Privacy Policy

Note: The English version of this Privacy Policy is for informational purposes only. Only the German version is legally binding.

Status: May 27, 2025

With this information, the responsible party mentioned under Section 1 ("We") informs the user of the website ("You" or "User") pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR) about the collection and processing of personal data. We also inform you when we store information on the device you use to access our website or when we access information already stored on your device.

For the use of third-party websites referred to by links, the respective providers’ privacy policies apply.

1.1 The data controller for this website is:

Alexander Thönnes

1.2 We are not required to appoint a data protection officer.

1.3 Our website is hosted by ALL-INKL.COM (www.all-inkl.com), meaning it is technically provided on this web host’s servers. The web host is a processor commissioned by us in accordance with Article 28 GDPR.

If we collect personal data from you, you as a "data subject" have the following rights:

2.1 Right of Access
You may request information under Article 15 GDPR about your personal data that we process.

2.2 Right to Object
You have the right to object on the grounds of Article 21(1) GDPR. We inform you separately about this under Section "B".

2.3 Right to Rectification
If your personal data is incorrect or incomplete, you can request rectification under Article 16 GDPR.

2.4 Right to Erasure
You can request the deletion of your personal data under the conditions of Article 17 GDPR.

2.5 Right to Restriction of Processing
You can request the restriction of processing ("blocking") under the conditions of Article 18 GDPR.

2.6 Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice under Article 77(1) GDPR.

2.7 Right to Data Portability
If you have provided us with personal data under Article 20(1) GDPR, you have the right to receive that data in a structured, commonly used, and machine-readable format or have it transmitted to a third party. The data collected for the provision of the website and the storage of log files (see 3.1 below) is technically necessary and not based on consent or a contract, but justified under Article 6(1)(f) GDPR. Therefore, Article 20(1) GDPR does not apply here.

3.1 What data is processed and for what purpose?

Each time website content is accessed, temporary information (data) is collected and stored by the web server of our web host. This may allow identification of the user and thus constitutes personal data.

3.1.1 The following data is collected and stored by our web host:

• IP address of the user
• Date and time of access
• Protocol used, e.g., HTTP
• Request method ("GET" or "POST")
• Requested content or file
• Access status (success, error, etc.)
• Transferred data volume in bytes
• Incoming and outgoing traffic
• Process ID
• Time taken to respond
• Referring website
• Browser used, OS, UI, browser language and version

3.1.2 This temporary storage is necessary to deliver the website and must be maintained for the duration of the session.

3.1.3 The IP address and data listed above are also stored in log files to ensure system functionality and security.

3.2 Legal Basis
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the technical operation and security of the website.

3.3 Additional Recipients
Our web host has technical access to the data as a processor.

3.4 Retention Period
Data is deleted when no longer needed for its intended purpose. Session data ends with the session; log files are retained for up to 90 days unless a security incident requires longer retention.

3.5 Obligation to Provide Data
You must provide the data in 3.1 to use our website. Otherwise, technical use is not possible.

Due to length, the translation continues in the next message...

Here is the continuation and conclusion of the English translation of your privacy policy:

4.1 What happens when we embed external content?

We sometimes integrate third-party content on our website—such as YouTube videos. This always requires that the third-party providers (hereinafter referred to as "third-party providers") can view the user’s IP address, because without the IP address they cannot send content to the user's browser. The IP address is thus necessary for displaying this content. We strive to use only content whose respective providers use the IP address solely for content delivery.

4.2 Legal Basis

The legal basis for embedding this content and the associated data transfer is our legitimate interest in presenting our website attractively and making it more user-friendly, according to Article 6(1)(f) GDPR.

4.3 YouTube

Our website may include YouTube videos that are stored on www.youtube.com and can be played directly from our website. These are all integrated in “privacy-enhanced mode,” meaning that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos is the data mentioned in 4.1 transferred. We have no influence on this data transfer.

The provider is:
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
("YouTube")

Google’s privacy policy is available at: https://policies.google.com/privacy

1. Individual Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1)(f) GDPR (data processing based on a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.

2. Recipient of an Objection

The objection can be made informally with the subject “Objection,” stating your name and address. Please send it to the contact mentioned in Section 1.