Cookies & Data protection

Controller

Controller within the meaning of Art. 4 No. 7 GDPR:

Kilian Herold
Spitzackerstrasse 5
79100 Freiburg, Germany
Email: mail@kilianherold.com

Further details about the controller can be found in the legal notice.

Scope

This privacy policy is intended to inform the users of this website, in accordance with the European General Data Protection Regulation (GDPR), about the nature, scope and purpose of the collection and use of personal data by the website operator Kilian Herold. The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with legal requirements. Please note that data transmission on the internet may in principle have security gaps. Complete protection against third-party access is not feasible.

Access data

Each time our website is accessed, the following data is automatically collected in server log files:

• Website visited
• Time of access
• Amount of data sent in bytes
• Source / referrer from which you reached the page
• Browser used
• Operating system used
• IP address used

The data collected is used solely for statistical analysis and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are specific indications of unlawful use.

Hosting

This website is hosted by an external service provider in Germany. The data collected in the server log files is processed on behalf of the controller on the basis of a data processing agreement in accordance with Art. 28 GDPR. The hosting provider is:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient operation of the website).

Handling of personal data

The website operator collects, uses and discloses your personal data only if this is permitted by law or if you consent to the data collection. Personal data refers to all information that serves to determine your identity and which can be traced back to you — for example, your name, email address and telephone number.

Handling of contact data

If you contact the website operator using the contact options offered, your details will be stored for a period of six months so that they can be accessed for processing and answering your enquiry, as well as for any follow-up questions. Without your consent, these data will not be passed on to third parties.

Social media links

The footer of our website contains links to our profiles on Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) and Instagram (also Meta Platforms Ireland Ltd.). These are plain hyperlinks only — no data is transmitted to these providers and no plug-ins are loaded when you visit our site. Only once you click on such a link do you leave our site and is data processed by the respective provider. We have no influence over the type and scope of that processing. For further information please refer to the privacy policies of Meta and Instagram.

Cookies in use

The following cookies are set on this website:

The klaro cookie implements your consent choice and is therefore technically necessary. Google Analytics cookies are only set with your consent, which you may withdraw at any time via the “Open cookie settings” button at the bottom of this page.

Google Analytics

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

In Google Analytics 4, IP-address anonymisation is enabled by default. As a result, your IP address is truncated by Google within the member states of the European Union or in other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behaviour is recorded in the form of “events”. Events can include:

• Page views
• First visit to the website
• Start of the session
• Your “click path”, interaction with the website
• Scrolls (whenever a user scrolls to the end of the page (90 %))
• Clicks on external links
• Internal search queries
• Interaction with videos
• File downloads
• Ads viewed / clicked
• Language setting

Additionally, the following is recorded:

• Your approximate location (region)
• Your IP address (in shortened form)
• Technical information about your browser and the devices you use (e.g. language setting, screen resolution)
• Your internet service provider
• The referrer URL (which website / advertising medium led you to this site)

Purposes of processing

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics serve to analyse the performance of our website.

Recipients

Recipients of the data are / may be:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 GDPR)
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

It cannot be excluded that US authorities may access the data stored with Google.

Transfer to third countries

Insofar as data are processed outside the EU/EEA and no level of data protection corresponding to the European standard exists, we have concluded EU Standard Contractual Clauses with the service provider in order to establish an adequate level of data protection. The parent company of Google Ireland, Google LLC, is headquartered in California, USA. A transfer of data to the USA and access by US authorities to the data stored with Google cannot be ruled out. From a data protection perspective, the USA currently qualifies as a third country. There, you do not have the same rights as within the EU/EEA; you may not have any legal remedies against access by authorities.

Storage period

The data we send and link to cookies are automatically deleted after 2 months. The deletion of data whose retention period has been reached takes place automatically once a month.

Legal basis

The legal basis for this data processing is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

Revocation

You can revoke your consent at any time with effect for the future by changing the cookie settings further down on this page. The lawfulness of the processing carried out on the basis of consent until revocation remains unaffected.

You can also prevent cookies from being stored by adjusting your browser software accordingly. However, if you configure your browser to reject all cookies, this may lead to restrictions of functionality on this and other websites. You can also prevent the collection of data generated by the cookie and relating to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by

1. not giving your consent to the setting of the cookie, or
2. downloading and installing the browser add-on to deactivate Google Analytics.

Further information on the terms of use of Google Analytics and on data protection at Google can be found at marketingplatform.google.com and at policies.google.com.

Cookies YouTube

Our site uses YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for embedding videos. Normally, your IP address is sent to YouTube and cookies are installed on your computer as soon as a page with embedded videos is accessed. However, we have embedded our YouTube videos using the enhanced privacy mode (in this case YouTube still contacts Google’s DoubleClick service, but according to Google’s privacy policy no personal data are evaluated in the process). As a result, YouTube no longer stores information about visitors unless they watch the video. If you click the video, your IP address is transmitted to YouTube and YouTube learns that you have watched the video. If you are logged in to YouTube, this information will also be associated with your user account (you can prevent this by logging out of YouTube before accessing the video).

We have no knowledge of the possible collection and use of your data by YouTube, nor any influence over it. Further information can be found in the YouTube privacy policy. For the general handling and deactivation of cookies, we also refer to our general description in this privacy policy.

With regard to the personal data concerning you, you have the following rights:

• Right of access (Art. 15 GDPR): You may request information about whether and which personal data we process about you.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided the legal requirements are met.
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR): You may request that we provide your data in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR) to processing carried out under Art. 6 (1) (e) or (f) GDPR.
• Right to withdraw consent (Art. 7 (3) GDPR): You may withdraw any consent given, at any time, with effect for the future.

To exercise these rights, an informal message to mail@kilianherold.com is sufficient.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority. The authority competent for the controller is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstraße 10a, 70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de