Privacy Statement

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Roy Thinnes
Weinstraße 44
54453 Nittel
Germany
E-mail: roy@thinnes.eu

2. In brief

This website is a private one. There is no user account, no newsletter and no advertising. There is a contact form – see below for details. No analytics or tracking services are used, no content is loaded from third-party servers (such as fonts, maps or videos), and no data is passed on to third parties for advertising purposes.

3. Visiting the site and server log files

When you visit this website, the hosting provider automatically stores information in so-called server log files, which your browser transmits:

• the address requested, plus the date and time of access
• the browser and operating system used
• the amount of data transferred and confirmation of successful retrieval
• the IP address of the requesting device

This data is technically required to deliver the page at all and serves the security and stability of operations. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in trouble-free operation). This data is not combined with other sources. The log files are deleted automatically by the hosting provider after a short time.

Hosting provider (processor under Art. 28 GDPR): STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany

4. Visitor counter

The footer shows the number of visitors. No IP address is stored in the process.

In detail: an irreversible checksum is calculated from your IP address, your browser identification and a random secret value (salt). Only this checksum is stored, so that reloading the page is not counted several times. The random value is regenerated every day and the list of checksums is cleared at the same time. As a result, from the following day onwards it is no longer possible to determine which checksum belonged to which visit. The only data kept permanently are the plain numbers (total, today, yesterday).

The legal basis is Art. 6 (1) (f) GDPR – the legitimate interest in knowing, in a very simple and data-minimising way, whether the site is being read at all.

5. Contact form

You can send me a message through the contact form. Your name, e-mail address, subject and the text of the message are forwarded to my e-mail address.

This information is not stored on the website – afterwards it only exists in my mailbox, where it is used solely to answer your enquiry. Once the matter is settled and no retention obligations apply, I delete the message.

The legal basis is Art. 6 (1) (b) GDPR (responding to an enquiry) or Art. 6 (1) (f) GDPR (legitimate interest in communicating with visitors). Providing the data is voluntary; without a name and e-mail address, however, I cannot reply.

To guard against automated bulk messages, the form checks how much time passed between opening and sending it, and limits the number of messages per sender per hour. As with the visitor counter, only an irreversible checksum of the IP address is stored for this, and only for one hour.

6. Cookies

This website only uses strictly necessary cookies:

• Language choice: a cookie remembers whether you read the site in German or English. It contains nothing but de or en and expires after one year.
• Admin login: a session cookie that is only created for the operator when editing the content, and which ends when the browser is closed.

Both serve the operation of the site alone and require no consent under § 25 (2) TDDDG. No cookies are set for advertising or analytics purposes.

7. Encryption

This site is delivered over an encrypted connection (HTTPS). You can recognise this by the padlock symbol in your browser's address bar.

8. Links to other websites

This site links to external websites, among them nice2bee.eu and moselskippers.eu. When you follow such a link you leave this website; the respective provider is responsible for any data processing there. Please consult the privacy information published on those sites.

9. Your rights

You have the following rights towards the controller:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)

An e-mail to the address above is enough to make a request. As no data attributable to individual visitors is stored, however, any information provided will usually be general in nature.

Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), normally the authority of your habitual residence.

10. Changes to this statement

This privacy statement will be updated whenever something changes on the website that affects data processing.