inquiry is aimed at concluding a contract, on the basis of Art. 6(1)(b) GDPR. You can revoke your consent informally by email at any time. The data remains with me until you ask me to delete it, revoke your consent, or the purpose for storing it no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected. The data is not passed on to third parties without your consent.

Processing and delivery of your inquiry

I first process your form data directly on my own web space with united-domains GmbH in Germany. When you submit the form, the data you entered is processed by a server-side script and then delivered to my mailbox as an email. No external form service is used, and your entries are not passed to a third-party provider for form processing. The data is used solely to handle your inquiry.

To send and receive your inquiry as an email, I use Google Workspace as my email service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your message is transmitted via Google's authenticated servers and received in my mailbox hosted there. A data processing agreement under Art. 28 GDPR is in place with Google. Processing by Google LLC in the USA cannot be ruled out; it is based on the European Commission's adequacy decision under the EU-US Data Privacy Framework, under which Google is certified, and additionally on the European Commission's standard contractual clauses. I use the same mailbox when you contact me directly by email.

The legal basis for the processing is your consent (Art. 6(1)(a) GDPR), which you expressly give when submitting the form, and, where your inquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR. You can withdraw your consent at any time with effect for the future. Transmission is encrypted.

Contact by email or phone

If you contact me directly by email or phone, I process your details exclusively to handle your request. The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to a contract, otherwise my legitimate interest in responding (Art. 6(1)(f)) or your consent (Art. 6(1)(a)). I delete your data as soon as your request has been conclusively handled and no statutory retention obligations stand in the way.

Contact via WhatsApp and Telegram

On my website I offer you the option to contact me through the messenger services WhatsApp and Telegram. The corresponding buttons are plain links. No provider content is embedded in my website, and simply visiting my site transmits no data to WhatsApp or Telegram. Only when you click one of these buttons does the respective service open and you actively get in touch with me.

If you message me via WhatsApp or Telegram, I process the data you transmit (in particular your name, your phone number or username, and the content of your message) in order to handle your request. The legal basis is the consent you give through your active contact (Art. 6(1)(a) GDPR) and, where your request is directed at concluding a contract, Art. 6(1)(b) GDPR. These channels are a voluntary additional option; equivalent alternatives such as email, phone, and the contact form are available to you at any time.

Please note that the messenger providers are independently responsible for processing your data within their own services and may collect their own data such as metadata. The provider of WhatsApp in the European region is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of the Meta group. A transfer to the United States to WhatsApp LLC and Meta Platforms, Inc. is possible; it relies on the European Commission's adequacy decision under the EU-US Data Privacy Framework, under which both companies are certified. The provider of Telegram is Telegram FZ-LLC, based in Dubai, United Arab Emirates; processing outside the EU is possible here and is safeguarded through the European Commission's standard contractual clauses. For details on what data the providers process, please see their privacy notices: WhatsApp at whatsapp.com/legal/privacy-policy-eea and Telegram at telegram.org/privacy.

You can revoke the consent given through these channels at any time with effect for the future by informing me informally.

Fonts

This website uses the Inter typeface, which is embedded locally on the server. The font files are loaded exclusively from my own server. No connection is made to third-party servers such as Google Fonts, and no associated transmission of your IP address takes place.

Web analytics with Plausible

To statistically analyze the use of this website, I use Plausible Analytics. The provider is Plausible Insights OÜ, Tartu, Estonia. Plausible works without cookies and does not place cookies or comparable technologies on your device. No personal data is stored, no profiles are created, and no cross-site tracking is carried out. Only anonymous aggregate figures are recorded, such as page views, number of visitors, referral source, and approximate region. Processing takes place on servers in Germany, and the data does not leave the EU. The legal basis is my legitimate interest in data-minimizing reach measurement (Art. 6(1)(f) GDPR). Since no personal data is processed and no information is stored on or read from your device, no consent is required for this.

Status and changes to this policy

Last updated: July 2026. I will adjust this privacy policy as soon as changes to the website or to the services used make this necessary, for example when introducing analytics or marketing services. You can access the current version at any time on this page.