Privacy policy

Wolfgang Kröll, Am Himberger See 10, 53604 Bad Honnef, Germany. Email: kontakt@agentur-onland.de. Website: www.agentur-onland.de

When you visit this website, the hosting infrastructure processes technical data such as the pages requested, the date and time of access, the referring URL, browser and operating system details and the IP address. This data is required to deliver the site and to keep it secure and stable. The legal basis is Article 6(1)(f) GDPR (legitimate interest in secure operation). Log data is not used to identify individual visitors and is deleted or anonymised after a short retention period.

If you use the contact form, we process the name, company, email address, optional phone number, subject and message you enter, together with your confirmation of this privacy policy. We use this data solely to respond to your enquiry and, where relevant, for the resulting business relationship. The legal basis is Article 6(1)(a) and (b) GDPR.

Your message is delivered by email via our email service provider Brevo (Sendinblue GmbH, Germany), acting as a processor. To protect the form against automated abuse we store a one-way cryptographic hash of your email address and IP address for a limited period; the underlying values cannot be reconstructed from these hashes. The legal basis for this abuse protection is Article 6(1)(f) GDPR. Enquiry data is deleted once it is no longer required and no statutory retention periods apply.

This website uses strictly necessary storage only, in particular to remember your consent decision. Optional services are not loaded until you consent. You can change or withdraw your choice at any time via the cookie settings in the footer. The legal basis for necessary storage is Article 6(1)(f) GDPR and, for optional services, Article 6(1)(a) GDPR together with section 25(1) TDDDG.

We use Google Analytics 4 (Google Ireland Limited, Ireland) to analyse site usage in aggregated form so we can improve content and structure. The service runs in Google Consent Mode v2 and behaves differently depending on your choice.

Without your consent, Google Analytics transmits anonymous, cookieless signals only: no cookies are set, no client ID is created and you are not recognised across pages or visits. These signals cannot be linked to you as a person. The legal basis is Article 6(1)(f) GDPR – our legitimate interest in basic, anonymous measurement of site usage.

Once you consent under the 'Statistics' category, Google Analytics 4 additionally sets cookies such as '_ga' and '_ga_*' with a lifetime of up to two years and can recognise recurring visits. The legal basis is Article 6(1)(a) GDPR together with section 25(1) TDDDG. In both cases we truncate IP addresses before they are sent to Google (anonymize_ip), and advertising features remain switched off. Data may be transferred to the USA on the basis of EU standard contractual clauses.

In addition to browser-based tracking, our server sends a page_view event to Google Analytics on page loads when the browser blocks the client-side script or otherwise fails to reach Google. This server-side hit does not include your IP address and uses an anonymous, non-recognisable client ID when consent has not been given. The legal basis is the same as stated above.

You can withdraw your consent at any time via the cookie settings in the footer; cookies already set are then deleted and measurement returns to the cookieless mode. You can also prevent Google Analytics from collecting data entirely by using the Google opt-out browser add-on at https://tools.google.com/dlpage/gaoptout. Further information is available in Google's privacy policy at https://policies.google.com/privacy.

Project pages can contain videos hosted by YouTube (Google Ireland Limited). These embeds are blocked until you consent. Once you load a video, YouTube receives your IP address and device information and may set cookies; data may be transferred to the United States on the basis of standard contractual clauses and the EU-US Data Privacy Framework. We use the privacy-enhanced YouTube mode. Further information is available in Google's privacy policy.

Links to Instagram, YouTube and other platforms are plain links. No data is transferred to those providers until you actively follow a link, at which point the provider's own privacy policy applies.

You have the right to confirmation and access (Articles 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21). Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise your rights, contact kontakt@agentur-onland.de.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the supervisory authority of the German federal state of North Rhine-Westphalia.

Personal data is stored only for as long as it is required for the purpose concerned or for as long as statutory retention periods apply, and is deleted or blocked thereafter. We do not use automated decision-making or profiling.