PRIVACY · TRANSPARENCY · YOUR RIGHTS

Privacy Policy.

Information about how personal data is processed when you use this website.

Privacy information pursuant to Art. 13 GDPR – current website configuration as described by the operator.

Tobias Heidinger
Johannesstraße 16
85305 Jetzendorf
Germany

Email: info@tobias-heidinger.de
Phone: +49 178 1836490

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, on the ALL-INKL Premium plan. Technical connection data are processed when you access the website. According to the hosting provider, the access logs configured for this hosting account contain, in particular, the date and time of access, the requested URL, browser and operating system information, a referring URL (where transmitted) and an IP address.

The IP addresses recorded in the website operator's access logs are truncated. Under the method illustrated in the hosting control panel (KAS), for example, 11.22.33.44 becomes 11.22.0.0. Truncation reduces identifiability but does not necessarily make all resulting data fully anonymous.

These access log files are retained for 30 days. They are processed to provide the website, diagnose technical issues and protect its security. The legal basis is Article 6(1)(f) GDPR (legitimate interest in operating a reliable and secure website).

Separately from these customer-configured logs, ALL-INKL has stated that it creates administrative security logs, particularly to detect and prevent cyberattacks. These may contain complete IP addresses and are deleted by ALL-INKL within seven days at the latest.

A data processing agreement under Article 28 GDPR is in place with ALL-INKL. See also ALL-INKL's privacy information (German).

This website uses Webalizer, a server-side statistics tool provided through ALL-INKL. It analyses the access log files generated for the hosting account, using truncated IP addresses. The reports help the website operator understand site use and improve its content and technical operation. The legal basis is Article 6(1)(f) GDPR.

The reports are configured in German and made available in a protected /usage/ area. The underlying raw access logs are retained for 30 days. Aggregated statistics generated by Webalizer may be retained for a different period.

No additional website analytics or tracking service, such as Google Analytics, is embedded in the current pages. Geographic analysis based on truncated IP addresses may be limited and cannot reliably establish individual visitors' precise regions.

If you contact me, I process the details you supply, such as name, email address, telephone number and message content, in order to respond. There is no website contact form. Where the enquiry concerns contractual or pre-contractual steps, the legal basis is Art. 6(1)(b) GDPR; otherwise it is Art. 6(1)(f) GDPR (legitimate interest in responding).

Information is deleted once no longer needed for its purpose unless statutory retention duties or other justified grounds apply. Email or telecommunications service providers may be involved in transmitting communications.

Some PDF documents are protected by server-side directory authentication and a separate password to open the PDF itself. The download overview pages remain publicly accessible. Technical information necessary to control access to protected files is processed to prevent unauthorised access (Article 6(1)(f) GDPR). Where these file requests appear in the hosting account's general access logs, the IP truncation and retention settings described above apply.

A review of the current website code found no embedded advertising, social-media tracking or additional analytics services. In particular, Google Analytics is not used. Fonts, images and scripts are loaded locally, and the website does not provide a contact form.

Before introducing external services or technologies that store information on or access visitors' devices, applicable privacy and consent requirements will be reviewed. Where consent is required, it will be obtained before activation, and this policy will be updated.

Recipients may include ALL-INKL.COM and email or telecommunications providers involved in communication. No additional transfers to providers outside the EU/EEA are planned based on the currently described website features. Any future relevant transfers and safeguards will be disclosed here.

Subject to the conditions of the GDPR, you have rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and, where applicable, data portability (Art. 20). You may object to processing based on legitimate interests under Art. 21. Consent, where given, may be withdrawn for the future.

Contact info@tobias-heidinger.de. You may lodge a complaint with a supervisory authority under Art. 77 GDPR, including the Bavarian Data Protection Supervisory Authority.

Last updated: 5 November 2026. The information about IP truncation, 30-day access-log retention and German-language Webalizer reporting reflects the hosting settings currently reported by the website operator. Changes to the hosting configuration or services may require amendments to this notice.