Privacy policy

Last updated: 31 October 2026

This is a translation of the German privacy policy. In case of doubt, the German version prevails.

In short

1. Controller

Edwin von Lemberg
Rollbühlstraße 89, 68309 Mannheim, Germany
Email: design@edwinvonlemberg.com

2. Hosting and server log files

The website is hosted by Hostinger (Hostinger International Ltd.). Whenever a page is requested, the server automatically processes technical data sent by your browser: IP address, date and time, requested page, referrer, browser and operating system. This is necessary to deliver the website securely and reliably (Art. 6(1)(f) GDPR). The host deletes the log files after a short period. A data processing agreement is in place with Hostinger.

3. Enquiry form

When you submit the form, I process the details you provide (your role, the platforms and features you want, time frame, preferred payment option, description, name, email and, optionally, phone number) to answer your enquiry and, where applicable, to prepare an offer (Art. 6(1)(b) GDPR). The details are sent to me by email and are not stored in a database.

To prevent abuse, the server stores a non-reversible hash of your IP address for no more than two hours in order to limit too many requests in a short time (Art. 6(1)(f) GDPR).

I delete enquiries that do not lead to a contract after twelve months at the latest. If a contract is concluded, the statutory retention periods apply.

4. Email

If you email me, I process your address and the content of your message to reply to you (Art. 6(1)(b) or (f) GDPR). My mailbox is hosted by Hostinger.

5. WhatsApp

The WhatsApp button is a simple link. Only when you tap it does WhatsApp open, and the privacy policy of WhatsApp Ireland Limited (Meta) applies. Data may be transferred to the USA in the process. If you message me there, I process your number and your messages to reply to you. If you do not want this, please use email or the form.

6. Appointment booking with zcal

I use the service zcal (Zcal, Inc., USA) for booking appointments. The calendar only loads after you have chosen a way to get in touch. From then on, your browser connects to zcal’s servers and transmits, among other things, your IP address. If you book an appointment, zcal processes the details you enter there (e.g. name, email, time). The legal basis is your enquiry and thus steps prior to entering into a contract (Art. 6(1)(b) GDPR). When data is transferred to the USA, it may be subject to access by US authorities. You can find details in zcal’s privacy policy.

7. Statistics with Google Analytics and Google Tag Manager

If you choose “Allow statistics” in the cookie banner, I load Google Tag Manager and, through it, Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This lets me see which pages are viewed, roughly where visitors come from, which device they use and whether someone chooses a way to get in touch or sends an enquiry. The content of your enquiry is not transmitted.

For this purpose, Google Analytics sets cookies (_ga and _ga_…), which are stored for up to two years, and processes, among other things, your IP address, which Google Analytics 4 does not store, as well as information about your browser, device and page views. Google keeps the analytics data for up to 14 months. Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision.

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act, TDDDG). You can withdraw it at any time via “Cookie settings” in the footer of the page. The analytics cookies are then deleted and no further data is collected. A data processing agreement is in place with Google.

I store your choice in the cookie banner in your browser’s local storage so that the banner does not appear on every visit. This is technically necessary for that purpose (Section 25(2) No. 2 TDDDG).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). A short email to design@edwinvonlemberg.com is enough.

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

9. Encryption

The website is delivered exclusively via HTTPS. Your entries in the form are transmitted in encrypted form.