1. Privacy at a glance
General information
The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can identify you personally. Detailed information is provided in this privacy policy.
Data collection on this website
Who is responsible for collecting data?
The website operator processes data on this website. Contact details are provided in the section about the controller below.
How do we collect your data?
Some data is collected when you provide it to us, for example by entering information into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data, such as your browser, operating system or the time of your visit. Collection takes place automatically when you access the website.
What do we use your data for?
Some data is collected to ensure the website works correctly. Other data may be used to analyse your usage behaviour.
What rights do you have?
You may request information about the source, recipients and purpose of your stored personal data free of charge at any time. You may also request its correction or deletion. If you have consented to processing, you may withdraw that consent at any time with effect for the future. In certain circumstances, you may request restriction of processing. You also have the right to complain to the competent supervisory authority.
You can contact us at any time about these rights or other privacy questions.
Analytics and third-party tools
Your browsing behaviour may be statistically analysed when you visit this website, primarily through analytics software. Further information is provided below.
2. Hosting
We host our website content with the following provider:
External hosting
This website is hosted externally. Personal data collected on this website is stored on the hosting provider's servers. This may include IP addresses, contact enquiries, metadata, communication data, contract data, contact details, names, website access records and other data generated through a website.
External hosting serves to fulfil contracts with potential and existing customers (Article 6(1)(b) GDPR) and our interest in providing a secure, fast and efficient online service through a professional provider (Article 6(1)(f) GDPR). Where consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as consent covers storing cookies or accessing information on the user's device, such as device fingerprinting. Consent may be withdrawn at any time.
The hosting provider processes your data only as necessary to fulfil its service obligations and follows our instructions concerning that data.
Our hosting provider: Netlify.
3. General information and mandatory disclosures
Data protection
The operators of this website take the protection of your personal data seriously. We treat personal data confidentially and in accordance with applicable data protection laws and this privacy policy.
Various personal data is collected when you use this website. This policy explains which data we collect, why we use it, and how processing takes place.
Data transmission over the internet, for example by email, may have security vulnerabilities. Complete protection against access by third parties is not possible.
The controller
The controller responsible for processing personal data on this website can be contacted at:
Phone: 017681560238
Email: marcel.wagner.willmering@gmail.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.
Retention period
Unless a more specific retention period is stated in this policy, your personal data remains with us until its processing purpose no longer applies. If you submit a valid deletion request or withdraw consent, your data will be deleted unless another legally permissible reason requires retention, such as tax or commercial retention obligations. In that case, deletion takes place when those reasons no longer apply.
Legal bases for processing
Where you have consented, we process personal data under Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR for special categories of data under Article 9(1). Express consent to transfers to third countries also provides a basis under Article 49(1)(a) GDPR. Consent to storing cookies or accessing information on your device, such as device fingerprinting, also provides a basis under Section 25(1) TTDSG. Consent may be withdrawn at any time.
Data needed to fulfil a contract or take pre-contractual steps is processed under Article 6(1)(b) GDPR. Processing required by law is based on Article 6(1)(c) GDPR. Processing may also rely on legitimate interests under Article 6(1)(f) GDPR. The applicable legal bases are described in the relevant sections below.
Withdrawal of consent
Many processing operations require your express consent. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
Objection in particular circumstances and to direct marketing (Article 21 GDPR)
If processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation, including to profiling based on those provisions. The relevant legal basis is stated in this policy. Following an objection, we will stop processing the personal data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims (Article 21(1) GDPR).
If your personal data is processed for direct marketing, you may object at any time, including to profiling related to such marketing. Following an objection, your personal data will no longer be used for direct marketing (Article 21(2) GDPR).
Complaints to a supervisory authority
If the GDPR is infringed, affected individuals may complain to a supervisory authority, particularly in the member state of their habitual residence, workplace or the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
Data portability
You may request data we process automatically on the basis of consent or a contract in a commonly used, machine-readable format, for yourself or a third party. Direct transfer to another controller is provided where technically feasible.
Access, deletion and correction
Within the applicable legal provisions, you may request free information about your stored personal data, its source, recipients and processing purpose, and may request correction or deletion. You can contact us about these rights or other questions concerning personal data.
Restriction of processing
You may contact us at any time to request restriction of processing in the following circumstances:
- You contest the accuracy of your stored data. Processing may be restricted while we verify its accuracy.
- Processing is unlawful. You may request restriction instead of deletion.
- We no longer need the data, but you need it to establish, exercise or defend legal claims. You may request restriction instead of deletion.
- You have objected under Article 21(1) GDPR. Processing may be restricted while we determine whose interests prevail.
Once processing is restricted, data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.
SSL and TLS encryption
This website uses SSL or TLS encryption for security and to protect the transmission of confidential content, such as orders or enquiries sent to us. An encrypted connection can be recognised by the address changing from “http://” to “https://” and the browser's lock symbol.
When SSL or TLS encryption is enabled, the data you send us cannot be read by third parties.
Objection to promotional emails
We object to the use of contact details published to fulfil legal disclosure obligations for sending unsolicited advertising or information. The website operators expressly reserve the right to take legal action against unsolicited advertising, including spam emails.
4. Data collection on this website
Cookies
Our website uses cookies, which are small data packages that do not harm your device. They are stored temporarily for a session or permanently. Session cookies are deleted automatically after your visit. Permanent cookies remain until you delete them or your browser deletes them automatically.
Third-party companies may also store cookies when you visit our website. These allow us or you to use certain third-party services, such as payment processing.
Cookies serve different purposes. Many are technically necessary for website features, such as shopping carts or displaying videos. Others analyse user behaviour or display advertising.
Cookies needed for electronic communication, requested features or website optimisation, such as audience measurement, are stored under Article 6(1)(f) GDPR unless another legal basis is stated. The operator has a legitimate interest in technically correct and optimised services. Where consent is requested for cookies or comparable recognition technologies, processing is based exclusively on that consent under Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.
You can configure your browser to notify you about cookies, allow them individually, refuse them in certain cases or entirely, or delete them automatically when the browser closes. Disabling cookies may limit website functionality.
Where cookies from third parties or for analytics are used, we will provide information in this policy and request consent where applicable.
Server log files
The website provider automatically collects and stores information your browser sends in server log files:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address
This data is not combined with other data sources.
Collection is based on Article 6(1)(f) GDPR. The operator has a legitimate interest in technically correct presentation and optimisation of the website, which requires server logs.
Enquiries by email, phone or fax
If you contact us by email, phone or fax, we store and process your enquiry and the personal data it contains, such as your name, to handle your request. We do not share this data without your consent.
Processing is based on Article 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual steps. Otherwise, processing relies on our legitimate interest in handling enquiries effectively under Article 6(1)(f) GDPR, or your consent under Article 6(1)(a) GDPR where requested. Consent may be withdrawn at any time.
Data from contact enquiries remains with us until you request deletion, withdraw consent to storage, or the storage purpose ends, for example once your enquiry has been handled. Mandatory legal provisions, particularly retention periods, remain unaffected.