Privacy Policy
Last updated: November 2026
1. Overview
The following notes provide a quick overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you. Detailed information can be found in the subsequent sections of this privacy policy.
2. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. Visitors from the EU are generally served from data centres in the EU, and the contact form runs in Frankfurt am Main. Processing in the USA or at other Vercel locations cannot be ruled out. We have concluded a data processing agreement pursuant to Art. 28 GDPR with Vercel; transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Log data (e.g. IP address, user agent, request ID) is used solely to ensure reliable operation and is typically retained for up to 30 days.
3. General information and mandatory details
Controller: Gastklar GbR, Gebäude P-H-646, Leopoldstraße 2–8, 32051 Herford, Germany, Email: kontakt@gastklar.de. We treat your personal data confidentially and in line with statutory data-protection requirements. Transfers to the USA take place only on the basis stated for the respective service; you can request a copy of the Standard Contractual Clauses at kontakt@gastklar.de. Legal bases: Art. 6 (1) b GDPR (contractual or pre-contractual measures), Art. 6 (1) c GDPR (legal obligations) and Art. 6 (1) f GDPR (legitimate interest in providing a secure and efficient service). You are entitled to the rights of access, rectification, erasure, restriction of processing and data portability, and to lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
4. Your right to object
Where we process data on the basis of Art. 6 (1) f GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can send your objection informally to kontakt@gastklar.de.
5. Data collection on this website
Server log files
Automatically collected: browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address. These data are not combined with other sources. Legal basis: Art. 6 (1) f GDPR (legitimate interest in stability and security). Retention: up to 30 days.
Contact form
When you use the form we process your request type (getting to know us, callback or question), your name and your email address. Depending on the request type, your phone number (for a callback) and your message (for a question) are added; you may optionally provide your property and a message. Without the fields marked as required we cannot process your enquiry. Consent is not required to use the form. We employ honeypots, signed tokens and rate limits to protect against abuse; this may involve technical identifiers such as the IP address or derived rate-limit keys. The purpose is to process your enquiry and communicate with you. Legal bases: Art. 6 (1) b GDPR (pre-contractual communication) and Art. 6 (1) f GDPR (security of our service). We store the data for as long as is necessary to process your enquiry and any follow-up questions and delete it afterwards, provided no contractual relationship is formed and no statutory retention obligations apply.
Contact via email
If you contact us directly by email, we store your enquiry including all personal data (e.g. name, contact details) in order to process it. Disclosure only takes place where required for the technical provision of email communication or where required by law. Legal bases: Art. 6 (1) b and f GDPR. We store the data for as long as is necessary to process your enquiry and any follow-up questions and delete it afterwards, provided no contractual relationship is formed and no statutory retention obligations apply.
6. Email delivery and mailbox
Contact form messages are delivered to us server-side via MailerSend, Inc., 228 Park Ave S, PMB 54955, New York, NY 10003-1502, USA. Sender details, recipient, subject (including the selected request type), message content and the other form fields are processed for this purpose. MailerSend is used for transactional email delivery; open, click and content tracking are disabled for contact form emails. MailerSend processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. According to MailerSend, its data centres are located in the EU; where data is transferred to the USA, this is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, under which MailerSend is certified. Messages received and enquiries by email are held in our mailbox at netcup GmbH, Karlsruhe, Germany, and Microsoft Ireland Operations Limited, Dublin, Ireland, which also act as our processors. For Microsoft, any transfers to the USA are based on the EU-US Data Privacy Framework and the Standard Contractual Clauses. Legal bases: Art. 6 (1) b and f GDPR.
7. Cookies, analytics & social plugins
This website does not use tracking cookies, cookies for analytics or marketing purposes, analytics tools, third-party performance measurement, or social plugins.
8. Technical and organisational measures
We apply TLS encryption, a strict Content Security Policy, rate limiting with short-lived technical identifiers, spam protection mechanisms, regular security updates, and restricted access rights to protect your data.
9. Automated decision-making / profiling
No automated decision-making or profiling takes place.
10. Objection to marketing emails
We object to the use of contact data published in the legal notice for sending unsolicited advertising or information material.