This is a convenience translation. The legally binding version is the German original. View the German version.

Privacy Policy

This privacy policy applies to the website curatic.swinx.de.

As of: July 2026

1. Controller

2. Basis of processing

We process personal data only to the extent necessary and on the basis of the GDPR, in particular Art. 6(1)(b) (contract / pre-contractual measures) and (f) (legitimate interest in the secure and functional operation of the website).

3. Hosting & server log files

This website is served as a static site via AWS Amplify Hosting and the content delivery network Amazon CloudFront (Amazon Web Services, Inc. / Amazon Web Services EMEA SARL). When the page is accessed, the hosting service processes technically necessary access data (server log files), including:

• IP address of the requesting device
• date and time of access
• requested URL / volume of data transferred
• referrer URL as well as browser and operating-system information

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the secure, stable and attack-protected operation of the website.

4. Appointment booking via HubSpot

Via the "Book an appointment" / "Intro call" buttons, a link takes you to a booking calendar provided by HubSpot (HubSpot, Inc., USA), hosted on the domain meetings.hubspot.com. Only when you actively click this link and book an appointment there is the data you enter (e.g. name, email address, preferred date) processed by HubSpot. HubSpot is not embedded on curatic.swinx.de itself and no cookies are set for this purpose. The legal basis for arranging an appointment is Art. 6(1)(b) and (f) GDPR. HubSpot's own privacy policy additionally applies.

5. Getting in touch

The calls to action ("Book an appointment", etc.) on this page lead to appointment booking (see section 4). If you additionally contact us by email at the address named in section 1, we process your details (email address, content of the message) exclusively to handle your request. The legal basis is Art. 6(1)(b) or (f) GDPR.

6. Fonts

The fonts used are served locally from our own server (self-hosting). There is no connection to Google Fonts or other external font services; no data is transmitted to third parties in this regard.

7. Cookies & tracking

This website sets no cookies and uses no analytics, tracking or marketing tools (no Google Analytics, no pixels, no reach measurement). When the page loads, no requests whatsoever are triggered to third-party servers.

8. Transfer to third countries (USA)

The providers named in section 3 (AWS/CloudFront) and section 4 (HubSpot) are US companies or may transfer data to the USA. The providers are certified under the EU-US Data Privacy Framework, or the EU Commission's Standard Contractual Clauses (SCC) are used as appropriate safeguards pursuant to Art. 46 GDPR.

9. Storage period

Server log files are stored only for as long as necessary for the stated purposes or for security reasons, and are then deleted. Email enquiries and appointment bookings are deleted as soon as they are no longer required for processing and no statutory retention obligations conflict.

10. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) as well as a right to object to processing based on legitimate interests (Art. 21). A message to the contact address above is sufficient to exercise these rights.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence or of the alleged infringement (Art. 77 GDPR). The authority responsible for the controller is the Berlin Commissioner for Data Protection and Freedom of Information.