1. Controller

The controller for data processing on this website is:

Noely Gerardinee Sperling
Ullrichstr. 25
87437 Kempten
Germany
Email: contact@dgerals.com

We have not appointed a data protection officer, as the conditions of Section 38 BDSG (German Federal Data Protection Act) do not apply.

SichtbarLokal, Andreas Sperling, Ullrichstr. 25, 87437 Kempten, is engaged as a processor pursuant to Art. 28 GDPR for the technical maintenance of this website.

Please note: the German version of this privacy policy is the authoritative one. This translation is provided for convenience.

2. General

We process personal data only where necessary to operate this website or where you have given your consent. Personal data means any information relating to you, such as your name, email address or IP address.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place.

When you access this website, the server automatically collects data transmitted by your browser:

• IP address of the requesting device
• date and time of access
• name and URL of the file retrieved
• volume of data transferred
• notification of whether the request was successful
• browser type and version
• operating system
• referrer URL

This data serves the technical operation, stability and security of the website and the prevention of attacks. It is not combined with other data sources.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing this website securely and without disruption.

Retention: [[ERGÄNZEN: Speicherdauer der Server-Logfiles – bei IONOS erfragen]]

4. SSL/TLS encryption

This website uses SSL or TLS encryption, indicated by the padlock symbol in your browser's address bar. Data transmitted cannot be read by third parties.

5. Cookies and consent management

We use cookies and comparable technologies. Consent is managed via the IONOS Consent Manager provided by IONOS SE.

Strictly necessary cookies are set without your consent. They are essential for operating the website, for example to store your privacy settings. Legal basis: Section 25(2) no. 2 TDDDG; for subsequent processing, Art. 6(1)(f) GDPR.

All other cookies and technologies are set only after you have given consent via the cookie banner. Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by clicking "Datenschutzeinstellungen" in the footer. The lawfulness of processing carried out before withdrawal remains unaffected (Art. 7(3) GDPR).

Cookies used:

• [[ERGÄNZEN: Name des Consent-Cookies]] – IONOS SE – stores your privacy settings – [[ERGÄNZEN: Laufzeit]]
• _ga – Google – distinguishes visitors – 2 years
• _ga_[container ID] – Google – stores session state – 2 years

6. IONOS SiteAnalytics

We use IONOS SiteAnalytics, an audience measurement service provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

The following are recorded:

• the previously visited website (referrer)
• the page or file requested
• browser type and version
• operating system and device type
• time of access
• the IP address in anonymised form, used solely to determine the approximate location of access

The service uses a counting pixel and server-side log files. No cookies are set and nothing is stored on your device. Processing takes place exclusively in Germany and the European Union; no transfer to third countries occurs.

Purpose: to understand which content is of interest so we can improve the website technically and editorially.

Legal basis: Art. 6(1)(a) GDPR (consent). As no access to your device takes place, Section 25 TDDDG does not apply.

Retention: 8 weeks, after which the data is deleted automatically.

7. Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to evaluate your use of the website. The following are recorded among others:

• pages viewed and time spent
• referral source
• approximate location based on IP address (country, region)
• device type, operating system, browser
• a pseudonymous identifier to recognise returning visitors

Google truncates IP addresses within the EU and does not store them permanently. Brief processing of the full IP address to derive approximate location cannot be ruled out technically.

Third country transfer: Data may be transferred to Google LLC in the United States. By adequacy decision of 10 July 2023, the European Commission determined that companies certified under the EU-US Data Privacy Framework provide an adequate level of protection. Google LLC is certified. In addition, Google has agreed to the European Commission's Standard Contractual Clauses with us.

A data processing agreement pursuant to Art. 28 GDPR is in place with Google.

Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent).

Retention: 2 months, after which Google deletes user- and event-level data automatically.

Further information: https://policies.google.com/privacy

8. Website translator

This website offers automatic translations provided through IONOS Multilingual.

When you use the automatic translation, your device's IP address and the page content to be translated are transmitted to the translation service. [[ERGÄNZEN: Name und Sitz des Übersetzungsanbieters – bei IONOS als Unterauftragsverarbeiter erfragen]]

Translations load only after you have given consent.

Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent).

Manually created language versions of this website, such as the Spanish version, are unaffected and trigger no data transfer.

9. Instagram content via SnapWidget

We embed posts from our Instagram profile using SnapWidget, operated by SnapWidget LLC, [[ERGÄNZEN: Anschrift laut snapwidget.com]], USA.

Content loads only after you have given consent via the cookie banner. On loading, your IP address is transmitted to SnapWidget and, depending on the integration, to Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. If you are logged in to Instagram at the same time, Meta may associate the request with your account. We have no influence over the scope or purpose of Meta's processing.

Third country transfer: Transfer to the United States takes place on the basis of your explicit consent under Art. 49(1)(a) GDPR. We point out that the United States does not provide a level of data protection equivalent to European law where the recipient is not certified under the EU-US Data Privacy Framework. In particular, US authorities may access the data without effective legal remedies being available to you.

Legal basis: Section 25(1) TDDDG in conjunction with Art. 6(1)(a) and Art. 49(1)(a) GDPR.

Privacy information from the providers:
SnapWidget: https://snapwidget.com/privacy
Meta: https://privacycenter.instagram.com/policy

10. Contact form and contact by email

If you write to us via the contact form or by email, we process:

• your name
• your email address
• the content of your message
• date and time of sending
• your IP address for spam prevention

The purpose is to handle your enquiry.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to your request. If your enquiry aims at concluding a contract, for example the purchase of a work, Art. 6(1)(b) GDPR applies in addition.

Retention: We delete your enquiry once it has been dealt with conclusively and no statutory retention obligations apply. Business correspondence is retained for six or ten years under Section 257 HGB and Section 147 AO.

11. Recipients of your data

We pass your data to the following parties:

• SichtbarLokal, Andreas Sperling, Kempten – technical maintenance of the website (processor)
• IONOS SE, Montabaur – hosting, consent management, analytics, email delivery (processor)
• Google Ireland Limited, Dublin – web analytics (processor)
• SnapWidget LLC, USA – display of Instagram content
• Meta Platforms Ireland Ltd., Dublin – display of Instagram content

No further disclosure takes place unless we are legally obliged to do so.

12. Your rights

You have the following rights:

• access to the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Contact us informally at contact@dgerals.com.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
https://www.lda.bayern.de

13. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you carried out on the basis of Art. 6(1)(f) GDPR. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds overriding your interests, or the processing serves to assert, exercise or defend legal claims.

14. No automated decision-making

No automated decision-making including profiling under Art. 22 GDPR takes place.

15. No obligation to provide data

You are not obliged to provide us with personal data. Without the information marked as mandatory in the contact form, however, we cannot answer your enquiry.

16. Changes to this privacy policy

We will update this privacy policy if the legal situation or our website changes.

Last updated: [[ERGÄNZEN: Datum der Veröffentlichung]]