Privacy Policy

Placeholder — this page needs a real GDPR-compliant privacy policy before going live. It should at minimum cover:

• The controller's identity and contact details
• What data the contact form collects and why (Art. 6 GDPR legal basis)
• How long data is retained and where it's stored (this server, Strato, Germany)
• Any third-party services used (e.g. Google Fonts — currently loaded from Google's CDN, which itself has privacy implications worth reviewing)
• User rights (access, deletion, objection) and contact for exercising them

We can draft this together once the imprint/legal details are final — a privacy policy needs to reference the same responsible entity.