Privacy Policy
Controller
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Andre Vornholt
Your Data Subject Rights
You may exercise the following rights at any time using the contact details provided, in accordance with the EU General Data Protection Regulation (GDPR):
- Access to your data stored by us and its processing (Art. 15 GDPR),
- Rectification of inaccurate personal data (Art. 16 GDPR),
- Erasure of your data stored by us (Art. 17 GDPR),
- Restriction of processing, where we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR), and
- Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us consent, you may revoke it at any time with effect for the future.
You may at any time lodge a complaint with a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence, or the authority responsible for us as the controller.
A list of supervisory authorities (for the non-public sector) with postal addresses is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Processing Activities
Collection of General Information When Visiting Our Website
Nature and Purpose of Processing
When you access our website — i.e. when you do not register or otherwise submit information — information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar data.
It is processed in particular for the following purposes:
- Ensuring a smooth connection to the website
- Ensuring smooth use of the website
- Ensuring and evaluating system security and stability, in particular for abuse detection
- Technically correct display and optimization of the website
We do not use your data to draw conclusions about your person. However, we reserve the right to retrospectively review the server log files should concrete indications of unlawful use come to our attention.
Legal Basis and Legitimate Interest
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and abuse detection.
Recipients
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.
Retention Period
Data is stored in server log files in a form that permits identification of the data subjects for a maximum of 14 days, unless a security-relevant event occurs (e.g. a DDoS attack).
In the event of such an incident, server log files are stored until the security-relevant event has been resolved and fully investigated.
Provision Required or Necessary
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.
Objection
Please read the information about your right to object under Art. 21 GDPR below.
Contact
Nature and Purpose of Processing
Our website contains a contact form that can be used for electronic contact. If a user makes use of this option, the data entered in the input form is transmitted to us and stored.
At the time the message is sent, the following data is also stored:
- Date and time of the request
- URL from which the request was made
Contact is also possible via the provided email addresses. In this case, the user's personal data transmitted with the email is stored. This includes the date and time the email was sent, the email address, IP addresses, and information about the servers involved in the email communication.
Regardless of the communication method chosen, we collect the content of your inquiry. Your data is stored for the purpose of individual communication with you.
Legal Basis
The processing of data is carried out on the basis of a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in processing your data is to enable uncomplicated contact.
If you contact us to request a quote, the processing of data is carried out for the performance of pre-contractual measures (Art. 6(1)(b) GDPR).
Recipients
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.
Retention Period
The data you submit is used exclusively to process your inquiry. After final processing of the inquiry, the data is deleted unless statutory retention obligations prevent this.
If a contractual relationship is established, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper bookkeeping and tax law requirements.
Provision Required or Necessary
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with the necessary data and the reason for the inquiry.
Objection
Please read the information about your right to object under Art. 21 GDPR below.
Reach Measurement
Nature and Purpose of Processing
Reach measurement serves to evaluate visitor flows on our online offering and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can identify, for example, at what time our online offering or its features or content are used most frequently, or which areas require adjustment.
You will find below which tools we use for reach measurement.
Legal Basis
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest. The measurement of reach and the resulting information are suitable for adapting the web offering.
Recipients
We employ technical service providers for the operation and maintenance of our website, who act as our processors.
Retention Period
Information on retention periods can be found in the information about the tools used below.
Provision Required or Necessary
The provision of data is neither legally nor contractually required.
Objection
Please read the information about your right to object under Art. 21 GDPR below.
Tools Used for Reach Measurement
Umami (Self-Hosted)
We take data sovereignty 100% seriously. From the upload of your manuscript to anonymous visitor statistics (Umami), not a single byte leaves our dedicated server in Germany. We do not use any third-party cloud for analytics. Browser Do Not Track signals are not evaluated as an automatic opt-out for this reach measurement.
Information About Your Right to Object Under Art. 21 GDPR
Case-by-Case Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Recipient of an Objection
Andre Vornholt
[email protected]
Changes to Our Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your next visit will then be subject to the new privacy policy.
Questions About Data Protection
If you have questions about data protection, please send an email to the controller named above.
Copyright Notice
This privacy policy was created with the help of activeMind AG — the experts for external data protection officers (Version #2024-10-25).