Privacy.

1 · Data protection at a glance

General information

The following overview explains what happens to your personal data when you visit this website. "Personal data" means any information that can identify you. Full details can be found in the policy below.

Data collection on this website

Who is responsible for data processing on this website? Data processing is carried out by the website operator. The operator's contact details are provided in the section "Information on the controller".

How do we collect your data? Some data you provide directly (for example, when you subscribe to the newsletter or write to us by email). Other data is collected automatically — or with your consent — by our IT systems when you visit the site. This is primarily technical data (e.g., browser, operating system, time of access) and is collected as soon as you enter the website.

What do we use your data for? Some data is collected to ensure the website functions without errors. Other data may be used to send you the newsletter you requested or to respond to your enquiry. If contracts can be initiated or concluded via the website, the transmitted data is also processed for offers, orders, or other service-related requests.

What rights do you have regarding your data? You have the right to obtain, at any time and free of charge, information about the origin, recipients, and purposes of your stored personal data. You also have the right to request rectification or deletion of this data. If you have given consent to processing, you can withdraw it at any time with effect for the future. Under certain conditions, you may request restriction of processing. You also have the right to lodge a complaint with a competent supervisory authority. You can contact us at any time about these rights or any other questions regarding data protection.

2 · Hosting

We host this website with the following provider:

IONOS. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur ("IONOS"). When you visit our website, IONOS collects various log files, including your IP address. For details, please see IONOS's privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Art. 6 (1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible. Where consent is requested, processing takes place exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Data processing agreement. We have concluded a data processing agreement (DPA) with the provider named above. This contract, required by data protection law, ensures that the provider processes website visitors' personal data only in accordance with our instructions and in compliance with the GDPR.

3 · General notes and mandatory information

Privacy

We take the protection of your personal data very seriously. We treat your data confidentially and in accordance with statutory data protection rules and this privacy policy. When you use this website, various personal data is collected. This policy explains what data we collect, what we use it for, and for what purposes. Please note that data transmission over the internet (e.g., email communication) may have security gaps. Complete protection of data from third-party access is not possible.

Information on the controller

The controller responsible for data processing on this website is:

Marcel Butschle
Experimental Design Hub
Campus Esslingen Stadtmitte, Room S 10.222
Kanalstraße 33
73728 Esslingen · Germany
Phone: +49 151 29018946
Email: marcel.butschle@experimentaldesignhub.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses).

Storage duration

Unless a more specific retention period is stated in this policy, your personal data remains with us until the purpose for processing no longer applies. If you request deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for retention (e.g., tax or commercial law obligations). In the latter case, deletion takes place after those obligations expire.

General information on the legal bases of data processing on this website

If you have consented to processing, we process your personal data on the basis of Art. 6 (1)(a) GDPR and, where special categories of data pursuant to Art. 9 (1) GDPR are processed, on the basis of Art. 9 (2)(a) GDPR. In the case of express consent to the transfer of personal data to third countries, processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), processing additionally occurs under § 25 (1) TDDDG. Consent may be withdrawn at any time. If your data is required to fulfil a contract or to carry out pre-contractual measures, we process it on the basis of Art. 6 (1)(b) GDPR. We also process data where necessary to fulfil a legal obligation (Art. 6 (1)(c) GDPR) or on the basis of our legitimate interests (Art. 6 (1)(f) GDPR). Information on the relevant legal basis in each case is provided in the sections below.

Recipients of personal data

In the course of our business, we work with various external parties. In some cases, transmitting personal data to these parties is necessary. We disclose personal data only when required to fulfil a contract, when we are legally obliged to do so (e.g., to tax authorities), when we have a legitimate interest pursuant to Art. 6 (1)(f) GDPR, or when another legal basis permits the transfer. When using processors, we disclose personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of your consent to processing

Many data processing operations are possible only with your express consent. You can withdraw consent at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to object to processing in special cases and to direct marketing (Art. 21 GDPR)

If processing is based on Art. 6 (1)(e) or (f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data; this also applies to profiling based on those provisions. The relevant legal basis for processing is set out in this policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims (Art. 21 (1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing; this also applies to profiling insofar as it is related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (Art. 21 (2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies. The competent authority for our place of business is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW).

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request direct transfer to another controller, this will occur only where technically feasible.

Access, rectification, and erasure

Within the scope of applicable law, you have the right at any time to free access to your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, the right to rectification or erasure. You can contact us at any time regarding this and other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of processing. You can contact us at any time for this purpose. The right exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of verification, you have the right to request restriction of processing.
• If the processing is unlawful, you may request restriction instead of erasure.
• If we no longer need your personal data but you need it for the establishment, exercise, or defence of legal claims, you have the right to request restriction instead of erasure.
• If you have objected under Art. 21 (1) GDPR, a balancing of interests must be carried out. Until it is determined whose interests prevail, you have the right to request restriction of processing.

If processing is restricted, such data — apart from storage — will be processed only with your consent or for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL/TLS encryption

For security and to protect the transmission of confidential content — such as orders or requests — you send to us as the website operator, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the change in the browser's address line from "http://" to "https://" and by the lock symbol. When SSL/TLS encryption is active, data you transmit cannot be read by third parties.

Objection to promotional emails

We hereby object to the use of contact data published in the context of legal notice obligations for the purpose of sending unsolicited advertising and information materials. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information, for example via spam emails.

4 · Data collection on this website

Server log files

When you visit this website, the hosting provider automatically collects and stores technical information sent by your browser in server log files. This includes browser type and version, operating system, referrer URL, the time of access, and the IP address.

This data is not merged with other data sources. Collection is based on Art. 6 (1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and optimisation of our website; for this, server log files must be recorded.

Cookies

Our website uses cookies. Cookies are small data packets that do not harm your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are deleted automatically after your visit. Persistent cookies remain stored until you delete them yourself or your browser deletes them automatically.

Cookies that are necessary to carry out the electronic communication process or to provide certain functions you request ("necessary cookies") are stored on the basis of Art. 6 (1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimised provision of services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is based exclusively on such consent (Art. 6 (1)(a) GDPR and § 25 (1) TDDDG); consent can be withdrawn at any time.

You can set your browser to inform you about the use of cookies, to allow cookies only in specific cases, to exclude them in certain cases or in general, and to enable automatic deletion when you close the browser. If cookies are disabled, some website functions may be limited.

Newsletter ("The Batch")

If you subscribe to our newsletter, we collect your name and email address. We use these solely to send you The Batch — occasional updates from EDH on new essays, workshops, and tools.

We use a double opt-in procedure: after you sign up, we send a confirmation email and only add you to the list once you click the confirmation link. This step, including the time of registration and confirmation and your IP address, is logged so that we can demonstrate that consent was given.

Newsletter delivery is operated by Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany), which processes the data on our behalf as a processor under Art. 28 GDPR. For details, see Brevo's privacy policy: https://www.brevo.com/legal/privacypolicy/.

Legal basis is your explicit consent (Art. 6 (1)(a) GDPR). You can withdraw consent and unsubscribe at any time via the link at the bottom of every email; this does not affect the lawfulness of processing carried out before withdrawal. Data stored for the purpose of the newsletter is kept by us until you unsubscribe and is deleted from our list after you cancel. Data stored for other purposes (e.g., email addresses for the member area) remains unaffected.

Inquiries by email or telephone

If you contact us by email or telephone, we store and process your inquiry, including all personal data arising from it (e.g., name, inquiry), for the purpose of handling your request. We do not share this data without your consent.

Processing is based on Art. 6 (1)(b) GDPR if your request is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries (Art. 6 (1)(f) GDPR) or on your consent (Art. 6 (1)(a) GDPR), where requested; consent can be withdrawn at any time.

The data you send to us via contact inquiries remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storage no longer applies (e.g., once your request has been handled). Mandatory legal provisions — particularly statutory retention periods — remain unaffected.

Fonts

The Archivo and JetBrains Mono typefaces are self-hosted on this site. No font data is transmitted to a third party when you load these pages.

Last updated: 13 June 2026