Privacy

1. Controller

The controller for data processing on this site is:

No data protection officer has been appointed, and none is required under Art. 37 GDPR in conjunction with section 38 of the German Federal Data Protection Act.

2. What this site does not do

• •No cookies and no comparable storage in your browser.
• •No analytics tool of my own and no tracking. The provider's web statistics are covered in section 3.
• •No contact form and no sign-in.
• •No embedded third-party content, so no maps, no video platforms and no social media buttons.
• •Fonts are served from this site's own server, not loaded from Google. Your IP address is not passed to anyone in the process.

That is why this site has no consent banner. There would be nothing for you to consent to.

3. Hosting, server logs and web statistics

This site is hosted on web space provided by:

When you open a page, your browser sends technical information that the host stores in log files: IP address, date and time of the request, the address requested, the volume of data transferred, the status code of the request, the address you came from, and identifiers for your browser and operating system.

What the host processes on its own account is set out in its privacy policy at hosteurope.de.

The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is delivering this site without technical faults and keeping it secure. This data is not combined with other data and is not used for advertising.

There are no other recipients. Apart from the web space provider, nobody receives data from this site, unless I am legally required to pass it on.

On its hosting products, the provider also generates a web statistic automatically, using the tools AWStats and Webalizer. This may process your IP address, the address you came from, your country of origin and details about your browser. It happens on the server and without cookies.

The statistic comes as part of the hosting product, and I do not evaluate it. It is not combined with other data, there is no recognition across sites, and no visitor profile is created. The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is running this site on a standard hosting product and detecting technical faults.

The statistics files are deleted at the start of each month.

According to the provider, archived log files are kept for 14 days.

There is a data processing agreement with the provider under Art. 28 GDPR. It obliges the provider to process this data only on my instructions and in line with the GDPR.

The agreement allows processing in Germany, in the European Union, in the European Economic Area and in third countries, provided the specific requirements of the GDPR are met.

4. Encrypted transfer

This site is served over HTTPS, so it is encrypted on the way to your browser. You can see this in the address bar and by the padlock symbol.

5. Contact by email

If you write to me, I process the information in your message in order to answer it. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR where the message concerns a prospective contract or employment.

My mailbox is with the same provider as this site, see section 3. No other service provider is involved.

I keep the message for as long as your enquiry requires and delete it afterwards. Statutory retention periods remain unaffected.

Email is not a closed channel. On its way through the network it can be read by others, and I have no influence over that. For confidential information, please choose another route.

6. How long data is kept

Where no specific period is named above, your data stays with me until the purpose for processing no longer applies. If you ask for erasure, I delete it, unless a statutory retention period stands in the way. Once such a period has expired, I delete it then.

7. Links to other sites

This site links to external sites in a few places. Those links are only followed when you click them; nothing is loaded in advance. Once you follow a link, the privacy policy of that site applies. I have no influence over how it processes data.

8. Your rights

You have the following rights towards me:

• •Access to the data stored about you (Art. 15 GDPR)
• •Rectification of inaccurate data (Art. 16 GDPR)
• •Erasure (Art. 17 GDPR)
• •Restriction of processing (Art. 18 GDPR)
• •Data portability (Art. 20 GDPR)

An informal message to elisabeth@wim-mer.com is enough for any of these. For the right to object under Art. 21 GDPR, see the next section.

9. Your right to object under Art. 21 GDPR

Two kinds of processing on this site rest on a legitimate interest under Art. 6 (1) (f) GDPR, the server logs and answering your email. You may object to either at any time, on grounds arising from your particular situation. The same applies to profiling based on that legal ground, which does not take place on this site.

If you object, I will stop processing the data concerned, unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

An objection needs no particular form. A message to elisabeth@wim-mer.com is enough.

10. Complaint to a supervisory authority

You may lodge a complaint with a data protection supervisory authority at any time (Art. 77 GDPR). The authority responsible for me is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

11. Version of this policy

This version is dated 5 October 2026.

If the site changes technically, for example because a new element is embedded, I will update this policy. The version available here is the one that applies.