Privacy
policy
1. Controller
The controller responsible for data processing on this website is:
Florian Severin, Büro Severin & Wolf, Am Sonnenhut 79, 51109 Köln (Cologne), Germany
Phone: +49 221 204 224 86 · E-mail: kontakt [at] true-magic.de
2. In brief
- This website sets no cookies and uses no analytics, tracking or advertising services.
- Fonts, images and the video are stored on our own server. No content from external providers is loaded.
- There is no newsletter, no user account and no database of visitor data.
- Access logs and access statistics are switched off for this website. We only process personal data when you contact us (form, e-mail, phone).
3. Hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich (owner: René Münnich), Hauptstraße 68, 02742 Friedersdorf, Germany (servers in Germany). A data processing agreement pursuant to Art. 28 GDPR exists with the host.
We have set up the hosting so that no access logs are created for this website; access statistics are not activated either. So no IP addresses, browser details or access times are stored in logs – not even shortened or anonymised. In our hosting account we only see the total amount of data transferred and the storage space used, with no link to individual visitors.
For the server to show you the pages, it has to process your IP address technically for a moment (establishing the connection). We do not store it. The host may process technically necessary connection data to secure its servers; details are in the host's privacy information.
Purpose: delivering the website, stability and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).
The connection between your browser and this website is encrypted using HTTPS.
4. Contacting us (form, e-mail, phone)
If you use the booking form or the contact form, we process the details you enter: name, e-mail address, phone number (optional), date and place of the event (booking form only) and your message. The same applies if you write to us by e-mail or call us.
Purpose: handling your enquiry, advice and quotation. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at your request), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
The form data is not stored on the web server but forwarded by e-mail to our mailbox. As usual, e-mails are not end-to-end encrypted. Your data is not passed on to third parties, apart from the technical service providers for hosting and the e-mail mailbox that support us in operating the site.
Retention: We delete your enquiry once it has been dealt with and no retention obligations apply. If a contract is concluded, we keep the documents in line with commercial and tax retention periods (six or ten years). We need your name and a way to contact you so that we can reply; all other details are optional.
5. Protecting the form against abuse
To protect the form against automated spam we use – without captcha and without external services – three simple measures: a field that is invisible to humans (honeypot), a time lock (when the page loads, a signed timestamp is fetched; it contains no personal data) and a rate limit. For the rate limit, a value calculated from your IP address that cannot easily be reversed (HMAC hash) is briefly used in a temporary file on the server to prevent more than five messages within 15 minutes. This file is no longer used after one hour at the latest and is deleted at a later submission.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse).
6. Video
The video on the “Videos” page is played from our own server. No connection is made to video platforms or other third parties. The video does not start by itself; it is only loaded from our server once you play it. Section 3 applies.
7. External links
In the legal notice we link to the websites of the photographer and a hotel. Data is only transmitted to their operators once you click such a link; we have no influence on that data processing.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object at any time, on grounds relating to your particular situation, to processing of your data based on Art. 6(1)(f) GDPR (Art. 21). Simply write to kontakt [at] true-magic.de. No automated decision-making, including profiling, takes place.
9. Right to lodge a complaint
You can complain to a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, phone +49 211 38424-0, e-mail poststelle@ldi.nrw.de, www.ldi.nrw.de.
10. Changes
If this website or the legal situation changes, we will adapt this policy. The version published here applies.