Stefan Brandenburg

Privacy policy

1. Controller

The General Data Protection Regulation (GDPR) applies, together with the Spanish LOPDGDD.

2. What this site does not do

This website is a link directory with a small gallery of its own. It embeds no content from third-party servers: no external fonts, no maps, no embedded video services such as YouTube or Vimeo, no advertising networks and no third-party analytics. There is no contact form, no booking and no payment processing. The site counts its own visits — see section 3a for how.

The videos and images in the gallery are stored on the same server as this page and are only loaded once you click a preview. No connection to any third party is made, and nothing about what you watch is stored or evaluated.

Visiting this page transmits your IP address to no third party. Fonts, images, icons and code are served exclusively from this server.

3. Server log files

When you access this site, the hosting provider automatically records information transmitted by your browser: the address requested, date and time, volume of data transferred, browser type and operating system, the previously visited page and your IP address. This data is technically necessary to deliver the page and keep the server secure.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the technically faultless provision and security of the server. This data is not merged with other sources.

3a. Visit counting

This site counts how often it is opened. This happens entirely on this server. No cookie is set, nothing is stored on or read from your device, and no third-party service is involved.

So that the same visit is not counted twice, the server derives a checksum (SHA-256) from your IP address and browser identifier. A random key is mixed into that checksum. The key exists only on the server and is discarded as soon as it is no longer needed — typically after about an hour. After that, the checksum can neither be traced back to an address nor linked to any later value.

Your IP address is not stored. Only totals are kept: how many visits and page views occurred on a given day, and which pages were opened. No individual can be identified from these figures.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in knowing whether and how the site is used. No consent is required because no information is stored on or retrieved from your device (§ 25 TDDDG).

4. Hosting

This website is hosted by ALL-INKL.COM - Neue Medien Münnich GmbH (Hauptstraße 68, 02742 Friedersdorf, Deutschland). The provider processes the data named under section 3 on our behalf, based on a data processing agreement pursuant to Art. 28 GDPR.

5. Cookies

This website sets no cookies. Neither for analytics nor for advertising, and no functional ones either.

Until recently the chosen language was stored in a cookie. Since the German version now sits directly at the main address, it became superfluous and was removed. How the language switch works today is described in the next section – it needs no storage at all.

A consent banner is therefore not required – there is nothing to consent to. There is no reach measurement and no profiling.

The notice at the bottom of the screen is accordingly not a question but a statement. It has a single button (“Understood”) because there is no choice to make. You can call it up again at any time via the Cookie notice button in the footer.

One single entry is stored on your device in the process – and we do not want to hide it: so the notice does not reappear on every visit, your browser remembers under the name hinweis-gesehen when you dismissed it. This is not a cookie but an entry in what is called localStorage. The difference matters:

• It is never sent to the server. We never see it.
• It holds nothing but a point in time – no identifier, nothing about you, nothing that could identify you again.
• It expires after 30 days. The notice then appears once more.
• You can delete it yourself at any time – in your browser settings under “website data”.

For the record: until 07.09.2026 this entry lived in sessionStorage and disappeared when the tab was closed. That was impractical for you – the notice returned on every visit – and was therefore changed. The site calculates the 30 days itself; unlike a cookie, such an entry does not expire on its own.

Legally it falls under the exemption for strictly necessary storage (Art. 5(3) of the ePrivacy Directive): it serves solely a function that you triggered – dismissing the notice. If your browser denies this storage, for instance in a private window, the site works exactly as before; the notice simply appears again.

5a. Language selection

The site is available in German and English. The German version is at /, the English one at /en/.

On your first visit your browser language is evaluated. Every browser sends an Accept-Language header with each request, listing the languages configured in your system. If you arrive from outside and German is not among your preferred languages, you are redirected once to the English version.

This evaluation happens only at the moment of the request. The information is not stored, not logged and not combined with any other attribute. Nothing is placed on your device either – the switch only applies when you enter the site from outside, never when you click within it. If you pick a language at the top right, that choice stands.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is to show visitors a version in a language they understand without a detour. As nothing is stored, this involves no interference beyond answering your request.

6. External links

This site links to third-party offerings such as social networks and music platforms. Those links are only followed when you click them yourself; no data is transmitted to the target sites beforehand.

All links carry the noreferrer and noopener attributes. The target site is therefore not told which address you came from, and it gains no access to the calling window. Once you follow a link, the privacy policy of the respective provider applies.

7. Encryption

This site is served exclusively over an encrypted connection (TLS/HTTPS). Requests over an unencrypted connection are redirected automatically.

8. Retention

Server log files are deleted automatically by the host after a short period.

The only entry this site places on your device is hinweis-gesehen, described in section 5. It expires after 30 days and is removed automatically. Nothing else is stored.

The checksums used for visit counting (section 3a) exist for at most one hour. The totals derived from them — visits, page views, pages opened — are deleted after 400 days. They contain no personal reference.

Beyond that, this site stores no data.

9. Your rights

You have the right at any time to obtain information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). Please contact us at the address given above.

10. Right to lodge a complaint

If you consider that the processing of your data infringes the GDPR, you may lodge a complaint with a supervisory authority (Art. 77 GDPR). Competent at the provider's place of business is:
Agencia Española de Protección de Datos (AEPD) – https://www.aepd.es