Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:
Leon Lotz · Musketier Software · Kreuznacherstraße 14a, 55232 Alzey · kontakt@musketier.net

2. Principles & legal bases

We process personal data according to the principles of data minimisation and purpose limitation. Legal bases are in particular Art. 6(1)(a) (consent), (b) (contract/pre-contractual measures) and (f) (legitimate interest) GDPR. Hosting takes place within the EU.

3. Hosting

This website is hosted by netcup GmbH, Karlsruhe (Germany). A data processing agreement (Art. 28 GDPR) is in place with the provider. When the site is accessed, the server automatically processes so-called server log files (IP address, date/time, requested resource, browser type), which are stored briefly for security reasons. Legal basis: Art. 6(1)(f) GDPR.

4. Contact form & email

If you contact us via the form or by email, we process the data you provide (name, email, subject, message) to handle your enquiry. Legal basis: Art. 6(1)(b) or (f) GDPR. For the technical delivery of emails we use the EU provider Brevo (Sendinblue GmbH/Sendinblue SAS) as a processor. The data is deleted as soon as it is no longer required for the purpose and no retention obligations stand in the way.

5. Appointment booking

For appointment booking we use a self-hosted cal.com on our own subdomain cal.musketier.net (our own server in the EU) — no external booking provider. The booking widget is embedded directly on the contact page. When you book, we process the details you provide (name, e-mail, optional message) to arrange and carry out the appointment (Art. 6(1)(b) GDPR). To avoid double bookings, availability is checked against our Google Calendar; appointment data is transmitted to Google (Google Ireland Ltd.), where applicable with a third-country transfer based on appropriate safeguards (Art. 46 GDPR). Confirmation e-mails are sent via our EU provider Brevo.

6. Fonts (web fonts)

This website embeds fonts self-hosted (no Google Fonts CDN). No transfer of your IP address to third parties for font delivery takes place. Legal basis for local use: Art. 6(1)(f) GDPR.

7. Cookies & audience measurement

Technically necessary cookies/local storage (e.g. language choice) are set without consent. For audience measurement we use the self-hosted, cookieless analytics tool Matomo (on stats.musketier.net, our own EU server): it stores no cookies, anonymises your IP address (truncated by 2 bytes) and transmits no data to third parties. Due to this data-minimising configuration no consent is required (legal basis: Art. 6(1)(f) GDPR – legitimate interest in privacy-friendly audience measurement); the browser “Do Not Track” setting is honoured. The optional read-aloud feature for individual blog articles uses the US service ElevenLabs (transfer based on appropriate safeguards, Art. 46 GDPR); only the public article text is transmitted for speech synthesis, no personal data. For appointment booking see section 5.

8. Your rights

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and data portability (Art. 20) GDPR.
• Objection to processing based on legitimate interests (Art. 21 GDPR).
• Withdrawal of consent given, with effect for the future.

9. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for the controller is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (LfDI RLP), Hintere Bleiche 34, 55116 Mainz, Germany. Under Art. 77 GDPR you may also contact the authority of your habitual residence, place of work or the place of the alleged infringement.

Last updated: June 2026. This English text is a non-binding translation for your convenience; the authoritative version is the German one (musketier.net/datenschutz).