Privacy policy
1. Controller
Philip Vosbeck
Holzhauser Str. 2
83329 Waging am See
Email: kontakt@vosbeck-digital.de
2. Hosting & server log files
This website is hosted by ALL-INKL.COM – Neue Medien Münnich. When you access it, the server automatically records technical access data (date/time, requested URL, browser type) in server log files. Your IP address is fully anonymised before it is stored – 11.22.33.44 becomes 0.0.0.0; it cannot be traced back to an individual. From these anonymised log files the host compiles a purely technical access statistic. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in secure, trouble-free operation). A data processing agreement (Art. 28 GDPR) is in place with the host. The log files are deleted automatically after seven days.
No personal data of visitors is transferred to countries outside the EU or the EEA. The servers, fonts, scripts and images of this website are held exclusively by the host named above, in Germany; no external services are embedded.
3. Cookies & storage on your device
This website sets no cookies and does not use sessions. A cookie banner is therefore not required. Your device’s local storage (localStorage or sessionStorage) holds exactly three technical items: the language you select above, so that it still applies on your next visit; a marker that keeps the one-off redirect to your chosen language from repeating; and the address of the page currently open, which page navigation needs for your browser’s back button. No page content is stored there. All three stay on your device and are transmitted neither to me nor to any third party. This storage is strictly necessary for the service you explicitly requested (Section 25 (2) no. 2 TDDDG) and therefore does not require consent. You can delete it at any time via your browser’s site data.
4. Contact form
When you use the contact form, I process the data you provide (topic, name, email address, message) solely to handle your enquiry. The legal basis is Art. 6 (1)(b) or (f) GDPR. The data is sent to me by email and deleted as soon as your enquiry has been fully handled and no statutory retention obligations apply. If an enquiry cannot be delivered by email because of a technical fault, it is stored instead on the server outside the publicly accessible area so that it is not lost; I delete it once it has been handled. To prevent spam I use a technical field that is invisible to you (honeypot) and a limit on the number of enquiries per sender. For that limit your IP address is not stored in plain text; only a check value derived from it with a secret key is stored. The check value expires after one hour and is deleted during the next clean-up run. The legal basis for this is Art. 6 (1)(f) GDPR (legitimate interest in preventing abusive enquiries).
5. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority. Because of its particular importance, the right to object is set out in the next section.
6. Right to object
Where I process data on the basis of a legitimate interest (Art. 6 (1)(f) GDPR – this concerns the server log files described in section 2 and the contact form’s spam defences described in section 4), you have the right to object to that processing on grounds relating to your particular situation (Art. 21 (1) GDPR). An informal message to the email address given above is enough. I will then stop processing the data concerned, unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
This page is a translation provided for convenience. Only the German version is legally binding.