Datenschutz
This page needs a GDPR-compliant privacy policy written for the final operating entity before launch. What the site actually collects today: the contact details and project description submitted through the configurator or contact form, stored in the database and sent by email to the operator. Google Analytics is wired up but loads only after the visitor accepts it: nothing from Google is requested, and no cookie is set, until then. The policy must therefore cover GA4 — the data collected, Google as a processor, the transfer to the US under the Data Privacy Framework, the retention period set on the property, and how consent is withdrawn.