/ PRIVACY
Privacy policy
This policy describes how personal data is processed on this website. Last updated: 29 October 2026.
1. Data controller
Dorian SpiegelhauerReichenbachstr. 21
86424 Dinkelscherben
Phone: +49 152 04768715
Email: info@eltschidie.art
2. Hosting and technical operation
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Visiting the website involves processing technically necessary connection data, in particular your IP address, requested file, time of access, and browser and device information. This data is used to deliver the website, diagnose errors and prevent abuse. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is the secure and reliable operation of the website.
According to STRATO, complete IP addresses are retained for no more than seven days to detect and prevent attacks. Access logs made available to customers contain anonymised IP addresses and cover the previous six weeks; aggregated statistics may remain available for longer. Specific security incidents may require further processing for investigation or legal claims. Information about processing by the hosting provider: STRATO privacy information.
3. Contact by email or phone
When you contact me, I process your contact details and the content of your enquiry to respond. For contract-related enquiries, the legal basis is Article 6(1)(b) GDPR; for other enquiries, it is Article 6(1)(f) GDPR and my legitimate interest in answering your message. This website has no contact form.
The data is deleted once your enquiry has been fully dealt with, unless statutory retention duties or legitimate grounds require further storage. Contract and billing records are retained as required by law. Providing your details is voluntary; without the necessary contact information, I may be unable to reply.
4. Privacy settings and local media
For convenience features you actively use, the website stores the project sorting preference and return position, as well as the position during a language switch, in your browser’s session storage. This information remains on your device and is removed when the browser session ends. The legal basis for the necessary access to your device is Section 25(2)(2) TDDDG and, where personal data is involved, Article 6(1)(f) GDPR, based on the legitimate interest in user-friendly navigation.
This website uses no analytics or advertising trackers of its own. Images, preview videos and audio files are loaded from the website’s own hosting space. Playing these audio files does not connect to SoundCloud.
In the privacy dialog, you can reject, accept or select optional services by purpose. Your selection, together with a timestamp and version number, is stored in your browser’s local storage under “eltschidie-privacy-v1” for up to 180 days. This is used only to implement your choice; it is not transmitted to an external consent service. The legal bases are Section 25(2)(2) TDDDG and, where personal data is involved, Article 6(1)(f) GDPR, based on the legitimate interest in reliably respecting your privacy preference.
You can change your choice or withdraw consent with effect for the future at any time through “Privacy settings” in the footer. Withdrawal does not affect the lawfulness of earlier processing. It removes active external players from the page and prevents them from loading again. Data already stored by third parties is not automatically deleted; you can use your browser settings and the providers’ contact options for this purpose.
5. Optional external content
Google Fonts
After you consent to “Google Fonts”, the Inter typeface is loaded from Google’s servers. This transfers data including your IP address and technical request information to Google, for the purpose of a consistent typographic presentation. Without consent, the website uses a font available on your device. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is your consent under Article 6(1)(a) GDPR.
YouTube
External film players are embedded only after you consent to “YouTube” and then click the relevant film. The provider is Google Ireland Limited (YouTube; address above). YouTube is embedded using youtube-nocookie.com. This setting does not prevent all data transfers.
When a player loads, the provider receives data including your IP address, browser information and information about the page visited. Playback may involve additional usage data and local storage. If you are signed in, activity may be linked to your account. The purpose is to provide the selected films. The legal bases are Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG.
This service may also process data in the United States. For information about recipients, retention periods and the safeguards used for international transfers, please see the privacy policy of Google. Processing by the provider depends on the service used and your account settings.
6. External links
Links to SoundCloud, Instagram and other websites are ordinary links. You only visit the respective provider when you open a link. Its privacy policy then applies.
7. Your rights
- Access to your personal data (Article 15 GDPR).
- Rectification of inaccurate data (Article 16 GDPR).
- Erasure and restriction of processing where the legal conditions are met (Articles 17 and 18 GDPR).
- Data portability for automated processing based on consent or a contract (Article 20 GDPR).
- Withdrawal of consent with effect for the future (Article 7(3) GDPR).
Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21 GDPR). Processing will cease unless overriding compelling legitimate grounds exist or processing is necessary for the establishment, exercise or defence of legal claims. You may object to processing for direct marketing at any time.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular where you normally live or work, or where the alleged infringement occurred. For private-sector organisations in Bavaria, the Bayerisches Landesamt für Datenschutzaufsicht is the competent supervisory authority.
The website operator does not carry out automated decision-making, including profiling, on this website.