Privacy Policy

Controller

Principle

This website sets no cookies, uses no browser storage and has no tracking or analytics. All content is served from wiedemann.app itself; no third-party content such as fonts or scripts is loaded. Personal data is processed only to the extent described below.

Hosting and server log files

The website runs on a server whose infrastructure is provided by IONOS SE, Montabaur, Germany. The data centre is located in Germany. The recipient of the data is IONOS as processor under a data processing agreement pursuant to Art. 28 GDPR.

When the website is accessed, the browser transmits technically necessary data to the server, which is stored in log files: the IP address, date and time, the requested address, the status code and the amount of data transferred in the response, the previously visited page (referrer), and the browser identifier. The log files are rotated daily, and the IP address is shortened in the process (the last octet for IPv4, the last block for IPv6). The log files are deleted after eight days at the latest. No evaluation for statistical or analytical purposes takes place.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and stable operation of the website, in particular detecting errors and attacks.

Contact by email

For an enquiry by email, the transmitted data, i.e. the email address, the name if given, and the content of the message, is processed to answer the enquiry. The legal basis is Art. 6(1)(b) GDPR if the enquiry aims at a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR with the legitimate interest of answering enquiries. Providing the data is not required by law or contract; without an email address, however, no reply is possible.

Emails are stored on a mail server operated by the controller, which also runs on the infrastructure named above in Germany. They are stored while the enquiry is being handled or a business relationship exists. Correspondence relating to assignments is additionally kept where tax law requires it; the legal basis for this is Art. 6(1)(c) GDPR. Emails are deleted on request unless a retention obligation applies.

Backups

Backups are stored on the server itself and deleted after two weeks at the latest. Until then, deleted data, including emails, may still be contained in backups.

Rights of data subjects

Under the GDPR, data subjects have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal email to privacy@wiedemann.app is sufficient.

Data subjects also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Right to object

Where data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR), data subjects have the right to object to this processing at any time on grounds relating to their particular situation (Art. 21 GDPR). An informal email to privacy@wiedemann.app is sufficient.

As of: October 2026