Privacy Policy
1. Data Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Roman Drechsel
Ernst-Thälmannstraße 56
02708 Großschweidnitz
Germany
Email: webmaster@roman-drechsel.de
2. General Information on Data Processing
I take the protection of personal data very seriously. Personal data is processed on this website only to the extent necessary to provide the website, communicate with visitors, ensure technical security, perform analytics, or on the basis of consent.
This Privacy Policy explains which personal data is processed when you visit the website roman-drechsel.de, for which purposes it is processed, and which rights data subjects have.
3. Hosting and Server Log Files
When you access this website, the web server automatically processes technical access data. This may include:
- IP address of the accessing device
- date and time of access
- URL accessed
- amount of data transferred
- HTTP status code
- referrer URL
- browser type and version
- operating system
This processing is carried out to provide the website, analyze errors, ensure system security, and prevent abuse. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of this website.
Server log files are stored only for as long as necessary for these purposes and are subsequently deleted or anonymized, unless statutory retention obligations apply.
4. Cookies and Similar Technologies
This website uses cookies and similar technologies. Cookies are small text files stored on your device. Some cookies are technically necessary; others may be used for analytics while Google Analytics is in use.
Where personal data is processed through technically necessary cookies, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is the technically secure and reliable operation of the website. Consent is not required for storing information on your device or accessing it when the technology is strictly necessary (Section 25(2) of the German Telecommunications and Digital Services Data Protection Act, TDDDG). Where cookies or similar technologies are used for analytics or external services, this is done only with your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may change or withdraw your consent at any time via the Cookie Settings.
5. Cookie Consent Management
This website uses the open-source software CookieConsent to manage cookie preferences locally. CookieConsent is used to obtain, document, and manage consent for certain services. The consent management solution itself does not transfer data to the software provider.
In particular, the following data may be processed:
- selected consent preferences
- time of consent or refusal
- technical information about the browser used
- a random consent ID or similar identifier
This processing serves to manage and demonstrate legally required consent. The legal basis is Article 6(1)(c) GDPR in conjunction with Article 6(1)(f) GDPR.
6. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In connection with its use, data may also be transferred to Google LLC in the United States.
Google Analytics helps me understand how visitors use this website. In particular, the following data may be processed:
- shortened or anonymized IP address
- pages visited
- time spent on the website
- referrer URL
- browser and device information
- operating system
- approximate location data
- interactions with the website
Google Analytics is used only during my lifetime and only if you have given your consent via the Cookie Settings. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time via the Cookie Settings.
The website has been configured so that Google Analytics will no longer be integrated after my death. Once this deactivation takes effect, the website will no longer collect or transmit new data through Google Analytics. Naturally, no specific date for this change can be given in advance. Deactivation does not automatically delete data previously received by Google Analytics; the applicable retention and deletion rules continue to apply to that data.
Google processes the data on my behalf. A data processing agreement is in place for Google Analytics. The retention period for user and event data depends on the configuration in Google Analytics. Standard Google Analytics 4 properties generally offer retention periods of 2 or 14 months. Aggregated standard reports may remain unaffected by these settings.
Further information is available in Google's Privacy Policy: https://policies.google.com/privacy
You can also use the Google Analytics Opt-out Browser Add-on: Google Analytics Opt-out Browser Add-on
7. Transfers of Data to Third Countries
While Google Analytics is in use, personal data may be transferred to the United States or other third countries in connection with this Google service. Google LLC is certified under the EU-US Data Privacy Framework. Standard contractual clauses or other appropriate safeguards may also be used.
Google provides further information at: https://policies.google.com/privacy/frameworks
8. Recipients of Personal Data
Personal data may in particular be disclosed to the following recipients:
- the hosting provider of this website
- Google Ireland Limited (only while Google Analytics is in use)
- Google LLC (only while Google Analytics is in use)
- technical service providers, where necessary for operation, security, or maintenance
- email service providers, where necessary for sending and processing emails
9. Data Retention
Personal data is stored only for as long as necessary for the relevant purposes or as required by statutory retention periods.
- Google Analytics user and event data already collected remains subject to the retention period configured in Google Analytics even after deactivation; standard GA4 properties generally offer periods of 2 or 14 months.
- Cookie consent preferences are stored until they are withdrawn or the stored consent expires.
- Server log files are deleted or anonymized after the technically necessary retention period has elapsed.
10. Legal Bases for Processing
Depending on the purpose and service used, personal data is processed on the following legal bases:
- Article 6(1)(a) GDPR, where consent has been given, in particular for analytics services.
- Article 6(1)(c) GDPR, to comply with legal obligations.
- Article 6(1)(f) GDPR, to pursue legitimate interests, in particular security, operation, and prevention of abuse.
- Section 25(1) TDDDG, for storing information on or accessing information from the user's device where consent is required.
- Section 25(2) TDDDG, for strictly necessary cookies or similar technologies.
11. Contact by Email
If you contact me by email, I process the data you provide, in particular your email address, the contents of your message, and any additional information you share, in order to handle and respond to your inquiry.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to process and respond to inquiries. Where the communication concerns entering into or performing a contract, Article 6(1)(b) GDPR also applies. The data is deleted once it is no longer required to handle the inquiry, unless statutory retention obligations prevent deletion.
12. Rights of Data Subjects
Subject to applicable legal requirements, data subjects have the following rights:
- right of access under Article 15 GDPR
- right to rectification under Article 16 GDPR
- right to erasure under Article 17 GDPR
- right to restriction of processing under Article 18 GDPR
- right to data portability under Article 20 GDPR
- right to object under Article 21 GDPR
- right to withdraw consent under Article 7(3) GDPR
- right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR
To exercise these rights, you may contact me at webmaster@roman-drechsel.de.
13. Withdrawal of Consent
You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.
You can change your cookie and service preferences at any time via the Cookie Settings.
14. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, data subjects have the right to object to such processing at any time on grounds relating to their particular situation.
15. Security
I use technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure. However, complete security of data transmission over the internet cannot be guaranteed.
16. No Other External Services Embedded
To the best of my current knowledge, no external fonts such as Google Fonts or other external content such as maps, videos, or social media plugins are embedded, unless expressly mentioned in this Privacy Policy.
17. Changes to This Privacy Policy
I reserve the right to update this Privacy Policy in response to technical, legal, or organizational changes. The deactivation of Google Analytics after my death, as described in Section 6, is already covered by this version; no separate effective date has been specified for that change. The version published on this website at any given time applies.