Privacy notice

1. Controller

Hannes Dollinger
Grüner Weg 51
53545 Linz am Rhein
Germany
Email: hannesdollinger@gmail.com

Hannes Dollinger is the sole controller for this entire website, including all customer pages operated as part of it. Customer pages do not have their own controller or separate legal notice.

2. Website delivery, Cloudflare and security

When you access the website, your IP address, date and time, the requested URL or file, referrer information and browser, device and system information may be processed. This is necessary to deliver the site, keep it stable, diagnose errors and defend against abusive or security-critical access.

The website uses Cloudflare services, including Workers, asset delivery and image delivery or optimisation. Cloudflare may process data through an international infrastructure. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient delivery of this website.

Connection and security data is stored only for as long as it is needed for delivery, error analysis and security, or for as long as statutory obligations require it.

3. Contact form and email

If you use the contact form, we process your name, email address, message, an optional company or team name and technical transmission data. Name, email address and message are required; without them, the request cannot be handled through the form.

The HNNS Worker sends the information server-side to the email service Resend and then to the configured HNNS mailbox. Resend is operated by Plus Five Five, Inc.

If your enquiry concerns steps before entering into or performing a contract, the legal basis is Art. 6(1)(b) GDPR. Other serious business enquiries are processed on the basis of Art. 6(1)(f) GDPR; our legitimate interest is responding to the enquiry.

Enquiries are deleted when they are no longer needed, unless statutory retention duties or legitimate documentation, legal-claim or defence interests require continued storage.

4. YouTube videos

Before you select Play, the site displays a locally stored preview image. Only after your selection does it load the player from youtube-nocookie.com. Data such as your IP address, referrer, browser or device information and usage data may then be sent to Google Ireland Limited and other Google companies, and information may be stored on or read from your device.

The legal basis is your consent under Art. 6(1)(a) GDPR and, where applicable, § 25(1) TDDDG. You can withdraw consent for future loading by leaving or reloading the page and not activating the player again.

5. Spotify embeds

Spotify content is loaded only after you actively select it. Your browser then connects to open.spotify.com and other necessary Spotify domains. Spotify may process IP addresses, device information, cookie data and usage data.

The legal basis is your consent under Art. 6(1)(a) GDPR and, where applicable, § 25(1) TDDDG. You can withdraw consent for future loading by leaving or reloading the page and not activating the embed again.

6. External links

External services are contacted only after you select the relevant link. From that point, the respective provider processes data under its own responsibility. This website does not use its own analytics or marketing tracking.

7. Recipients and international transfers

Depending on how you use the site, recipients may include Cloudflare, Plus Five Five, Inc. (Resend), the email provider and, after your consent, Google or YouTube and Spotify. Some providers process data outside the EU or EEA. Such transfers take place only under the requirements of Art. 44 et seq. GDPR, for example on the basis of an adequacy decision or the European Commission's standard contractual clauses.

8. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR. You may withdraw consent at any time with effect for the future.

You may also lodge a complaint with a data protection supervisory authority, in particular with:
The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
PO Box 30 40, 55020 Mainz, Germany
Contact the supervisory authority

9. Automated decisions

No solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

10. Changes to this notice

We update this notice if the law, providers or data processing change. The version shown above is authoritative.