1. An Overview of Data Protection
General Information
The following information provides a comprehensive overview of how your personal data is processed when you visit this website. Personal data includes any information that can be used to identify you personally. Detailed information on data protection can be found in our comprehensive privacy policy text below.
Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is performed by the website operator. You can find the operator’s contact details in the “Information on the Responsible Party” section of this privacy policy as well as in our Legal Notice (Impressum).
How do we collect your data?
On one hand, your data is collected when you explicitly provide it to us. This could, for instance, be data you enter into a contact form or leave in a comment field. On the other hand, technical data is collected automatically or after you have given your consent by our IT systems when you visit our website. This data primarily consists of technical information (e.g., your internet browser, operating system, or the exact time you accessed a page). This data is recorded automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure the technical, error-free provision and security of the website. Other data may be used to analyze user behavior, optimize the website’s performance, or manage interaction via social media networks.
2. Legal Framework and General Information
Applicability of the GDPR
Since this website is operated from Germany, our data protection practices comply strictly with the General Data Protection Regulation (GDPR) of the European Union and the Federal Data Protection Act (BDSG).
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content—such as inquiries you send to us as the site operator—this website uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the padlock icon in your browser line. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
3. Information on the Responsible Party (Controller)
The responsible party (controller) for data processing on this website is:
Florian Meixner
Georgstr. 4
88214 Ravensburfg
Germany
Email: florianmeixnerdev@gmail.com
The responsible party (controller) is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
4. External Hosting and Server Log Files
Hosting by lima-city
Our website is hosted externally by the hosting provider lima-city (Bandwunder GmbH) (lima-city.de). Personal data collected on this website is stored directly on the hoster’s servers.
To ensure a secure, fast, and efficient provision of our online services by a professional provider, data processing is carried out based on Art. 6 para. 1 lit. f GDPR (our legitimate interest). We have concluded a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR with lima-city, ensuring that the hoster processes data strictly in accordance with our instructions and in a GDPR-compliant manner.
Server Log Files
The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These security log files include:
- IP address of the accessing device (stored for a maximum of 7 days)
- Unique ID of the access
- User-Agent header (including browser type, browser version, and operating system used)
- Date and time of the server request
- Referrer URL (the page from which you visited us)
This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation, security, and optimization of its website—server log files must be recorded for this purpose.
5. Data Processing through WordPress Core Features
This website is built on the WordPress content management system.
Comments Feature
When you use the comment function on this website, the information you enter into the form fields, your IP address, and your browser’s user-agent string are stored. This is done to help us prevent spam and abuse. This processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 lit. a GDPR (consent) if you actively choose to save your name and email address in cookies for future comments.
Cookies
Our website uses cookies. Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device.
Technically necessary cookies (e.g., to manage user login states or comment functions) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing technically necessary cookies for the optimized provision of its services. If your consent to the storage of cookies has been requested, the storage takes place exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR); consent can be revoked at any time.
6. Analysis and Optimization Tools (Google Site Kit)
Our website uses the WordPress plugin Site Kit by Google (withgoogle.com). This plugin serves to integrate various administrative and optimization tools provided by Google directly into our website management system. Through this plugin, data is transferred to the provider Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). When using these services, data may also be transferred to Google LLC in the USA.
The legal basis for the use of analysis tools via Site Kit is your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time via our Cookie Consent banner. The integrated services process data as follows:
Google Analytics 4 (GA4)
Through Google Site Kit, we use Google Analytics 4, a web analysis service. Google Analytics uses cookies and similar technologies to analyze your use of our website (e.g., pages viewed, click patterns, dwell time, approximate location, and technical browser information).
IP Anonymization: We have configured the plugin so that your IP address is truncated by Google within member states of the European Union or in other contracting states party to the Agreement on the European Economic Area before being transmitted to the USA. The full IP address is only transferred to a Google server in the USA and truncated there in exceptional cases. The truncated IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data held by Google.
Data stored by Google at the user level (such as random User-IDs) will be automatically deleted after 14 months. For more details, please view the Google Privacy Policy (google.com).
Google Search Console
We also use the Google Search Console via Site Kit. This tool does not use cookies and does not collect personal tracking data from website visitors. Instead, it measures aggregate technical data regarding how our website performs in Google search results. Personal visitor profiles are not created through this service.
7. Social Media Presences (Corporate Profiles)
We maintain publicly accessible profiles on various social networks. Your visit to these profiles initiates numerous data processing operations. If you are logged into your respective social media account and visit our profile, the network operator can assign this visit directly to your user account.
Social networks can also analyze your user behavior comprehensively when you are not logged in or do not possess an account. This data is used by the network operators to create user profiles for personalized advertising.
Our social media presences are intended to ensure the widest possible corporate presence on the internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on alternative legal bases specified by the operators (e.g., consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Detailed Information on Social Media Platforms:
Meta Platforms (Facebook & Instagram)
- Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
- Privacy Policy: facebook.com
- Joint Responsibility (Art. 26 GDPR): We have concluded a joint controller agreement with Meta for the processing of Page Insights data. You can find details regarding this processing via the Meta Page Insights Joint Controller Addendum.
YouTube
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Privacy Policy: google.com
X (formerly Twitter)
- Provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
- Privacy Policy: twitter.com
TikTok
- Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
- Privacy Policy: tiktok.com
8. Your Rights as a Data Subject
As a data subject, the GDPR grants you comprehensive rights regarding the processing of your personal data:
- Right to Access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us, its origin, recipients, and the purpose of the data processing free of charge at any time.
- Right to Rectification (Art. 16 GDPR): You have the right to demand the immediate correction of incorrect or incomplete personal data stored by us.
- Right to Erasure / Right to be Forgotten (Art. 17 GDPR): You have the right to request the deletion of your personal data stored by us, provided that the processing is no longer necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
- Right to Restriction of Processing (Art. 18 GDPR): You have the right to demand the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure, or if we no longer need the data but you require it for legal claims.
- Right to Data Portability (Art. 20 GDPR): You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent (Art. 7 para. 3 GDPR): You can revoke consent you have already given at any time. This does not affect the lawfulness of the data processing carried out up to the point of revocation.
- Right to Object to Data Collection in Specific Cases and to Direct Advertising (Art. 21 GDPR): If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims.
- Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR): In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, your place of work, or the place of the alleged violation.