Privacy Policy

Last updated: April 2026

1. Data Controller

Werkelkeller
Tobias Keßler
c/o flexdienst – #20709
Kurt-Schumacher-Straße 76
67663 Kaiserslautern
Germany
Email: kontakt@werkelkeller.de

2. Overview

This privacy policy explains how personal data is processed on the website werkelkeller.de (portfolio website, static site).

3. Hosting

This website is hosted by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

Server location: Helsinki, Finland (EU). All data remains within the EU. Hetzner is a GDPR-compliant provider with EU-based servers. A Data Processing Agreement (DPA) with Hetzner is in place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest — reliable operation).

4. Server Log Files

When accessing this website, the hosting provider automatically records the following information in server log files:

IP address of the requesting device (anonymised after 7 days)
Date and time of access
Requested URL and HTTP method
HTTP status code
Volume of data transferred
Referrer URL (previously visited page)
Browser identifier (User-Agent)

This data is processed solely for security and performance purposes and is automatically deleted after a maximum of 7 days. No personal profiling takes place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests — security and operation).

5. SSL Encryption

All communication between your browser and this website is encrypted using TLS/HTTPS. No unencrypted transmission of personal data takes place.

6. Contact by Email

If you contact us by email, the transmitted data (name, email address, message content) is used exclusively to process your enquiry. Data is not passed on to third parties unless this is required to handle the request.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests — communication).

7. Email Service (Zoho Mail)

Incoming emails to kontakt@werkelkeller.de are processed via Zoho Mail:

Zoho Corporation B.V.
Beneluxlaan 4B
3527 HT Utrecht
Netherlands (EU endpoint)

Zoho operates EU data centres. A Data Processing Agreement is in place. Data does not leave the EU.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests — communication).

8. Cookies and Cookie Consent

8.1 Technically necessary cookies

Without your consent, this website only sets technically necessary cookies. These are strictly required for the operation of the website and cannot be disabled.

8.2 Cookie Consent and Google Funding Choices

Once Google AdSense is active, Google Funding Choices automatically displays a GDPR- and TCF-v2.2-compliant consent dialogue on the first visit. This dialogue lists all advertising cookies set by AdSense and its ad partners, and allows granular acceptance or rejection. Consent can be withdrawn at any time via the privacy settings in your browser or through the Google AdSense settings at adssettings.google.com. Details on cookies set by Google: policies.google.com/technologies/cookies.

Without active AdSense, werkelkeller.de sets no cookies that require consent.

Legal basis for consent management: Art. 6(1)(c) GDPR (legal obligation — proof of consent).

9. Google AdSense

This website is prepared for displaying advertisements via Google AdSense. Once activated, Google AdSense will serve personalised or contextual advertisements.

What Google AdSense processes:

Advertising cookies and similar technologies (TCF v2.2)
Pseudonymous user profiles for advertising purposes
IP address (for geolocation and fraud prevention)
Browser and device information

International data transfers: Google LLC is based in the USA. Data transfers are conducted on the basis of the EU-US Data Privacy Framework (EU Commission adequacy decision of 10 July 2023) as well as EU Standard Contractual Clauses. Google LLC is certified under the Data Privacy Framework.

Opt-out: You can object to the use of Google AdSense at any time by disabling the "Advertising" category in the cookie settings. You can also manage your advertising settings directly with Google:

Legal basis: Art. 6(1)(a) GDPR (consent via cookie consent banner).

Note: AdSense is not yet active. The technical preparation is done in advance. Advertising will only be shown after Google approval and your consent.

10. Data Retention

Server logs: Maximum 7 days, then automatically deleted.
Cookie consent (localStorage): Until you manually clear it.
Email communication: Until the enquiry is fully resolved, then deleted in accordance with statutory retention periods (max. 10 years).

11. Your Rights (Art. 15–22 GDPR)

You have the following rights regarding your personal data:

Access (Art. 15 GDPR): Find out what data is stored about you.
Rectification (Art. 16 GDPR): Correction of inaccurate data.
Erasure (Art. 17 GDPR): Deletion of your data ("right to be forgotten").
Restriction (Art. 18 GDPR): Restriction of processing.
Data portability (Art. 20 GDPR): Export your data.
Objection (Art. 21 GDPR): Object to certain processing activities.
Withdrawal of consent (Art. 7(3) GDPR): Possible at any time, without giving reasons — withdrawal does not affect the lawfulness of prior processing.

Requests can be submitted informally by email to: kontakt@werkelkeller.de

Response time: 1 month from receipt of the request.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority at the controller's place of business is:

Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI RLP)
(State Commissioner for Data Protection and Freedom of Information, Rhineland-Palatinate)
Hintere Bleiche 34
55116 Mainz
Germany
www.datenschutz.rlp.de

13. Changes

This privacy policy may be updated when the website's features or legal requirements change. The current version is always available on this page.