Privacy

Preliminary remark — what we do not do

• No tracking pixels, no third-party cookies, no advertising trackers.
• No user profiling, no segmentation by interests, no remarketing.
• No data transfer to third countries outside the EU/EEA without a valid legal basis. Hosting is at Hetzner in Germany.
• No social-media share buttons that load third-party scripts. If we link to a social platform, it is a plain hyperlink.

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. The following sets out how we handle your personal data when you use our website. Personal data here means any information that can identify you personally.

1.2 The controller for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Claus Lindemann, Claus Lindemann Unternehmensberatung, Virnsberger Weg 19, 91604 Flachslanden, Germany, phone: +49 1573 3194065, email: claus@claus-lindemann.de. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer, who can be reached as follows: Claus Lindemann, Virnsberger Weg 19, 91604 Flachslanden, phone: +49 9829 9324853, email: claus@claus-lindemann.de.

2) Data collected when you visit our website

2.1 If you only browse our website without registering or otherwise submitting information, we collect only the data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

• The page on our site that you visited
• Date and time of access
• Amount of data sent, in bytes
• Source / referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (where applicable, in anonymised form)

Processing takes place pursuant to Art. 6 (1) f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. We do not pass on or otherwise use the data. We reserve the right, however, to review the server log files retrospectively if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" string and the lock symbol in your browser bar.

3) Hosting

For hosting our website we use Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), which provides its services exclusively on servers within the European Union. All data collected on our website is processed on those servers. We have concluded a data-processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.

4) Contacting us

When you contact us (for example by email), personal data is collected. These data are stored and used solely for the purpose of answering your request or for the purpose of contact and the technical administration associated with it.

The legal basis for processing these data is our legitimate interest in answering your request pursuant to Art. 6 (1) f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) b GDPR. Your data will be deleted after your enquiry has been finally dealt with. This is the case where the matter has been clarified conclusively from the circumstances and no statutory retention obligations stand in the way.

5) Web-analytics service (Umami)

This website uses a web-analytics service based on the open-source software Umami (MIT licence). We host Umami ourselves on a server operated by Hetzner Online GmbH in Germany; there is no external provider and no transfer of data to third parties.

To protect site visitors, Umami uses a daily-rotating, anonymous hash to enable session-based usage analysis within a short window of up to 24 hours. This hash is calculated from the IP address, the User-Agent, the current calendar date and a secret salt — by including the calendar date, a new hash series is automatically produced each day. Umami does not set cookies and does not perform device fingerprinting. The IP address itself is not stored.

We additionally process Umami in a data-minimising way: a database trigger discards city, region, device type, screen resolution, operating system and browser name at the moment of insertion, so that they never reach the database. What is actually stored is: the requested URL and referrer, the country of origin (country level only, no finer granularity), the browser language, a timestamp and the daily-rotating hash described above. That is enough for us to see editorially which content is in demand and in which languages; we collect nothing further.

Where information processed in this way contains personal user data, processing takes place pursuant to Art. 6 (1) f GDPR on the basis of our legitimate interest in the statistical analysis of usage behaviour for optimisation purposes. To object to the processing of your visitor data for the future, please contact us at the address given in the imprint.

Because Umami runs on our own servers in Germany, no data collected via the service is transferred to third parties. In particular, no transfer to third countries outside the EU/EEA takes place.

6) Rights of the data subject

6.1 Applicable data-protection law grants you the following rights as a data subject vis-à-vis us as the controller in respect of the processing of your personal data; for the respective conditions of exercise reference is made to the legal basis cited:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7 (3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

7) Storage duration of personal data

The duration for which personal data is stored is determined by the relevant legal basis, the purpose of processing and — where applicable — the relevant statutory retention period (e.g. retention periods under commercial or tax law).

Where personal data is processed on the basis of an explicit consent pursuant to Art. 6 (1) a GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 (1) b GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer required for the performance or initiation of the contract and/or we no longer have a legitimate interest in further storage.

Where personal data is processed on the basis of Art. 6 (1) f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purpose of direct advertising on the basis of Art. 6 (1) f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless other information in this statement on specific processing situations indicates otherwise, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This privacy statement was drafted by the lawyers of the IT-Recht Kanzlei and is protected by copyright. Modifications regarding the web-analytics service (Umami instead of Matomo, self-hosted) and the hosting provider (Hetzner Online GmbH) by the controller.