The controller responsible for data processing on this website is:
Sascha Hein, Heimelstraße 25, 66131 Saarbrücken, Germany
Email: info@sascha-hein.com · Phone: +49 176 62210035
I only process personal data to the extent necessary to run this website, answer your enquiries or carry out a commission. The legal bases are Art. 6(1) GDPR – in particular point (a) (consent), point (b) (contract and pre-contractual enquiries) and point (f) (legitimate interest in a secure, working website). There is no cross-site tracking and there are no advertising cookies. For simple, cookie-free visitor counting I use Statify (see section 7).
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes all data generated when the site is accessed solely on my behalf. A data processing agreement pursuant to Art. 28 GDPR is in place. The legal basis is Art. 6(1)(f) GDPR.
Each time the site is accessed, the server automatically stores technical information transmitted by your browser: IP address, date and time, page requested, referrer URL, browser type and operating system. I need this data to run the site in a stable and secure way (Art. 6(1)(f) GDPR). It is not combined with other data and is deleted after [7] days at the latest.
This site uses SSL/TLS encryption. You can recognise it by the padlock icon and “https://” in the address bar.
This website does not set any tracking or advertising cookies and therefore does not need a cookie banner. Technically necessary cookies may be set when logging in to the admin area – this only concerns me as the operator. The legal basis is Section 25(2) TDDDG and Art. 6(1)(f) GDPR.
To see which pages are visited and how often, I use the WordPress plugin Statify. It only counts page views: it stores the date, the page requested and – if available – the page you came from. Statify sets no cookies, stores no IP addresses and creates no user profiles. The data stays on my server at IONOS and is not passed on to third parties. The legal basis is my legitimate interest in simple audience measurement (Art. 6(1)(f) GDPR).
If you write to me via the contact form or by email, I process your details (name, email address, subject, message) solely to answer your enquiry. Form submissions are forwarded to me by email and are not stored permanently on the website. The legal basis is Art. 6(1)(b) GDPR where a possible commission is concerned, otherwise Art. 6(1)(f) GDPR. I delete the data once the enquiry has been dealt with, unless statutory retention obligations apply.
The typeface used (Saira Condensed) is stored locally on the server. No connection to Google or any other font provider is made when you visit the site.
My films are embedded via Vimeo or YouTube. The videos are only loaded once you actively click “Play”. Only then is data – including your IP address – transmitted to the respective provider, possibly also to the USA. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. For more information, see the privacy policies of Vimeo and Google/YouTube.
Instagram and other platforms are included as simple links only. No data is transmitted to these platforms when you visit this website. Only when you click a link do the privacy terms of the respective provider apply.
You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent you have given at any time with effect for the future. An informal email to me is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany.
September 2026. I will update this policy whenever the website or the legal situation changes. This English version is provided for convenience; the German version is legally binding.