Privacy policy

Last updated: November 2026

This English version is provided for convenience. The German version (Datenschutzerklärung) is authoritative.

1. Controller

Lino Raphael Pfaff & Patrik Neo Stoll GbR (Pfaff & Stoll)
Alte Weinsteige 33, 70180 Stuttgart, Germany
Represented by its partners Lino Raphael Pfaff and Patrik Neo Stoll

Email: patrik.stoll@pfaff-stoll.de
Phone: +49 174 1750108

We are not required to appoint a data protection officer. Please send any questions about data protection to the contact details above.

2. The key points first

This website does not set cookies, does not use analytics or tracking tools and does not embed content from third parties. Fonts and images are stored on our own web space. No data is therefore transferred to third parties such as Google when you visit the site.

3. Hosting and server log files

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Each time the site is accessed, the server automatically processes data transmitted by your browser:

• IP address
• date and time of access
• page accessed and amount of data transferred
• the previously visited page (referrer)
• browser and operating system

This data is needed to deliver the website and to ensure its operation and security, for example to fend off attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website. The data is not combined with other data and is deleted as soon as it is no longer needed for these purposes.

IONOS processes this data on our behalf. We have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR.

4. Encryption

The website is delivered over an encrypted connection (TLS). You can recognise this by the “https://” in your browser’s address bar.

5. Contact by email, phone or contact form

If you contact us by email or phone, we process the information you provide, for example your name, company, contact details and the content of your enquiry, in order to answer your enquiry.

The contact form on this website does not send anything to a server. When you submit it, it opens your own email program with a prepared message to us. We only receive your details by email once you send that message from your email program.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in answering enquiries. We delete your details once your enquiry has been dealt with, unless statutory retention obligations apply, for example under German commercial and tax law (§ 257 HGB, § 147 AO).

6. Email accounts at Microsoft 365

Our email accounts run on Microsoft 365 provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes emails on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

A transfer to Microsoft Corporation in the USA cannot be ruled out. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision pursuant to Art. 45 GDPR. In addition, the European Commission’s standard contractual clauses apply.

7. Your rights

You have the right to

• access the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

8. Obligation to provide data, automated decision-making

You are not obliged to provide us with any data. Without contact details, however, we cannot reply to you. No automated decision-making, including profiling, takes place.

9. Changes

We update this policy when the website or the legal situation changes. The version published here applies.