{"id":1971,"date":"2026-06-03T09:29:41","date_gmt":"2026-06-03T08:29:41","guid":{"rendered":"http:\/\/neu.koetzingit.de\/?page_id=1971"},"modified":"2026-07-10T06:38:47","modified_gmt":"2026-07-10T05:38:47","slug":"datenschutz","status":"publish","type":"page","link":"https:\/\/www.koetzingit.de\/en\/datenschutz\/","title":{"rendered":"Data protection"},"content":{"rendered":"<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Privacy Policy<\/h1>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>As of:<\/strong> July 2026<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Data Controller<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Thomas K\u00f6tzing, Pfarrer-Reis-Str. 2, 91077 Hetzles, Germany<br>Email: <code>Thomas@koetzingit.de<\/code> Phone: <code>09134-8019745<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A data protection officer has not been appointed by law, as the requirements for doing so (including \u00a7 38 BDSG) have not been met.<br><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Overview of Processing Steps<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The following overview summarizes the types of data processed and the purposes of such processing, and identifies the data subjects.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Types of data processed<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Master data (e.g., names, addresses)<\/li>\n\n\n\n<li>Contact information (e.g., email addresses, phone numbers)<\/li>\n\n\n\n<li>Content data (e.g., form entries, comments)<\/li>\n\n\n\n<li>Usage data (e.g., pages visited, access times, interest in content)<\/li>\n\n\n\n<li>Meta data, communication data, and procedural data (e.g., IP addresses, timestamps, device identifiers)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Categories of data subjects<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Communication Partners and Prospective Clients<\/li>\n\n\n\n<li>Users of the online service (website visitors)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Purposes of Processing<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Providing contractual services and responding to inquiries<\/li>\n\n\n\n<li>Safety measures<\/li>\n\n\n\n<li>Measuring Reach and Optimizing the Online Offering<\/li>\n\n\n\n<li>Managing and Responding to Inquiries<\/li>\n\n\n\n<li>Provision of the Online Service and User-Friendliness<br><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Relevant legal basis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The following are the legal bases under the GDPR on which the processing of personal data is based. Please note that, in addition to the GDPR, national data protection regulations may apply. If more specific legal bases apply in individual cases, these will be specified in the Privacy Policy.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Consent (Art. 6(1)(a) of the GDPR)<\/strong> \u2013 the data subject has given consent to the processing.<\/li>\n\n\n\n<li><strong>Performance of a Contract and Pre-Contractual Inquiries (Art. 6(1)(b) of the GDPR)<\/strong>.<\/li>\n\n\n\n<li><strong>Legal obligation (Art. 6(1)(c) of the GDPR)<\/strong>.<\/li>\n\n\n\n<li><strong>Legitimate Interests (Art. 6(1)(f) of the GDPR)<\/strong> \u2013 unless the interests, fundamental rights, and fundamental freedoms of the data subject take precedence.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>National Regulations in Germany:<\/strong> In addition, the Federal Data Protection Act (BDSG) and the <strong>Act on Data Protection and the Protection of Privacy in Telecommunications and Digital Services (TDDDG)<\/strong>. The TDDDG governs, in particular, the use of cookies and access to information on users\u2019 end devices (e.g., for audience measurement, recognition, or embedded third-party content). Required consents are obtained via a cookie\/consent dialog (\u00a7 25(1) TDDDG). Technically necessary services are based on \u00a7 25(2) TDDDG.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Safety measures<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In accordance with Article 32 of the GDPR, appropriate technical and organizational measures are taken to ensure a level of protection appropriate to the risk. These include, in particular, the encryption of data transmission via TLS\/SSL (indicated by the \u201ehttps\u201c prefix in the address bar) as well as the control of access to data.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Transfer of Personal Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As part of the processing, data may be transferred to or disclosed to other entities, companies, or individuals (e.g., hosting service providers or payment service providers). The legal basis is Article 6(1)(b) of the GDPR, provided this is necessary for the performance of a contract; otherwise, it is based on legitimate interests or consent. Contracts with data processors are concluded in accordance with Article 28 of the GDPR.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">International Data Transfers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If data is processed in a third country (outside the EU\/EEA) or if this occurs in connection with the use of third-party services, it is done only in accordance with legal requirements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For data transfers to the United States, we rely\u2014where applicable\u2014on the EU Commission\u2019s adequacy decision regarding <strong>EU-U.S. Data Privacy Framework (DPF)<\/strong> as of July 10, 2023, provided that the respective provider is certified under the DPF. If a provider is not DPF-certified, the transmission is based on the <strong>Standard Contractual Clauses (SCC)<\/strong> the European Commission (Art. 46(2)(c) of the GDPR) and appropriate additional safeguards.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Deletion of Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The processed data will be deleted as soon as the consents granted for its processing are revoked or other authorizations cease to apply (e.g., if the purpose of the processing no longer applies or the data is no longer necessary). Statutory retention requirements (particularly under commercial and tax law, generally 6 or 10 years) remain unaffected; processing will be restricted accordingly for this period.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Rights of data subjects<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As a data subject under the GDPR, you have various rights:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Right to Object (Art. 21 of the GDPR):<\/strong> You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR. If data is processed for direct marketing purposes, you may object at any time.<\/li>\n\n\n\n<li><strong>Right to Withdraw Consent (Art. 7(3) of the GDPR):<\/strong> You may revoke any consent you have given at any time, effective for the future.<\/li>\n\n\n\n<li><strong>Right of Access (Art. 15 of the GDPR).<\/strong><\/li>\n\n\n\n<li><strong>Right to rectification (Art. 16 of the GDPR).<\/strong><\/li>\n\n\n\n<li><strong>Right to erasure and restriction (Art. 17, 18 GDPR).<\/strong><\/li>\n\n\n\n<li><strong>Right to Data Portability (Art. 20 of the GDPR).<\/strong><\/li>\n\n\n\n<li><strong>Right to lodge a complaint with a supervisory authority (Art. 77 of the GDPR):<\/strong> You have the right to file a complaint with a supervisory authority. The competent authority for the data controller is: <strong>Bavarian State Office for Data Protection Supervision (BayLDA)<\/strong> Promenade 27, 91522 Ansbach https:\/\/www.lda.bayern.de<br><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Use of Cookies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cookies are small text files or other storage mechanisms that store and retrieve information on end devices. We use cookies in accordance with legal requirements.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Technically Necessary Cookies<\/strong> are used on the basis of Section 25(2) of the TDDDG or our legitimate interests (Article 6(1)(f) of the GDPR), to the extent that they are necessary for the operation of the website.<\/li>\n\n\n\n<li><strong>Cookies and Services Requiring Consent<\/strong> (e.g., audience measurement, embedded third-party content) are set exclusively on the basis of your consent (Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR). We obtain this consent via a cookie consent dialog. You can change or revoke your selection at any time via the consent tool\u2019s settings.<br><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Provision of the Online Service and Web Hosting<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To ensure that our online services are provided securely and efficiently, we use the services of a hosting provider. Among other things, this involves the processing of visitors\u2019 inventory, contact, content, usage, metadata, and communication data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Web hosting providers:<\/strong> <code>STRATO GmbH. Registered office: <em>Otto-Ostrowski-Stra\u00dfe 7, 10249 Berlin<\/em>.<\/code> <br>A data processing agreement has been entered into with the service provider in accordance with Article 28 of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Server log files:<\/strong> The web server automatically collects data (so-called server log files) each time a page is accessed, including the page accessed, the date and time of the request, the amount of data transferred, a notification of a successful request, the browser type and version, the operating system, the referrer URL, and the IP address (which may be truncated). The legal basis is our legitimate interest in stable and secure operation (Art. 6(1)(f) GDPR). For security reasons, the log files are stored for a maximum of 7 days and then deleted; data that must be retained for evidentiary purposes remains stored until the incident has been fully resolved.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Contact Us<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When you contact us (e.g., via the contact form, email, or phone), the information provided by the person making the inquiry will be processed to the extent necessary to respond to the inquiry. The legal basis is the fulfillment of (pre-)contractual obligations (Art. 6(1)(b) GDPR), provided the inquiry is related to a contract; otherwise, our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Comments and posts<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When users leave comments or other posts, their IP addresses are stored for 7 days based on our legitimate interests (Art. 6(1)(f) GDPR). This is for our security in the event that someone posts unlawful content. Names, email addresses, and website information provided are stored permanently until users object.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Reach Measurement with Google Analytics 4<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We use <strong>Google Analytics 4<\/strong>, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to measure reach and optimize our online offerings. In doing so, Google processes usage data (e.g., pages visited, interactions, approximate location data, device and browser information). Users\u2019 IP addresses are truncated by Google within EU\/EEA member states and are transferred to the U.S. only in exceptional cases. Google Analytics 4 uses, by default, <strong>none<\/strong> No longer does it store IP addresses in the traditional way; the IP address is used only briefly to determine location and is not stored permanently.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Legal Basis<\/strong> This is based solely on your consent pursuant to Section 25(1) of the TDDDG in conjunction with Article 6(1)(a) of the GDPR, which you provide via our consent dialog and may revoke at any time. <strong>Transfers to third countries:<\/strong> Google LLC is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses are also in place. A data processing agreement is in place with Google. For more information: https:\/\/policies.google.com\/privacy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Fonts (Web Fonts)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To ensure consistent font display, we incorporate third-party web fonts. When you visit a page, your browser downloads the required fonts from the provider\u2019s server, and your IP address is transmitted in the process. This integration is based on your consent (Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR). <strong>Recommendation: Use local integration to avoid transferring data to third parties.<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Social Media Presence<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We maintain profiles on social media platforms to communicate with users active on those platforms and to provide information about our services. When you access these platforms, their terms of service and privacy policies apply. The providers regularly process user data for market research and advertising purposes, including to create user profiles. The legal basis is our legitimate interest in effective information and communication (Art. 6(1)(f) GDPR). We may operate these platforms jointly with the provider (Art. 26 GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Networks Used:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>LinkedIn<\/strong> \u2013 LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. https:\/\/www.linkedin.com\/legal\/privacy-policy<\/li>\n\n\n\n<li><strong>X (formerly Twitter)<\/strong> \u2013 Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland. https:\/\/x.com\/de\/privacy<\/li>\n\n\n\n<li><strong>Facebook<\/strong> \u2013 Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. https:\/\/www.facebook.com\/privacy\/policy<br><br><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Changes and Updates to This Privacy Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We ask that you review the contents of this Privacy Policy regularly. We will update it as soon as changes to our data processing practices make it necessary.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Datenschutzerkl\u00e4rung Stand: Juli 2026 Verantwortlicher Thomas K\u00f6tzing, Pfarrer-Reis-Str. 2, 91077 Hetzles, DeutschlandE-Mail: Thomas@koetzingit.de Telefon: 09134-8019745 Ein Datenschutzbeauftragter ist gesetzlich nicht [&hellip;]<\/p>\n","protected":false},"author":1755,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-1971","page","type-page","status-publish","hentry"],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"trp-custom-language-flag":false},"uagb_author_info":{"display_name":"Thomas K\u00f6tzing","author_link":"https:\/\/www.koetzingit.de\/en\/author\/thomas-koetzing\/"},"uagb_comment_info":0,"uagb_excerpt":"Datenschutzerkl\u00e4rung Stand: Juli 2026 Verantwortlicher Thomas K\u00f6tzing, Pfarrer-Reis-Str. 2, 91077 Hetzles, DeutschlandE-Mail: Thomas@koetzingit.de Telefon: 09134-8019745 Ein Datenschutzbeauftragter ist gesetzlich nicht [&hellip;]","_links":{"self":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/pages\/1971","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/users\/1755"}],"replies":[{"embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/comments?post=1971"}],"version-history":[{"count":9,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/pages\/1971\/revisions"}],"predecessor-version":[{"id":2075,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/pages\/1971\/revisions\/2075"}],"wp:attachment":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/media?parent=1971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}