Privacy Policy

1. Privacy at a glance

The notes below give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can identify you. This website processes personal data only to the technically necessary extent: no cookies, no analytics, tracking or advertising tools and no third-party services that pass on data are used. Fonts are served locally from our own server.

Some data is collected when you provide it to us (e.g. via the contact form). Other data — mainly technical data such as browser, operating system or the time of the request — is recorded automatically in server log files when you visit the site, to ensure error-free and secure operation.

2. Hosting

We host the content of our website with the following provider: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (“All-Inkl”). For details see All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/. Use is based on Art. 6(1)(f) GDPR; we have a legitimate interest in presenting our website reliably.

Data processing agreement: we have concluded a data processing agreement (DPA/AVV) with this provider — a contract required by data protection law ensuring that our visitors’ personal data is processed only on our instructions and in compliance with the GDPR.

3. Controller

The controller for data processing on this website is: legalgraffiti 2.0 – Kevin Herzog Marie-Curie-Straße 20 72488 Sigmaringen Germany Phone: 0155 10319752 Email: info@legalgraffiti.de The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

4. Storage period & legal bases

Storage period: unless a more specific period is stated in this policy, your personal data remains with us until the purpose for processing no longer applies. If you make a legitimate erasure request or withdraw consent, your data is deleted unless legal retention periods (e.g. tax or commercial law) apply.

Legal bases: we process your data based on your consent (Art. 6(1)(a) GDPR), to perform or initiate a contract (Art. 6(1)(b)), to comply with a legal obligation (Art. 6(1)(c)), or based on our legitimate interest (Art. 6(1)(f)). The relevant basis in each case is stated in the respective section.

5. Server log files

The hosting provider automatically collects and stores information in server log files that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing device, time of the request and IP address. This data is not merged with other sources. The legal basis is Art. 6(1)(f) GDPR (technically error-free and secure operation). The data is deleted after a short period.

6. Contact form & email

If you contact us via the form or by email, your details (including the contact data provided) are stored to handle the request and any follow-up questions. Processing is based on Art. 6(1)(b) GDPR where the request relates to a contract or pre-contractual steps, otherwise on our legitimate interest in handling it (Art. 6(1)(f)) or your consent (Art. 6(1)(a)). We do not share this data without your consent and delete it once it is no longer needed or once statutory retention periods have expired.

7. Recipients & processors

In the course of our business, personal data may need to be passed to external parties. We only share data where required to perform a contract, where legally obliged, where we have a legitimate interest, or where another legal basis permits it. When using processors (e.g. our host), data is only shared on the basis of a valid data processing agreement.

8. Your rights

You have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and where applicable a right to correction or deletion. You have the right to request restriction of processing and the right to data portability. You may withdraw any consent given at any time with future effect. You also have the right to lodge a complaint with a supervisory authority (in Baden-Württemberg: the State Commissioner for Data Protection and Freedom of Information, LfDI). You can contact us at any time on any of these matters.

9. Right to object (Art. 21 GDPR)

Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. Where your data is processed for direct marketing, you have the right to object at any time; after an objection your data will no longer be used for that purpose.

10. SSL/TLS encryption

For security and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar switching from “http://” to “https://” and by the lock icon. When encryption is active, the data you send us cannot be read by third parties.

11. Statistics & cookies

To analyse how our website is used, we evaluate the server-side log files with the statistics tool included in our hosting package (e.g. Webalizer). The evaluation is performed exclusively server-side on the basis of the already-collected log files; IP addresses are shortened (anonymised) before evaluation. No cookies are set, no client-side (JavaScript) tracking is used and no data is passed to third parties. The legal basis is our legitimate interest in the needs-based design and statistical evaluation of our offering (Art. 6(1)(f) GDPR).

Beyond that, this website uses no consent-requiring cookies and no marketing or third-party services. Only technically necessary storage (e.g. your language and theme choice) is kept locally in your browser. As no information on your device is accessed, no consent is required under § 25(2) TDDDG and therefore no cookie banner is needed.