Privacy policy
Last updated: October 2026. This privacy policy explains which personal data we process when you visit this website. The German version of this policy is legally binding.
Controller
Alexander Herling, DEGOYA.digital
Münzäcker 1, 69469 Weinheim, Germany
Phone: +49 6201 260192-0
Email: kontakt@degoya.de
Hosting and server log files
This website is a static site hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. For every page request the web server processes technically necessary data: IP address, date and time, requested URL, amount of data transferred, referrer and browser/operating system details. This is required to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest unless needed to investigate a security incident. We have a data processing agreement with the hosting provider (Art. 28 GDPR).
Contact form and email
When you write to us via the form or by email, we process your name, email address, optionally your company and your message in order to answer your enquiry. Processing through the contact form is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future by emailing kontakt@degoya.de; processing before withdrawal remains lawful. For enquiries by email, the legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise (f). The message is sent to our mailbox over an encrypted connection and is not stored in a database. Consent given through the form is recorded in the message together with the sending time. We delete enquiries once they are settled and no statutory retention periods apply.
To prevent abuse, the form sets a session cookie (dg_csrf) only once you click into it. It contains a random identifier that lets us verify the message really comes from this form (CSRF protection) and is deleted when you close your browser. This cookie is strictly necessary for the service you request (§ 25(2) no. 2 TDDDG) and therefore needs no consent. We also briefly store a non-reversible hash of your IP address to limit mass submissions.
Your rights
You have the right to
- access your stored data (Art. 15 GDPR),
- rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interests (Art. 21 GDPR).
Just contact kontakt@degoya.de. You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
Security
The entire website is served exclusively over encrypted HTTPS.