Hosting — servers in Germany
Your website runs on German servers.
We run your presence with our cards on the table: the server is in Germany — Hetzner Online, Nuremberg — as our standard and at no extra cost. Delivery goes through a global network so your site loads quickly everywhere, and every service provider is named in the privacy policy. »Hosted in Germany« on its own only says where a machine stands — not who has access to it, nor which routes the page takes to reach a visitor. Both belong in the contract, not in the marketing copy.
What we deliver
- GDPR-compliant hosting in the EU
- Every service provider named in the privacy policy
- Fast & resilient
- No AWS, no Google Cloud, no Azure
- Data processing agreement under Art. 28 GDPR
- No lock-in: export and migration possible at any time
What you get out of it
Why it matters
Where your website lives has a hand in your legal risk and your response times. A server in the EU spares you the legal uncertainty around US data transfers and keeps your visitors' data where European data protection law applies. At the same time, infrastructure under our control means we can step in directly when there's a problem, instead of waiting on anonymous cloud support. A German server location on its own does not rule out that a provider from a third country has access — that is what Chapter V of the GDPR (Art. 44 onwards) covers, with appropriate safeguards such as the EU standard contractual clauses under Art. 46. This is why we do not write »100 % Germany« on the page but name every service provider involved. Anyone who can look it up does not have to take our word for it.
Numbers and sources
Google's threshold for »good« is 2,5 seconds — measured at the 75th percentile.
That is the threshold for the Largest Contentful Paint, the moment the largest visible element is in place. The key is the »75th percentile«: what counts is not the average, but that three out of four page loads come in below it — measured separately for mobile and desktop. A good average is worthless if every fourth visitor is left waiting.
Source: Google, web.dev/articles/vitals (Core Web Vitals, continuously maintained). Further thresholds: INP ≤ 200 ms, CLS ≤ 0,1.
How we work
Clarify requirements and location
We examine which data flows your presence has and where they are processed. On that basis we set the resources and the right environment — the server location is settled from the outset: Germany (Hetzner, Nuremberg), as the standard and not as an optional extra.
Set up on EU infrastructure
We set up your presence — server in Germany, delivered through a global network — including encryption, backups and separated environments. Every service provider involved is named in your privacy policy.
Operation, monitoring and maintenance
After go-live we monitor availability and load times and apply security updates. You have a dedicated point of contact, instead of working your way through a big provider's ticket system.
Contracts and evidence
Data processing agreement under Art. 28 GDPR, technical and organisational measures under Art. 32, and the list of sub-processors. These are not annexes for a drawer: anyone who has to show a supervisory authority where data sits needs those papers to hand.
Backups that have been restored
We back up regularly and test the restore, rather than relying on the backup merely existing. A backup that has never been restored is an assumption, not a backup.
Plan the exit from the start
When we set things up we already record what you get if you switch providers, and in which format. Changing provider should be a decision, not a project.
Tools we use for this
Your data sits in the EU, every service provider involved is named and contractually bound — and a dedicated point of contact keeps an eye on operations.
Common questions
Where exactly is my data?
The server is in Germany, at Hetzner Online in Nuremberg — that is our standard, at no extra cost. The website is delivered by a global network so it loads quickly everywhere — which means copies of the pages also sit outside Europe. A US company with European data centres is involved in that delivery; it is named in the privacy policy and covered by a data processing agreement and EU standard contractual clauses. Our own server sits at Hetzner Online in the Nuremberg data centre park; which locations Hetzner runs can be read up at hetzner.com/unternehmen/rechenzentrum.
What does green hosting mean in practice?
We do not currently make a green hosting promise of our own, because we cannot substantiate one ourselves. Which providers store and deliver your site is named in the privacy policy — you can look up their environmental figures there directly.
Can I move an existing website over to you?
Yes. We handle the migration including domain, email and certificates and coordinate the switch so your presence stays reachable. We clarify the exact process with you beforehand.
What does »hosted in Germany« actually mean?
On its own, only this: the machine your site sits on stands in a German data centre. It says nothing about who owns that data centre, who has administrative access, and which networks deliver the page. Those three points are what matters under data protection law, not the location alone. So ask for the data centre and its location, for the data processing agreement including the complete list of sub-processors, and for the services the page loads from outside servers when it opens.
Who owns my data?
You do. We process it as a processor under Art. 28 GDPR — on your instructions and only for the agreed purposes; we may not use it for our own. The data processing agreement records that in writing, together with the technical and organisational measures under Art. 32 GDPR and the list of every sub-processor by name. If that list changes, you are told and can object.
What happens if I want to move to another provider?
You get the complete state handed over: files, database, configuration and the access needed to keep running. We schedule the move so the old site stays reachable until the new one answers — the DNS switch is the last step, not the first. What happens to the data when the contract ends, deletion or return, is set by Art. 28(3)(g) GDPR and written into the contract, not left to our discretion.
Why does a global network deliver the site if the server is in Europe?
Because distance costs time. A request from Madrid to a server in Germany covers the same route every time; a delivery network keeps copies of the pages closer to the visitor. Google measures exactly that: »good« is a Largest Contentful Paint under 2.5 seconds, taken at the 75th percentile (web.dev/articles/vitals). The price is openness elsewhere — a US company with European data centres is involved in delivery, it is named in the privacy policy and bound by a data processing agreement and the EU standard contractual clauses under Art. 46 GDPR.
How do I tell whether my current provider really hosts in the EU?
By three questions that can be answered in writing. First: what is the data centre called and where does it stand? Second: is there a data processing agreement under Art. 28 GDPR with a complete list of sub-processors? Third: which services does your page load from elsewhere when it opens — fonts, maps, videos, analytics? The third one fails most often: the server stands in Germany, the font is still fetched from an outside server, and that server thereby learns the IP address of every visitor.