Privacy Policy

Updated: 23 September 2026

Controller

Bendix Amonat
Malwine-Enckhausen-Weg 9B
30457 Hannover
Germany
Email: bendix@bendix-amonat.com
Telephone: +49 511 43837267

Website operation

We operate this website on our own server infrastructure in Germany. Requests involve IP address, timestamp, requested URL, response status and browser, device and, where transmitted, referrer information. Processing serves delivery, troubleshooting and security, based on our legitimate interests in reliable and secure operation (Article 6(1)(f) GDPR). Technical logs are rotated according to operational and troubleshooting needs; extracts needed for a specific security incident or legal claim may be retained until that matter is resolved. IP addresses and device identifiers can be personal data. Connections use HTTPS.

Contact and email

We process the names, contact details, company details where provided, and messages you submit to answer enquiries and arrange or perform contracts. The legal basis is Article 6(1)(b) GDPR for contracts with you and Article 6(1)(f) GDPR for general enquiries or company contacts. Required fields are necessary to use the form; email and telephone remain available as alternatives.

Email is provided through Fastmail Pty Ltd, Australia, processing sender, recipient, message and delivery information. Processing may take place outside the EEA, including in the USA and Australia. See the Fastmail privacy policy and Data Protection Agreement for provider information and its standard contractual clauses. You may also contact us for information about safeguards applicable to your communication.

Cookies, consent and third-party content

Complianz manages your choice concerning optional services. Saving that choice serves implementing and documenting consent (Articles 6(1)(c) and 7(1) GDPR; section 25(2) TDDDG). Optional device storage/access and related personal-data processing require consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. You can change or withdraw consent using “Manage consent”. Login, security and explicitly selected language functions use storage necessary for the requested service. Fonts are hosted locally. External links contact the other website when followed.

Google Maps and YouTube embeds are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, after your approval. The contact form uses Google reCAPTCHA against abuse and requires your approval before that service loads. You may contact us by email instead. These services process IP address, browser and page information and, for reCAPTCHA, device and interaction information. Processing in the USA is possible. See Google privacy and transfer safeguards. Details and cookie lifetimes are in our Cookie Policy.

Lesson registration

Registration involves contact, address, selected lesson and contract information, legal-representative details where applicable, and signatures. We create and retain contract documents in an access-controlled customer archive and send necessary documents by email. Processing is based on Article 6(1)(b) GDPR and statutory retention duties under Article 6(1)(c). Necessary billing information is processed for invoicing. Please do not submit health data unnecessary for your enquiry.

Recipients and retention

Access is limited to people and providers requiring it for the respective purpose, and authorities or advisers where legally required or necessary for legitimate claims. Enquiries are retained until resolved and any necessary evidentiary purpose ends. Account data is retained for account operation and subsequent necessary records. Contract, business and billing records follow applicable commercial and tax retention duties. Information required for claims is retained in accordance with applicable limitation periods. Data is deleted or anonymised once purposes and obligations end. Recovery backups are replaced through the regular backup cycle and are not used for new business purposes.

Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction and portability (Articles 15–20 GDPR). Consent can be withdrawn for the future without affecting prior lawful processing. You may object under Article 21 GDPR to processing based on legitimate interests for reasons arising from your particular situation; you may object to direct marketing at any time.

You can complain to a supervisory authority, particularly where you live, work or suspect an infringement. Our supervisory authority is the Lower Saxony Commissioner for Data Protection, Postfach 221, 30002 Hannover, Germany. The website communications described here do not involve solely automated decisions with legal or similarly significant effects under Article 22 GDPR.