Privacy Policy

Last updated: 2026-07-08

1. General information

We take the protection of your personal data very seriously. This Privacy Policy informs you which personal data is processed when you visit and use this website, for what purposes this is done, on what legal basis the processing takes place, and what rights you have under the General Data Protection Regulation (GDPR) and applicable national data protection laws.

You can generally use this website without actively providing any personal information. However, when the website is accessed, technically necessary access data is processed in order to deliver the website, operate it reliably and protect it against misuse.

2. Controller

The controller within the meaning of the GDPR is:

Clemens & Barenbrock GbR
Kump 4
51377 Leverkusen
Germany
Telephone: +49 (0)214 – 89 08 01 33
Email: datenschutz [- at -] braverabbit [- dot -] com

3. Hosting and server log files

This website is hosted by STRATO. According to the provider, the server location is in Germany.

When this website is accessed, technically necessary access data is processed by the hosting provider and stored in so-called server log files. This may include, in particular:

  • browser type and browser version
  • operating system used
  • referrer URL
  • hostname of the accessing computer
  • IP address of the accessing device
  • requested file or URL
  • date and time of the server request
  • HTTP status code
  • amount of data transferred

The processing of this data is necessary in order to deliver the website, ensure stable and secure operation, and detect technical faults or misuse. We do not combine this data with other data sources for the purpose of identifying individual visitors.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of this website.

Server log files are only stored for as long as necessary for the aforementioned purposes. Insofar as STRATO provides log files to us or processes them internally for the optimization and security of the website, this is done in a data-protection-compliant, anonymized form. Under the current configuration, the provided log files are deleted or made unavailable no later than after seven days. Untruncated, personal IP addresses are not stored beyond the duration of the actual communication process.

We have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR.

4. No cookies, no analytics, no tracking

This website does not set cookies, does not use analytics or tracking services, and does not integrate marketing tools. Your usage behaviour is not evaluated.

No comparable technologies such as local storage or session storage are used, unless they are required for the purely technical operation of the website.

5. Fonts

The fonts used on this website are hosted locally on our own server. When the website is accessed, no connection is established to Google Fonts or to any other external font providers.

6. Contact form

If you send us an enquiry via the contact form, we process the information you enter. This includes, in particular, your name, email address and message text. We use this data exclusively to process your enquiry and for any follow-up questions.

The message is transmitted to our own mailbox via an authenticated SMTP connection with our hosting or email provider. No external form, analytics or marketing service providers are involved.

To protect against spam, we use a server-side honeypot field and a simple time check. No additional personal data is collected for this purpose beyond the technical processing of the form submission.

If your enquiry relates to a contract or pre-contractual measures, the processing is carried out on the basis of Art. 6(1)(b) GDPR. In all other cases, the processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in processing incoming enquiries and communicating with senders. The anti-spam measures are also carried out on the basis of Art. 6(1)(f) GDPR, our legitimate interest in the security and functionality of the contact form.

Recipients or categories of recipients are our hosting and email service provider, as well as the persons internally responsible for handling the enquiry.

The data transmitted via the contact form will be deleted once your enquiry has been conclusively processed and no statutory retention obligations prevent deletion. If an enquiry leads to a contractual relationship, an invoice, a licence or another business transaction, statutory retention periods may apply, in particular under commercial or tax law.

Providing your data in the contact form is voluntary. However, without a valid email address, we will not be able to respond to your enquiry.

7. External links and YouTube

We do not embed YouTube videos or other external media directly on this website. Where we refer to video work or external content, we use locally stored preview images and regular external links.

As long as you only visit this website, no connection is established to YouTube, Google or any other external media provider as a result. Only when you actively click an external link do you leave our website. From that point onwards, the respective external provider is responsible for the data processing that takes place there.

External links, in particular to YouTube, may trigger data processing by the respective provider. This may also include the transfer of personal data to third countries, such as the United States. Please refer to the privacy policies of the respective providers.

8. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address line begins with “https://” and a lock symbol is displayed.

Encryption protects the data you transmit during transmission against being read by third parties in accordance with the current state of the art.

9. Recipients and data processing on our behalf

Personal data is processed only to the extent necessary for operating the website, handling enquiries or fulfilling legal obligations.

Personal data is only disclosed to third parties if there is a legal basis for doing so, if this is necessary to process your enquiry, if we are legally obliged to do so, or if you have previously given your consent.

For hosting and email services, we use STRATO as a service provider. Where STRATO processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

10. No automated decision-making

Automated decision-making, including profiling, does not take place.

11. Your rights

Subject to the statutory requirements, you have the right at any time to obtain information about the personal data concerning you. You also have the right to rectification of inaccurate data, erasure, restriction of processing, data portability and objection to certain types of processing.

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future.

Where processing is based on Art. 6(1)(f) GDPR, you may object to this processing on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority. In particular, the competent supervisory authority may be the data protection authority of the federal state in which our company is based.

12. Questions about data protection

If you have any questions about the processing of your personal data or wish to exercise your rights, please contact the controller named above.