Skip to content

Privacy policy

How we handle your data.

The controller responsible for processing on this website is Brooksfleet LLC. Contact details are on the “Legal notice” page. For privacy questions, write to the email address given there.

We process personal data only where needed to run the website, to answer your enquiries or — with your consent — to analyse how the site is used. There is no advertising, no user account and no contact form.

The website is hosted by DigitalOcean, LLC (105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA) on a server in Frankfurt am Main, Germany. DigitalOcean is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.

When you open the website, the web server automatically records the following in log files:

  • IP address of the requesting device
  • date and time of access
  • requested address (URL) and HTTP status code
  • referrer URL and browser identifier (user agent)

This data is technically required to deliver the website securely and to fend off attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Log files are deleted automatically after 14 days.

We store your choice from the cookie banner in your browser's local storage (entry “bf-consent”). This entry is strictly necessary (§ 25(2) TDDDG) and holds no personal data other than your choice and when you made it. After 4 days we ask again. You can change your choice at any time via “Cookie settings” in the footer.

We use Google Analytics 4 and Google Tag Manager, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Both load when you open the website but run in consent mode (Google Consent Mode): without your consent no cookies are set and no identifiers are stored. Google then only receives cookieless signals without an identifier (such as the page viewed, time and browser type), which Google may use for statistical modelling.

Google Analytics creates pseudonymous usage statistics so we can improve the website. It processes, among other things, pages viewed, time on page, device and browser information and approximate location (based on the shortened IP address). Google Analytics 4 does not store full IP addresses. Advertising features are disabled.

For this, the cookies “_ga” and “_ga_<ID>” are set for up to 2 years. Google Tag Manager manages how these services are loaded and sets no cookies itself.

The legal basis for analytics with cookies is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG; for the cookieless signals without consent it is our legitimate interest in basic reach measurement under Art. 6(1)(f) GDPR. You can withdraw your consent at any time via “Cookie settings”; we then remove the analytics cookies. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework.

If you email us, we process the information you provide (e.g. name, email address, content of your message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where a possible engagement is concerned, otherwise our legitimate interest under Art. 6(1)(f) GDPR. We delete the data once it is no longer needed and no statutory retention obligations apply.

All fonts are served from our own server. No connection to third-party servers is made.

You have the right to:

  • access your stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)

You may lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

We update this privacy policy when the website or the law changes. The version published here applies.

Last updated: 30 September 2026