1. Privacy at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice.
2. Hosting
This website is hosted by an external service provider. Personal data collected on this website is stored on the host's servers – primarily shortened IP addresses, contact enquiries, meta and communication data, and website access data.
Our host is:
ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany
Further information: all-inkl.com/datenschutzinformationen
Data processing agreement: We have concluded a data processing agreement (DPA) with our host pursuant to Art. 28 GDPR, in force since 10 October 2018. Legal basis for hosting is Art. 6(1)(f) GDPR.
3. Server Log Files
The provider of this website automatically collects and stores information in server log files that your browser transmits automatically: browser type and version, operating system, referrer URL, host name, time of the request and a shortened IP address.
IP shortening: Your IP address is shortened at the point of collection – 11.22.33.44 becomes 11.22.0.0. We cannot link this data to you personally. This data is not merged with other sources.
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in the technically correct presentation and security of this website.
Retention: Log files are deleted automatically after 14 days.
4. Web Analytics with Matomo
This website uses Matomo, open-source software for the statistical analysis of visitor access. We host Matomo ourselves; the collected data remains exclusively on our server and is not passed on to third parties.
Operation without cookies: Matomo is configured so that no cookies are set and no information is stored on or read from your device. Consent under Section 25(1) TDDDG is therefore not required.
Anonymisation: Your IP address is shortened before storage. We cannot link the collected data to you personally.
Do Not Track: Matomo respects your browser's Do-Not-Track setting. If enabled, no data is collected.
No tracking in the protected area: No analytics take place in the password-protected area of this website.
Legal basis: Art. 6(1)(f) GDPR.
5. Storage on Your Device
This website stores a few technical settings locally in your browser so that the site behaves as you have chosen: your choice between light and dark appearance, and the design variant selected on the design system page (for the duration of your visit only).
This information is stored solely in your browser, is not transmitted to us and is not evaluated. It contains no personal reference. As the storage is strictly necessary to provide the presentation you explicitly requested, it is exempt from consent under Section 25(2)(2) TDDDG. You can delete this data at any time via your browser settings.
6. Contact
If you send us enquiries by email or via the contact form, your details including the contact data you provide will be stored for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent. Legal basis is Art. 6(1)(b) GDPR where the request relates to a contract, otherwise Art. 6(1)(f) GDPR.
7. Protected Area (Access Code)
This website contains a password-protected area with additional projects and downloads. Access is granted personally and on request only.
What we process: No names and no email addresses of the persons granted access are stored on this website. We store only a label we assign to the access code and the time of logins using that code. No IP addresses and no device data are recorded. At most the last 100 logins are retained.
Purpose: Providing access and establishing whether and to what extent a granted access is used. Behaviour within the protected area is not analysed.
Strictly necessary storage: After a successful login, session information is stored for the duration of the visit. This is strictly necessary and exempt from consent under Section 25(2)(2) TDDDG.
Legal basis: Art. 6(1)(b) GDPR where access relates to a contractual or pre-contractual relationship, otherwise Art. 6(1)(f) GDPR.
Withdrawal: You can request deletion of your access at any time by email to mail@krebsdesign.com.
8. Your Rights
You have the right to obtain information about the origin, recipients and purpose of your stored personal data free of charge at any time, and the right to request correction or deletion of this data.
Restriction and portability: You have the right to request restriction of processing (Art. 18 GDPR) and to receive data we process automatically on the basis of your consent or in performance of a contract in a common, machine-readable format (Art. 20 GDPR).
Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation.
Right to complain: You have the right to lodge a complaint with a supervisory authority. The competent authority is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, lda.bayern.de.
SSL/TLS encryption: This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the browser address bar starting with „https://“.