Privacy

Information pursuant to § 5 DDG

[First and last name] [Street and number] [Postcode, city] [Country, if not Germany]

Contact

E-mail: [address] [Phone number, if you want to give one — not mandatory for a private site]

Responsible for the content pursuant to § 18 (2) MStV

[Name and address, usually identical to the details above]

VAT identification number

[VAT ID under § 27 a UStG, if you have one — for a purely private site this section is dropped entirely]

Dispute resolution

[Reference to the EU online dispute resolution platform and whether you are willing to take part in proceedings before a consumer arbitration board — only relevant if the site is commercial]

[This is a scaffold, not a finished legal notice. Have it drawn up with a generator or a lawyer before launch. The pipeline refuses to deploy while square brackets remain.]

Controller

[Name and address as in the legal notice, plus the e-mail address for privacy requests]

Hosting and server logs

[Provider and server location. Which access data is logged — typically IP address, timestamp, page requested, referrer, user agent — on what legal basis (usually Art. 6 (1) (f) GDPR) and for how long it is kept. If a processor is involved, add the reference to the Art. 28 GDPR agreement.]

Cookies and analytics

[Verified against the built site: it sets no cookies and writes nothing to localStorage or sessionStorage. There is no analytics tool and no reach measurement. Phrase this as an assurance, not as a technical description.]

Fonts and third-party content

[Verified against the built site: all fonts are served from this domain. No resources are loaded from Google Fonts, a CDN or any other third party, so no IP addresses are transmitted to third parties.]

Search

[Verified against the built site: search runs entirely in the browser. On first open it fetches a static JSON file from this domain; the search term itself is never transmitted and never stored.]

Contact form

[Only relevant once a form backend is configured. Then: which fields are transmitted — name, e-mail, message, language — to which service, the purpose, the legal basis (Art. 6 (1) (b) or (f) GDPR), the retention period and the processor. While no backend is configured the contact page shows only an e-mail address, in which case this section describes contact by e-mail.]

Your rights

[Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), plus the right to lodge a complaint with a supervisory authority under Art. 77 GDPR. The authority is the one for your place of residence — for Düsseldorf that would be the data protection authority of North Rhine-Westphalia. Check this against your actual address and give its contact details.]

Changes to this policy

[Note that the policy is updated when the processing changes, with a date of last revision.]

[This is a scaffold, not finished legal text. The sections on cookies, fonts and search state facts verified against the built site; the wording and completeness still belong with a generator or a lawyer. The pipeline refuses to deploy while square brackets remain.]