Privacy Policy

1. Controller

2. General Information

Protecting your personal data is important to me. Personal data is only collected on this website to the extent technically necessary. Processing is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR).

3. Collection and Processing of Personal Data

When you visit this website, information such as your IP address is automatically collected by the web server. If you contact me via the contact page, the data you enter (e.g. name, email address, message) will be processed to respond to your inquiry.

4. Purpose and Legal Basis

Data processing is carried out in accordance with:

• Art. 6(1)(b) GDPR for the performance of pre-contractual measures
• Art. 6(1)(f) GDPR based on my legitimate interest in operating the website and communicating with users

5. Storage and Disclosure

All personal data is stored exclusively in encrypted form in Microsoft Azure Germany. There is no disclosure to third parties.

6. Cookies and Local Storage (LocalStorage)

This website uses only technically necessary cookies and local storage technologies (LocalStorage) to enable the operation of the site. In particular, the design preference (e.g., Dark Mode or Light Mode) is stored in your browser's LocalStorage under the key "vinrot.theme". This serves usability so that your preference is preserved on subsequent visits. As this storage is purely functional and no tracking takes place, no consent is required under TTDSG / GDPR.

Spam protection / contact form

This website uses Cloudflare Turnstile to protect the contact form against automated abuse. When you submit the form a token is sent to Cloudflare and verified on the server. Technical data (such as IP address and token) are processed in this context. More information: Cloudflare Privacy Policy.

7. SSL Encryption

This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

8. Your Rights

You have the right to:

• Access your stored personal data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erase your data (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

9. Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. For example, the Hessian Commissioner for Data Protection and Freedom of Information is responsible.

10. Changes

I reserve the right to update this privacy policy as needed, especially in response to changes in legal requirements or technical developments.

Last updated: January 30, 2026