Privacy policy

1) Introduction and contact details of the controller

1.1 We are glad you are visiting our website and thank you for your interest. Below we inform you about how your personal data is handled when you use our website. Personal data here means all data by which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Jochen Kächelin, Messelbergstr. 8, 73066 Uhingen, Germany, phone +49 (0)7161 5071373, email info@jochenk.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data collected when you visit our website

2.1 If you use our website purely for information, meaning you do not register or otherwise transmit information to us, we only collect the data your browser transmits to the page server (so-called server log files). When you call up our website we collect the following data, which is technically necessary for us to display the website to you:

• The page of ours you visited
• Date and time of access
• Volume of data sent, in bytes
• Source/referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (where applicable in anonymised form)

Processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. We do, however, reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser bar.

2.3 Beyond the server log files described above, we collect no data when QR codes are created. Generation runs exclusively as JavaScript in your browser. Your input and the finished files are never transmitted to us, never stored and never analysed.

3) Hosting & content delivery network

For hosting our website and presenting its content we use Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Falkenstein, Germany; services are provided exclusively on servers within the European Union.

All data collected on our website is processed on these servers, unless different recipients are named below for specific processing operations.

We have concluded a data processing agreement with the provider which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.

We do not use a content delivery network. Fonts, stylesheets and program libraries are served exclusively from our own servers; no Google Fonts or comparable services are embedded.

4) Cookies and local storage

This website sets no cookies of its own accord. The generator works entirely without them.

We store two settings in your browser's local storage: your choice between light and dark mode, and your decision about advertising. These values never leave your device, contain no personal data and are not transmitted to us. They are strictly necessary for the functions you asked for (§ 25(2)(2) TDDDG) and therefore require no consent.

Cookies arise in two cases only, and you decide about both: when you consent to advertising (section 6), and when you object to audience measurement (section 7) — in which case a single cookie records precisely that objection.

You can configure your browser so that you are informed about cookies being set and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general. You can clear local storage at any time through your browser settings.

5) Contacting us

There is no contact form on this website. When you contact us by email, personal data is collected — namely the details you provide in your message yourself. This data is stored and used exclusively for the purpose of answering your enquiry, or for making contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in answering your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis. Your data is deleted once your enquiry has been dealt with conclusively. This is the case when it can be inferred from the circumstances that the matter has been finally clarified, provided no statutory retention obligations apply.

6) Online marketing

Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses cookies, that is text files stored on your computer that allow an analysis of your use of the website. Google AdSense also uses so-called web beacons (small invisible graphics) to collect information, by means of which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to and stored on a Google server. This may also involve transmission to the servers of Google LLC in the USA.

Google uses the information so obtained to evaluate your usage behaviour with regard to the AdSense advertisements. The IP address transmitted by your browser in the context of Google AdSense is not merged with other Google data. The information collected by Google may be transferred to third parties where required by law and/or where third parties process this data on Google's behalf. All processing described above, in particular the reading of information on the device used via cookies and/or web beacons, is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without that consent, Google AdSense is not used during your visit — not a single request is made to Google.

You may withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website.

For data transfers to the USA the provider has joined the EU-US Data Privacy Framework, which on the basis of an adequacy decision of the European Commission ensures compliance with the European level of data protection.

Google's privacy terms can be viewed here: https://www.google.de/policies/privacy/

7) Web analytics services

Matomo

This website uses a web analytics service from the following provider: InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (“Matomo”).

We operate Matomo exclusively self-hosted on our own servers within the European Union. The measurement data never leaves our servers: the provider receives no data whatsoever about your visit, and no transfer to New Zealand or any other third country takes place.

To protect visitors, Matomo uses a so-called config_id to enable various analyses of site usage within a short window of up to 24 hours. The config_id is a randomly set, time-limited hash of a limited set of a visitor's settings and attributes. The config_id or config hash is a string calculated for a visitor on the basis of their operating system, browser, browser plugins, IP address and browser language. Matomo does not use device fingerprinting and uses an anonymised IP address of the visitor to create the config_id.

Measurement works without cookies — nothing is stored on or read from your device for this purpose. If your browser sends the “Do Not Track” setting, no measurement takes place at all.

Insofar as the information processed includes personal user data, processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. To object to the processing of your visitor data for the future, we provide you with a separate objection facility on our website.

Because we operate the service ourselves, a data processing agreement with the provider is not required — it processes no data on our behalf. For the same reason no legal basis for a transfer to a third country is needed.

8) Tools and miscellaneous

Cookie consent tool

To obtain effective user consent for cookies and cookie-based applications that require it, this website uses a so-called cookie consent tool. The cookie consent tool is shown to you when you call up the page as an interactive interface on which you can give consent for particular cookies and/or cookie-based applications by ticking boxes. In doing so, the tool ensures that all cookies and services requiring consent are loaded only if you give the corresponding consent by ticking. This ensures that such cookies are set on your respective device only where consent has been given.

The tool has to record the choice you made, otherwise it would ask again on every page load. It stores it in your browser's local storage and sets no cookie for this. That storage is strictly necessary for the function you asked for (§ 25(2)(2) TDDDG) and therefore requires no consent. As a rule, no personal user data is processed in this context.

If, in an individual case, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, this takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies, and thus in a legally compliant design of our website.

A further legal basis for the processing is Art. 6(1)(c) GDPR. As controllers we are under a legal obligation to make the use of cookies that are not technically necessary dependent on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the settings available in the cookie consent tool can be found directly in the corresponding interface on our website.

9) Rights of the data subject

9.1 Applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis us as controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercise:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent given pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 Right to object

If, in the context of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future on grounds relating to your particular situation.

If you exercise your right to object, we will end the processing of the data concerned. Further processing remains reserved, however, if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You may exercise the objection as described above.

If you exercise your right to object, we will end the processing of the data concerned for direct marketing purposes.

Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

10) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and — where relevant — the applicable statutory retention period.

Server log files are deleted after seven days at the latest.

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Unless otherwise stated in the other information in this policy about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.