DEStart a project
Back to the homepage

Privacy policy

Last updated: 21 August 2026

Controller

Controller
A/L Werbekonzept GbR — Anna Heuvens, Lena Altmann
Address
Alte Furt 28
46499 Hamminkeln
Germany
Contact
E-mail: Info@AL-Werbekonzept.de

General

We take the protection of your personal data seriously and treat it confidentially and in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This website sets no cookies, embeds no third-party services, and opens no connection to third-party servers when you load it. No Google Analytics, no Meta pixel, no advertising networks, no cross-site tracking and no profiling.

We do run our own anonymous reach measurement on our own server, so that we know which content is being read. It works without cookies and is described separately below.

Because we store no information on your device, and read none from it, beyond what is strictly necessary to operate the website, no consent under § 25 TDDDG is required. That is why this website has no cookie banner.

Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The provider processes the resulting data on our behalf.

When you visit the site, the server automatically records information transmitted by your browser:

  • the IP address of the requesting device
  • the date and time of access
  • the name and URL of the file retrieved
  • the volume of data transferred and confirmation of successful retrieval
  • browser type, browser version and operating system
  • the previously visited page (referrer), where applicable

This data is technically necessary in order to deliver the website, to ensure its stability and security, and to investigate misuse. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR. The data is not combined with other sources and is retained only for as long as secure operation requires.

Reach measurement

We want to know which pages are being read and whether our website is working. We use no external service for this — only our own statistics, running on our own server. Nothing is transmitted to a third party.

When a page is opened, a small message is sent to our own server. What is evaluated from it:

  • the page opened and the time it was opened
  • the page you came from (the referrer), plus campaign parameters (utm_…) if the address contains any
  • device category, operating system and browser — derived from the browser identification your browser sends with the request anyway
  • your preferred language from that same identification (the language subtag only, e.g. “de”)
  • a coarse location: country, region and, where available, town

This measurement sets no cookies and stores nothing on your device. Nor does it read anything from your device: neither screen or window size nor any other device characteristic. No fingerprinting takes place.

Your IP address is used only in the moment the page is opened — for the coarse location, looked up in a database held locally on our own server, and for a checksum that groups repeat visits within a single day. After that it is discarded. The IP address is not stored, not logged, and is not visible anywhere, including to us.

The checksum is formed using a secret value that changes every day and is deleted after 48 hours at the latest. The same visit therefore cannot be recognised across several days or linked to a person. No user profile is created.

The legal basis is our legitimate interest in a needs-based design and in improving our website under Art. 6 (1) (f) GDPR. Because no information is stored on your device or read from it, no consent under § 25 TDDDG is required.

Individual page views are deleted after 90 days. After that only aggregated daily totals remain, with no individual records, and those are kept for around 25 months. You may object to this processing at any time under Art. 21 GDPR; an informal message to the address given above is enough.

Contact form

The contact form is the only way to reach us directly on this website. If you use it, we process the details you enter:

  • required: first name, last name, e-mail address and your message
  • optional: telephone number, company or business, postcode and town
  • your consent, together with the IP address the enquiry was sent from

Your entries are transmitted over an encrypted connection to our own server and delivered from there by e-mail to the agency mailbox. Dispatch runs through the mail server of IONOS SE. Your e-mail address is set as the reply address so that we can answer you directly.

The legal basis is the consent you give explicitly in the form under Art. 6 (1) (a) GDPR and, where your enquiry is directed at a contract, Art. 6 (1) (b) GDPR. You may withdraw your consent at any time with effect for the future; an informal message to us is enough. The lawfulness of processing carried out before the withdrawal is unaffected.

Providing the required fields is neither a statutory nor a contractual obligation. We do need them in order to deal with and answer your enquiry at all — without them the form cannot be accepted. The remaining fields are optional.

We keep your enquiry until it has been dealt with conclusively and no further questions are expected, and at most until statutory retention periods expire.

CAPTCHA-free spam protection

To protect the form against automated bulk enquiries we deliberately do not use a third-party CAPTCHA service. Four checks run on our own server instead:

  • an additional field that is invisible to you and that only automated scripts fill in (a honeypot)
  • a check on whether the form was completed in a time that is plausible for a person
  • a small computation your browser solves in the background, which makes bulk submission appreciably expensive
  • a limit on the number of enquiries per IP address within a given time window

For the last check we process your IP address briefly; it is also noted in the notification e-mail so that we can investigate misuse. The legal basis is our legitimate interest in a working, abuse-free contact route under Art. 6 (1) (f) GDPR. No data is transmitted to third parties and no cookies are set.

Fonts

The fonts used on this website are stored on our own server and loaded from there. No connection is made to Google Fonts or any other external provider, and no IP address is transmitted to a third party.

Recipients of your data

Your data is received only by us and, for technical reasons, by our hosting and e-mail provider IONOS SE, which processes it on our behalf. No transfer to a third country outside the EU takes place. Your data is not passed on for advertising purposes.

Your rights

You have the right at any time to obtain information about the data stored about you (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or its processing restricted (Art. 18), to data portability (Art. 20) and to object to processing (Art. 21). You may withdraw consent you have given at any time under Art. 7 (3) GDPR.

To do so, simply contact us at the address given above.

Right to lodge a complaint

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Changes to this policy

We update this privacy policy when the legal situation or the technology used on this website changes. The version published here, bearing the date shown above, is the one that applies.