Controller
The controller responsible for processing personal data on this website is:
Overview
This website uses no cookies and no analytics, tracking or advertising services. I only process personal data where it is needed to run the website or where you send me data yourself, for example through the contact form.
Hosting and visiting the website
This website is hosted by ALL-INKL.COM (Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany). A data processing agreement under Art. 28 GDPR is in place with the host.
When you open a page, your browser sends technically necessary data to the server: your IP address, date and time, the address requested, the amount of data transferred, browser and operating system, and the page you came from. I need this data to deliver the website and keep it secure.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is a working and secure website.
The connection is encrypted with TLS, which you can recognise by “https://” in your browser's address bar.
Contact form, email and phone
When you write to me through the contact form, I process your salutation, last name, email address and message, and optionally your title, first name and company. The enquiry is stored and sent to me by email. You receive a confirmation at the address you entered. Both emails are sent by the mail server of ALL-INKL.COM.
I use this information only to answer your enquiry. The same applies when you email or call me.
The legal basis is Art. 6(1)(b) GDPR if your enquiry concerns a contract or steps towards one, otherwise Art. 6(1)(f) GDPR. My legitimate interest is answering enquiries.
I delete the data once your enquiry has been dealt with, unless statutory retention obligations require me to keep it.
Map and route planner
The map shows map data from OpenStreetMap. My server loads the map tiles and delivers them itself, so your browser does not connect to OpenStreetMap.
If you use the route planner, you send your starting point to my server. If you enter an address, the server looks up its coordinates using the Nominatim service of the OpenStreetMap Foundation. Only the text you entered is sent, not your IP address. If you choose “My location”, your browser asks for your permission first.
The website then forwards you to the route planner on openstreetmap.org with start and destination. From there, the privacy policy of the OpenStreetMap Foundation, based in the United Kingdom, applies.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is showing you the way to me without passing your data to third parties unless you use the route planner.
Videos
Some pages contain videos from YouTube or Vimeo. The preview image is delivered by my server. The video itself only loads when you click on it. Until then there is no connection to these services.
After the click, the provider receives your IP address among other data: for YouTube this is Google Ireland Limited (embedded via youtube-nocookie.com), for Vimeo it is Vimeo.com, Inc. in the USA. The privacy policies of Google and Vimeo apply.
The legal basis is your consent under Art. 6(1)(a) GDPR. The website remembers your decision in your browser's storage (localStorage) so that further videos from the same provider start right away. You can withdraw your consent at any time by deleting the stored website data in your browser.
Stored settings
Whether you prefer the light or dark view is stored in your browser's localStorage. This setting stays on your device and is not sent to me.
The legal basis is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because the storage is needed for the display you asked for.
Your rights
You have the right to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
Where I process data based on a legitimate interest, you can object (Art. 21 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
For questions about data protection, you can reach me using the contact details above.