Privacy policy

Note for the operator: This text is a customary template and not legal advice. It is a translation for convenience; in case of doubt the German version prevails. Have it checked by a lawyer before going live.

Please note: This is a courtesy translation. Only the German version is legally binding.

1. Controller

The controller for data processing on this website is:

Tobias Krüger
Glesiener Straße 3
04509 Wiedemar, Germany
Phone: +49 176 30759235
Email: info@vat-krueger.de

2. General

I take the protection of your personal data seriously and comply with the General Data Protection Regulation (GDPR) and German data protection law. This website uses no analytics or tracking services, no advertising networks and no social media plugins, and it sets no cookies for advertising or analytics purposes.

3. Access to the website and server log files

When you access this website, your browser automatically transmits data to the server of the hosting provider. This data is temporarily stored in what are known as log files:

• page or file accessed
• date and time of access
• amount of data transferred and notification of successful retrieval
• browser and operating system used
• shortened or full IP address, depending on the hosting configuration

The legal basis is Article 6 (1) (f) GDPR. The legitimate interest lies in the technically error-free operation and the security of the website. The data is deleted after a short period unless it is required to investigate specific misuse.

4. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany. When you visit the site, STRATO processes the server log data mentioned above on my behalf under a data processing agreement pursuant to Article 28 GDPR. The data is processed on servers located in Germany.

The legal basis is Article 6(1)(f) GDPR. I have a legitimate interest in providing this website reliably and securely.

5. Enquiry form and email

If you contact me via the enquiry form or by email, I process the details you provide in order to answer your enquiry. Mandatory fields are name, email address and your message. All further details are voluntary.

Form data is transmitted to me by email and is not stored permanently on the web server. For security reasons the time of submission and the IP address are transmitted along with the message in order to detect automated misuse of the form.

The legal basis is Article 6 (1) (b) GDPR where your enquiry relates to a contract, otherwise Article 6 (1) (f) GDPR based on the legitimate interest in answering enquiries. In addition, your consent under Article 6 (1) (a) GDPR is obtained, which you can withdraw at any time.

6. Protection against misuse of the forms

The forms contain a hidden field that is invisible to you and is only filled in by automated programs. In addition, the time of the last submission from an IP address is stored briefly in order to block repeated submissions in quick succession. This technical data serves solely to prevent misuse and is deleted automatically after a short time. The legal basis is Article 6 (1) (f) GDPR.

7. Client feedback

On the references page you can send me feedback about our work together. This processes your text, your name and, voluntarily, your role and company. Your email address is collected solely for possible queries and is not published.

Submitted feedback is not published automatically. It is stored first and only appears on the website after my explicit approval. For security reasons the time of submission and the IP address are transmitted in order to detect misuse of the form.

The legal basis for publication is your consent under Article 6 (1) (a) GDPR, given when you submit the form. You can withdraw this consent at any time without formality, for example by email to info@vat-krueger.de. The feedback will then be removed from the website promptly. The lawfulness of processing carried out before the withdrawal remains unaffected.

8. Visitor counting

In order to see how often the website and its individual pages are accessed, a simple counter runs on my own server. No third-party service is involved, no data is transmitted to other providers and no cookie is set.

Only numbers are stored: the number of page views per day, the number of distinct visitors per day and the number of views per page.

Your IP address is not stored. Together with your browser identification and a random value that is regenerated every night, it is used to form a non-reversible checksum. This serves solely to avoid counting the same visitor twice on the same day. Because the random value changes daily, recognition across several days is technically impossible. The checksums from the previous day are discarded automatically.

The legal basis is Article 6 (1) (f) GDPR. As no personal data is stored and no information is read from or stored on your device, no consent under Section 25 of the German TDDDG is required. The aggregated daily figures are deleted automatically after approximately 400 days.

9. Fonts

The fonts used on this website are served from my own server. There is no connection to Google Fonts or any other external font provider. Your IP address is not transmitted to any third party for this purpose.

10. Cookies

No cookies are set for visitors to this website. No profiles are created and no user behaviour is evaluated. Only in the password-protected administration area, which is used by the operator alone, a technically necessary session cookie is set for login. It contains no personal data and is deleted on logout.

11. Encryption

This website uses SSL or TLS encryption. You can recognise this by https:// in the address bar and the padlock symbol in your browser.

12. Your rights

You have the right at any time to:

• information about the data stored about you (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• objection to processing (Article 21 GDPR)
• withdrawal of consent given, with effect for the future (Article 7 (3) GDPR)

An informal message to info@vat-krueger.de is sufficient for all of these.

13. Right to lodge a complaint

If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with a data protection supervisory authority. The competent authority for me is:

Sächsische Datenschutz- und Transparenzbeauftragte
Devrientstraße 5
01067 Dresden, Germany

14. Changes to this policy

I adapt this privacy policy when the website or the legal situation changes. The version published here applies.