Privacy Policy

1. Overview

General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website.
Personal data means any information that can be used to identify you personally.
Detailed information can be found in the full privacy policy below.

Data Collection on This Website

Who is responsible?
The data processing on this website is carried out by the website operator. Contact details can be found in the section “Controller Information”.

How do we collect your data?
Some data is collected when you provide it to us (e.g., via a contact form).
Other data is collected automatically when you visit the site (e.g., technical data such as browser type, operating system, time of access).

What do we use your data for?
Part of the data is used to ensure the proper functioning of the website.
Other data may be used to analyze user behavior.

What rights do you have?
You have the right to obtain information free of charge about the origin, recipient, and purpose of your stored personal data at any time.
You can request correction, deletion, or restriction of processing, withdraw your consent, or object to processing.
You also have the right to lodge a complaint with the relevant supervisory authority.

2. Hosting

This website is hosted externally by:

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA

External hosting is carried out for the purpose of fulfilling contracts with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online offering securely and efficiently (Art. 6(1)(f) GDPR).
A Data Processing Agreement (DPA) has been concluded with Google LLC.

3. General Information and Mandatory Disclosures

Data Protection
We treat your personal data confidentially and in accordance with the statutory data protection regulations.

Controller Information
Nicolas Hall
Hammerweg 12
52074 Aachen
Germany
Email: thetoshers@gmail.com

Storage Duration
Unless a more specific retention period is stated in this privacy policy, personal data will remain with us until the purpose of processing no longer applies.

Legal Bases
Unless otherwise stated, the processing of personal data is based on Art. 6(1)(f) GDPR (legitimate interest).

Withdrawal of Your Consent
You can withdraw consent you have given at any time.

Right to Object to Direct Marketing
You can object to the processing of your personal data for direct marketing purposes at any time.

SSL/TLS Encryption
For security reasons, this site uses SSL/TLS encryption.

Objection to Unsolicited Emails
The use of contact details published in the imprint for sending unsolicited advertising is prohibited.

4. Data Collection on This Website

Cookies
Our websites use cookies. Cookies are small text files stored on your device that do not cause damage.
Technically necessary cookies are used to provide certain functions (e.g., form submission, security settings).
Third-party cookies may be set through embedded content (e.g., YouTube, Spotify, Instagram).
The storage of necessary cookies is based on Art. 6(1)(f) GDPR (legitimate interest in a functional website).
We do not actively use cookies that are not technically necessary. However, third-party embeds may set cookies over which we have no control.
You can configure your browser to notify you when cookies are set, allow them only in individual cases, or delete them automatically when closing the browser.

Server Log Files
The provider of the site automatically collects and stores information transmitted by your browser:

• Browser type and version

• Operating system used

• Referrer URL

• Hostname of the accessing device

• Time of the server request

• IP address

This data will not be merged with other data sources.
The processing is based on Art. 6(1)(f) GDPR (legitimate interest in the technically error-free and secure presentation of the website).

Contact Form
When you contact us via the contact form, your details are stored for the purpose of processing the request.
The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Enquiries by Email or Telephone
When you contact us by email or telephone, we store your details for the purpose of processing the request.
The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Zoho Mail
We use Zoho Mail, a service of Zoho Corporation B.V., Hoogoorddreef 15, 1101 BA Amsterdam, Netherlands, for sending and receiving emails.
Emails are stored and processed on Zoho's servers. According to Zoho, servers are located in the EU, but data may be transferred to third countries as part of support or administrative services.
We have concluded a Data Processing Agreement with Zoho pursuant to Art. 28 GDPR.
The legal basis is our legitimate interest in secure and efficient email communication (Art. 6(1)(f) GDPR).
More information: https://www.zoho.com/privacy.html

5. Embedded Content from Third Parties

Our website integrates content and functions from third-party providers at various points to make our online offering appealing and functional.
This may involve the transfer of personal data (e.g., IP address) to the servers of third parties.
The integration is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

YouTube
We embed videos from the YouTube platform (Google Ireland Limited).
We use the youtube-nocookie.com domain to avoid tracking cookies as much as possible.
Nevertheless, technical data may still be transmitted to Google servers.
More information: https://policies.google.com/privacy

Spotify
We embed functions of the music service Spotify (Spotify AB, Sweden).
When accessing such content, a connection to Spotify's servers is established, and your IP address may be transmitted.
More information: https://www.spotify.com/de/legal/privacy-policy/

Instagram (Elfsight Integration)
We integrate an Instagram feed via Elfsight LLC (USA).
Content is loaded directly from Instagram (Meta Platforms Ireland Ltd.), and personal data (e.g., IP address) may be transmitted.
More information:
Instagram: https://privacycenter.instagram.com/policy/
Elfsight: https://elfsight.com/privacy-policy/

Contact Form (Elfsight Integration)
Our contact form is provided via Elfsight.
The data you enter is forwarded to our email address and stored temporarily on Elfsight's servers only for transmission purposes.

6. Social Media Profiles

We maintain public profiles on social networks.
When visiting these profiles, the privacy policies of the respective platform operators apply.
Links to our social media profiles only establish a connection to the provider once you actively click on them.

7. Security and Performance Services

Cloudflare
We use Cloudflare (Cloudflare, Inc., USA) to improve the security and loading speed of our website.
Your IP address and other technical data may be processed.
More information: https://www.cloudflare.com/privacypolicy/

Google Cloud CDN
We use Google Cloud CDN (Google Ireland Limited) to deliver our website content faster.
Your IP address may be transmitted to Google servers when content is retrieved.
More information: https://policies.google.com/privacy

8. Google Fonts

This site uses Google Fonts stored locally on our server.
No connection to Google servers is established, and no data is transferred to Google.

9. Your Rights

You have the right to obtain information (Art. 15 GDPR), correction (Art. 16 GDPR), deletion (Art. 17 GDPR), or restriction of processing (Art. 18 GDPR) of your personal data at any time.
If you have given consent, you may withdraw it at any time with future effect (Art. 7(3) GDPR).
You also have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).

10. Contact

Controller under data protection laws:

Nicolas Hall
Hammerweg 12
52074 Aachen
Germany
Email: thetoshers@gmail.com