Privacy Policy

Privacy Policy / Datenschutzerklärung

Information per Article 13, 14 GDPR · TTDSG · § 5 TMG

1. Controller / Verantwortlicher (Art. 4(7) GDPR)

Dmytro Kovalenko
Rotenburger Str. 10
34127 Kassel
Deutschland

E-Mail: [email protected]
Phone: +49 176 2040 1420

2. Data Protection Officer

A Data Protection Officer (DPO) is not appointed, as the legal requirements under § 38 BDSG are not met (the operation does not regularly employ more than 20 persons engaged in automated personal data processing). For privacy-related questions, please contact the controller above directly.

3. Competent Supervisory Authority (Art. 13(2)(d) GDPR)

You have the right to lodge a complaint with the competent supervisory authority:

Landesbeauftragte/r für Datenschutz und Informationsfreiheit Hessen

Contact details and complaint form: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)

4. General Information on Data Processing

4.1 Scope of personal data processing

We process personal data of our users only insofar as necessary to provide a functional website and our content. The processing of personal data occurs regularly only with the consent of the user (Art. 6(1)(a) GDPR) or when the processing is permitted by legal regulations.

4.2 Legal basis

Art. 6(1)(a) GDPR — consent (cookie banner, newsletter)
Art. 6(1)(b) GDPR — contract performance (where applicable)
Art. 6(1)(c) GDPR — legal obligation (tax records)
Art. 6(1)(f) GDPR — legitimate interest (logging, security, fraud prevention)

4.3 Data deletion and retention period

Personal data are deleted as soon as the purpose of storage no longer applies. Retention may occur if provided for by European or national legislator in EU Regulations, statutes or other legal regulations to which the controller is subject. Specific retention periods are listed per service below.

5. Provision of the Website and Server Log Files

5.1 Description and scope

Each time our website is accessed, our system automatically collects data and information from the requesting device’s computer system. The following data is collected:

IP address (anonymised after processing)
Date and time of the request
Time zone difference to GMT
Content of the request (specific page)
Access status / HTTP status code
Volume of data transferred
Website from which the request comes (Referer)
Browser type and version
Operating system

5.2 Legal basis

Art. 6(1)(f) GDPR (legitimate interest in IT security and proper functioning).

5.3 Retention

Server log files are stored for a maximum of 14 days, then automatically deleted.

6. Use of Cookies

We use cookies on our website. Cookies are small text files stored by your browser. Information set in the cookie can be transmitted to us upon visiting our site. Cookies cannot execute programs or transmit viruses to your computer.

We use a Consent Management Platform (Real Cookie Banner) that complies with § 25 TTDSG. Non-essential cookies (analytics, advertising) are only set after your explicit consent. You can withdraw consent at any time via the “Cookie settings” link in our footer.

For a complete list of cookies and their purposes, see our Cookie Policy.

7. Services and Third-Party Tools

7.1 Google Site Kit / Google Analytics 4

Provider: Google Ireland Limited, Gordon House, 4 Dock, Dublin, D04 E5W5, Ireland (data may be transferred to Google LLC in the United States under the EU-US Data Privacy Framework adequacy decision of 10 July 2023).

Purpose: Web analytics — understanding how visitors use the site to improve content and structure.

Measurement ID: GT-T56GC3RN

Data processed: IP address (anonymised via IP-Anonymization), device identifiers, browser type, OS, pages visited, time spent, referrer.

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner) + § 25(1) TTDSG.

Retention: 14 months (default GA4).

Opt-out: via cookie banner “Reject all” or “Cookie settings”; or by installing the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout

7.2 Google AdSense

Provider: Google Ireland Limited (see 7.1).

Purpose: Display of personalised and non-personalised advertisements. Funds the site’s operation.

Publisher ID: ca-pub-6206096249917111

Data processed: IP address, browser fingerprint, advertising ID, page context, prior interactions with Google services.

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner, TCF v2.2 signal). Non-personalised ads may still be served if consent is withheld, based on Art. 6(1)(f) (legitimate interest in funding the service).

Opt-out: Cookie banner “Reject” rejects personalised ads; ad personalisation can be adjusted at myadcenter.google.com

7.3 Pinterest Conversion Tag

Provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

Purpose: Pinterest analytics — measuring engagement of pins linking to this site.

Data processed: IP address, browser fingerprint, pages visited.

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).

Opt-out: Cookie banner “Reject all” or “Cookie settings”.

7.4 Cloudflare (CDN + Security)

Provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Data may be processed in the United States under the EU-US Data Privacy Framework adequacy decision of 10 July 2023, and standard contractual clauses where applicable.

Purpose: Content delivery network, DDoS protection, bot mitigation. Necessary for secure operation of the site.

Data processed: IP address (kept short-term for security logs), HTTP request headers, security cookies (cf_clearance, __cf_bm).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in IT security and performance — operating a public website requires DDoS protection).

DPA reference: cloudflare.com/cloudflare-customer-dpa

Retention: Security logs up to 30 days at Cloudflare, then deleted.

7.5 Hetzner Online GmbH (Hosting)

Provider: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany.

Purpose: Server hosting in Germany (Falkenstein / Nuremberg data centres).

Data processed: All website content + server logs.

Legal basis: Art. 6(1)(f) GDPR.

AV-Vertrag (Auftragsverarbeitung): in place per Art. 28 GDPR.

7.6 WordPress / Yoast SEO / Site Kit

Yoast SEO — SEO plugin. Operates locally on our server. No personal data is transmitted to third parties by Yoast itself.

Google Site Kit — Connects WordPress to Google Analytics + Search Console + AdSense. Data processing under Site Kit is identical to 7.1 and 7.2.

8. Your Rights (Art. 15-22 GDPR)

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) — to obtain confirmation whether we process your personal data, and copies of that data.
Right to rectification (Art. 16 GDPR) — to correct inaccurate data.
Right to erasure (Art. 17 GDPR) — to have data deleted under specified conditions.
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR) — to receive your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR) — to object to processing based on Art. 6(1)(f).
Right to withdraw consent (Art. 7(3) GDPR) — at any time, for any consent-based processing.
Right to lodge a complaint (Art. 77 GDPR) — see Section 3 above for the competent supervisory authority.

To exercise any of these rights, contact us at [email protected]. We respond within 30 days per Art. 12(3) GDPR.

9. International Data Transfers

Some of the services above (Google, Cloudflare) process data in the United States. Such transfers are based on the European Commission’s adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) for participating organisations, and additionally on Standard Contractual Clauses (Art. 46(2)(c) GDPR) where applicable.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available at this URL. Substantial changes will be announced via a banner on the homepage.

Last updated: 2026-06-01