Privacy Policy
1. Privacy at a Glance
General Information
The following information provides an overview of what happens to your personal data when you visit this website.
Personal data means any information that can be used to identify you personally.
More detailed information about data protection can be found in the following sections of this Privacy Policy.
Controller Responsible for Data Processing
The controller responsible for data processing on this website is:
Holger Weber
Goethestraße 16
63834 Sulzbach
Germany
Email: info@holger-weber.de
How Do We Collect Your Data?
Some data is collected when you provide it to us. This applies in particular to information you enter into a contact or enquiry form or send to us by email.
Other data is collected automatically by the technical systems used when you visit the website. This primarily includes technical data such as your internet browser, operating system, the time the page was accessed and the pages visited.
What Do We Use Your Data For?
Some data is processed to ensure that the website is provided securely, correctly and in accordance with users’ needs.
Other data is used to process enquiries and communicate with prospective customers, clients and cooperation partners.
Technical access data may also be evaluated statistically in anonymised form.
What Rights Do You Have?
Subject to the applicable legal requirements, you have the right:
- to obtain information about your stored personal data,
- to have inaccurate data corrected,
- to have your data deleted,
- to restrict the processing of your data,
- to data portability,
- to object to certain types of processing,
- to withdraw consent with effect for the future,
- to lodge a complaint with a data protection supervisory authority.
Further details can be found in the section “Your Rights”.
2. Controller
The controller within the meaning of the General Data Protection Regulation is:
Holger Weber
Goethestraße 16
63834 Sulzbach
Germany
Email: info@holger-weber.de
3. Hosting and Provision of the Website
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When this website is accessed, the hosting provider processes technical data that is necessary for the operation of the website. This may include:
- the page or file accessed,
- the date and time of access,
- the amount of data transferred,
- the notification of successful access,
- the browser type and browser version,
- the operating system used,
- the previously visited page,
- the hostname or IP address of the accessing device.
The data is processed to provide the website securely, reliably and without technical errors, to identify attacks or misuse and to analyse technical problems.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure, reliable and technically correct provision of this website.
Where use of the website serves to initiate or perform a contract, the processing may also be based on Article 6(1)(b) GDPR.
A data processing agreement in accordance with Article 28 GDPR has been concluded with STRATO.
4. Server Log Files and Visitor Statistics
STRATO processes technical access data in server log files when this website is visited.
According to STRATO, the hostname or IP address is anonymised in the log files made available to the website operator.
The log files are used in particular for:
- the technical provision of the website,
- ensuring security and stability,
- analysing technical errors,
- detecting misuse or unauthorised access,
- the anonymised statistical evaluation of page views.
STRATO also provides its own visitor statistics. These are used to obtain general information about the use of the website, such as pages viewed and access figures.
No additional external analytics services, such as Google Analytics or comparable tracking services, are used on this website.
The legal basis for processing technically necessary access data is Article 6(1)(f) GDPR.
The legitimate interest lies in the secure provision, technical optimisation and user-oriented design of the website.
5. Cookies and Cookie Settings
This website uses cookies and similar technologies. Cookies are small files or pieces of information that may be stored on or read from your device.
When accessing the website, you can choose between different categories using the cookie settings.
Technically Necessary Cookies
Technically necessary cookies are required for the operation, security and correct display of the website.
They cannot be disabled because the website cannot be provided properly without these functions.
The storage of or access to technically necessary information is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Where personal data is processed, the legal basis is Article 6(1)(f) GDPR.
The legitimate interest lies in the secure and functional provision of the website.
Analytical Cookies
The cookie banner provides an option for analytical cookies. Such cookies or functions are activated only if you have given your prior express consent.
Under the current configuration, no additional external analytics or advertising-tracking services are used on this website.
Where processing takes place on the basis of your selection, the storage of or access to information on your device is based on Section 25(1) TDDDG and the subsequent processing of personal data is based on Article 6(1)(a) GDPR.
Third-Party Content
The cookie banner also provides an option for content or functions supplied by third parties.
Such content is activated only if you have expressly consented.
Under the current configuration, no videos, maps, social media feeds or comparable third-party content are embedded directly on this website.
Ordinary links to external websites become active only when you click them.
Changing or Withdrawing Your Selection
You can change your cookie settings at any time using the “Cookie Settings” link provided on the website.
Consent can be withdrawn at any time with effect for the future.
The lawfulness of processing carried out before consent was withdrawn remains unaffected.
6. Contact and Enquiry Forms
When you contact us using a contact or enquiry form, the information you enter is processed.
Depending on the form, this may include:
- first name and last name,
- company or organisation,
- email address,
- telephone number,
- selected workshop or requested service,
- preferred delivery format,
- approximate number of participants,
- the content of your message.
The data is processed solely to handle your enquiry, answer follow-up questions, prepare a proposal and, where applicable, coordinate further steps with you.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract.
For general enquiries not directly related to a contract, processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in handling and responding to your enquiry.
Where you expressly consent to processing by selecting a checkbox, Article 6(1)(a) GDPR also serves as a legal basis.
You may withdraw your consent at any time with effect for the future.
The data you provide will not be disclosed to third parties without a legal basis.
7. Contact by Email
If you contact us by email, the information you provide, including your contact details and the content of your message, will be processed.
The processing is carried out to handle your request and answer possible follow-up questions.
The legal basis is Article 6(1)(b) GDPR where your message relates to the initiation or performance of a contract.
In other cases, processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in appropriately handling your enquiry and conducting business communication.
8. Storage Period
Personal data is stored only for as long as is necessary for the respective purpose.
Enquiries submitted through contact forms or by email are generally deleted once their processing has been completed and there is no further need for storage.
Data may be stored for a longer period where:
- the enquiry results in a contract or business relationship,
- statutory retention obligations apply,
- the data is required for the establishment, exercise or defence of legal claims,
- you have consented to longer storage.
Business and tax-relevant documents are stored in accordance with the applicable statutory retention periods.
Once the purpose of processing no longer applies and statutory retention periods have expired, the data will be deleted.
9. Recipients of Personal Data
Personal data is disclosed only where this is necessary and legally permitted.
Possible recipients include:
- the hosting and website provider STRATO,
- technical service providers where required for the operation of the website,
- tax advisers or other professional advisers where required within the context of a business relationship,
- public authorities where disclosure is required by law.
Service providers that process personal data on our behalf are engaged in accordance with the applicable legal requirements.
10. Transfers to Third Countries
Under the current configuration of this website, no external analytics tools, social media feeds, videos, maps or comparable third-party content are embedded directly.
Accordingly, no transfer of personal data to countries outside the European Union or European Economic Area takes place through such embedded services under the current configuration.
When you click an external link to LinkedIn, Instagram or another website, you leave this website. The respective provider is responsible for the processing of personal data on the external website.
11. Links to LinkedIn and Instagram
This website contains links to profiles on LinkedIn and Instagram.
These are ordinary external links only. Merely visiting this website does not establish a connection with LinkedIn or Instagram.
A connection is established only when you click the relevant link and are redirected to the website of the respective provider.
From that point onward, the respective provider may process personal data. The nature and extent of that processing are governed by the provider’s own privacy policy.
The respective platform operator is responsible for data processing on the external platform.
12. Legal Bases for Processing
Unless a more specific legal basis is stated in this Privacy Policy, personal data is processed in particular on the following legal bases:
Article 6(1)(a) GDPR where express consent has been given,
Article 6(1)(b) GDPR for the performance of a contract or steps taken prior to entering into a contract,
Article 6(1)(c) GDPR for compliance with a legal obligation,
Article 6(1)(f) GDPR for the purposes of legitimate interests, provided that these are not overridden by the interests or fundamental rights and freedoms of the data subject.
The requirements of Section 25 TDDDG also apply to the storage of or access to information on users’ devices.
13. Your Rights
Subject to the applicable legal requirements, you have the following rights:
- Right of Access
- You may request information as to whether and which personal data concerning you is being processed.
- Right to Rectification
- You may request the correction of inaccurate data or the completion of incomplete data.
- Right to Erasure
- You may request the deletion of your personal data where the legal requirements are met.
- Right to Restriction of Processing
- You may request restriction of processing where the legal requirements are met.
- Right to Data Portability
Where the legal requirements are met, you may request that data you have provided be made available in a structured, commonly used and machine-readable format or transferred to another controller.
Right to Withdraw Consent
You may withdraw consent at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time without giving reasons.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.
You may contact in particular the supervisory authority responsible for your usual place of residence, your place of work or the place of the alleged infringement.
14. Requirement to Provide Data
You are generally not required to provide personal data merely to visit this website.
When contacting us through a form or by email, you must provide the information necessary to process your enquiry.
Without this information, your enquiry may not be processed or may not be processed completely.
15. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.
16. Data Security
This website uses an encrypted connection. An encrypted connection can generally be recognised by the fact that the address line of your browser begins with “https://”.
Encryption is intended to protect data transmitted through the website from access by unauthorised third parties.
Appropriate technical and organisational measures are also used to protect personal data against loss, alteration, unauthorised access and other forms of unlawful processing.
17. Validity and Amendments to This Privacy Policy
This Privacy Policy reflects the current technical and content-related configuration of the website.
It may be amended where the services used, legal requirements or processing activities change.
Last updated: July 2026