1. Privacy at a Glance
General information
The following information provides an overview of what happens to personal data when you visit this website. Personal data means any information that can be used to identify you personally. Detailed information is provided in the following sections of this Privacy Policy.
Data collection on this website
The website operator is responsible for data processing on this website. The operator’s contact details can be found in the section entitled “Controller.”
Some data is collected when you provide it to us, for example by entering information in a contact, comment or newsletter form. Other data is collected automatically by the hosting provider’s and the website’s IT systems when you access the website. This primarily includes technical information such as your IP address, browser, operating system, referrer URL and the time of access.
Services requiring consent, such as external media, maps, externally loaded fonts and icons, or comparable third-party content, are loaded only after you have given your consent through the consent banner. You may change or withdraw your selection at any time through the cookie settings available on this website.
Purposes of processing
We process personal data in particular:
- to provide the website securely and without technical errors;
- to respond to enquiries and comments;
- to distribute the newsletter;
- to analyse the use of the website statistically;
- to prevent abusive access and spam; and
- to display external content after you have given your consent.
Your rights
Subject to the applicable statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
2. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Benjamin Schnabel
Lutherstraße 35
08468 Reichenbach im Vogtland
Germany
Email: info@benjaminschnabel.de
Contact form: https://www.benjaminschnabel.de/kontakt/
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
3. General Information on Data Processing
Legal bases
Depending on the processing operation, we rely on the following legal bases for the processing of personal data:
- Article 6(1)(a) GDPR where you have consented to the processing;
- Article 6(1)(b) GDPR where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract;
- Article 6(1)(c) GDPR where processing is necessary for compliance with a legal obligation;
- Article 6(1)(f) GDPR where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not override those interests.
Where information is stored on, or accessed from, your terminal equipment, strictly necessary operations are carried out on the basis of Section 25(2) of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG). Non-essential access takes place only after your consent in accordance with Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR.
Retention periods
Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as the relevant purpose of processing continues to apply. The data is then erased unless statutory retention obligations or other lawful grounds require further storage. Statutory commercial and tax retention periods may, in particular, amount to six or ten years.
If you withdraw your consent or validly request erasure, we erase the data concerned unless overriding statutory or contractual grounds require its continued retention.
Recipients and processors
We disclose personal data only where this is necessary for the performance of a contract, required by law, based on a legitimate interest, or covered by your consent. Where service providers process personal data on our behalf, we enter into data processing agreements pursuant to Article 28 GDPR where required.
Transfers to third countries
Some of the providers used have their registered offices or technical infrastructure outside the European Economic Area, particularly in the United States. Data is transferred only where the statutory requirements are met. A transfer may be based, in particular, on an adequacy decision of the European Commission for certified US organisations, the European Commission’s Standard Contractual Clauses, or your explicit consent.
Despite contractual and technical safeguards, processing in third countries may not always exclude access by public authorities. Further information is provided under the respective services below.
No automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.
SSL or TLS encryption
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the address beginning with `https://` and the padlock symbol displayed by your browser. When encryption is active, data transmitted to us generally cannot be read by third parties. Absolute protection of data transmitted over the internet cannot, however, be guaranteed.
4. Your Rights
Access, rectification and erasure
Subject to Articles 15 to 17 GDPR, you have the right to obtain access to your personal data, to have inaccurate data rectified and to have unlawfully processed or no longer necessary data erased.
Restriction of processing
Subject to the requirements of Article 18 GDPR, you may request restriction of processing, in particular where you contest the accuracy of the data, the processing is unlawful, we no longer require the data, or you have objected to the processing.
Data portability
Where the requirements of Article 20 GDPR are met, you have the right to receive data that we process automatically on the basis of your consent or a contract in a structured, commonly used and machine-readable format, or to have that data transmitted to another controller.
Withdrawal of consent
You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. You may change your cookie consent through the cookie settings on this website. Other consents may be withdrawn through the contact details set out above.
Right to object under Article 21 GDPR
WHERE PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. WE WILL THEN NO LONGER PROCESS THE DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
WHERE DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU MAY OBJECT TO SUCH PROCESSING AT ANY TIME. THE DATA CONCERNED WILL THEN NO LONGER BE USED FOR DIRECT MARKETING.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for our registered location is:
Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany
Email: post@sdtb.sachsen.de
Website: https://www.datenschutz.sachsen.de/
You may also contact any other supervisory authority competent under Article 77 GDPR.
5. Hosting and Server Log Files
Hosting by STRATO
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access the website, the hosting provider processes in particular:
- the IP address of the accessing device;
- the date and time of access;
- the page or file requested;
- the referrer URL;
- browser type and version;
- operating system;
- the hostname of the accessing device; and
- the HTTP status code.
Processing is necessary to deliver the website, ensure technical stability, analyse errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically error-free provision of this website. According to STRATO, IP addresses in server log files are generally retained for no more than seven days for the purpose of detecting and preventing attacks, unless a security incident requires longer retention.
We have entered into a data processing agreement with STRATO. Further information can be found in STRATO’s privacy information.
6. Cookies and Consent Management
Cookies and similar technologies
Cookies are small data records stored on your terminal equipment. Similar technologies may include local storage, pixels or device information. Some of these technologies are technically necessary, while others support external media, statistics or convenience functions.
Strictly necessary technologies are used on the basis of Section 25(2) TDDDG. Where personal data is processed, the legal basis is Article 6(1)(c) or (f) GDPR, depending on the purpose. Non-essential cookies, external media and comparable access operations are activated only after your consent in accordance with Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Consent management with Complianz
We use Complianz to obtain and document legally required consents and to allow their withdrawal. The software is provided by Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, the Netherlands.
Complianz stores your selection in technically necessary cookies or in your browser’s local storage. This may include the consent status, time of consent, browser version used and a technical identifier. Storage is necessary so that your selection can be respected on later visits and documented where required.
The legal bases are Article 6(1)(c) GDPR and, additionally, Article 6(1)(f) GDPR, as well as Section 25(2) TDDDG. Our legitimate interest is the lawful and user-friendly management of consent. You may change your selection at any time via the “Cookie Settings” link.
The cookies and services used, their purposes, providers and retention periods are also described in the cookie policy and cookie settings supplied through Complianz.
7. Contacting Us
Contact forms using Contact Form 7 and WPForms
We use the WordPress plugins Contact Form 7 and WPForms for contact and enquiry forms. When you submit a form, we process the information you enter, in particular your name, email address, subject, message and any additional information you provide voluntarily. Technical information such as your IP address, time of submission, browser information and spam-checking data may also be processed.
The information is transmitted to us by email so that we can process your enquiry. Depending on the technical configuration of the form, entries may also be stored temporarily in the WordPress database. Data is disclosed only where this is necessary to process your enquiry, required by law or covered by your consent.
Where your enquiry relates to a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the appropriate and efficient handling of enquiries. Where consent is requested, the legal basis is Article 6(1)(a) GDPR.
The data is erased once your enquiry has been fully dealt with and no statutory retention obligations, contractual interests or legal claims require further storage.
Contact by email
When you contact us by email, we process your message, including the contact details and metadata transmitted, in order to respond to your enquiry. The legal bases and retention criteria correspond to those stated above for the contact form.
Please note that unencrypted email may involve security risks. Particularly confidential information should be transmitted only through an appropriately secured communication channel.
8. Comments and Spam Prevention
Comment function
When you publish a comment, we process the comment text, the name you provide, your email address, the time of submission, your IP address and, where applicable, the website you provide. The required fields and public visibility of information are indicated in the comment form.
Publication of the comment is based on your consent pursuant to Article 6(1)(a) GDPR. The processing of technical information for spam prevention, moderation, investigation of infringements and defence of legal claims is based on Article 6(1)(f) GDPR. Our legitimate interest is the provision of a secure and constructive comment function.
Comments and the associated data are generally stored for as long as the commented content remains available. You may request erasure of your comment unless statutory grounds or overriding legitimate interests require continued retention.
Akismet
We use Akismet to identify unwanted comments. The service is provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.
Akismet may process, in particular, the comment text, name, email address, IP address, browser and device information, referrer, website URL, time of submission and technical submission details. The information is compared against a global spam database. Automattic may process data in the United States and other countries.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to protect the website and the comment function from spam, malware and abusive content. According to Akismet, most spam-related data is retained for between two weeks and 90 days. Transfers to third countries are based, among other safeguards, on Standard Contractual Clauses.
Further information is available in Akismet’s Privacy Policy and Akismet’s GDPR information.
9. Audience Measurement Using WP Statistics
We use WP Statistics to evaluate the use of this website statistically. In the privacy-friendly configuration used by us, the plugin processes, in particular, pages visited, referrers, browser and device types, operating system, approximate geographic origin and technical access data.
In its privacy-friendly standard configuration, WP Statistics does not use cookies or persistent identifiers. IP addresses are anonymised or hashed with a rotating salt before storage. Statistical information is stored locally in the WordPress database on the server used by us and is not transmitted by the plugin to WP Statistics or other analytics providers.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to understand and improve the reach, use and technical quality of our website in aggregated form. If a modified configuration causes WP Statistics to use non-anonymous data, cookies or other access to your device, processing will take place only after your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Further information can be found in WP Statistics’ data and privacy information.
10. Newsletter Using Mailchimp
Subscription and double opt-in
You may subscribe to our newsletter. We generally require your email address for registration; any other information is voluntary. After registration, you will receive a confirmation message. The subscription is activated only when you click the confirmation link. This double opt-in procedure documents that registration was actually initiated by the holder of the email address provided.
We use Mailchimp to distribute and manage the newsletter. The provider is The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce De Leon Avenue NE, Suite 5000, Atlanta, Georgia 30308, USA, an Intuit group company.
Mailchimp processes in particular your email address, voluntary profile information, registration time, proof of consent, IP address, delivery information and subscription or unsubscription data. Where performance analysis is enabled, newsletters may contain tracking pixels and individualised links that record openings, clicks, devices used and approximate locations. Such personal performance analysis is carried out only within the scope of the consent given for this purpose. You may withdraw that consent at any time by unsubscribing from the newsletter.
The legal basis for distribution, administration, proof of consent and any activated personal performance measurement is Article 6(1)(a) GDPR. Logging of the double opt-in may additionally be based on Article 6(1)(f) GDPR; our legitimate interest is to demonstrate proper registration and prevent misuse.
The data is retained until you unsubscribe or the purpose of distribution ceases to apply. After unsubscribing, your email address and proof of unsubscription may remain on a suppression list in order to prevent further mailings and demonstrate compliance with legal requirements. The legal bases for this are Article 6(1)(c) and (f) GDPR.
Mailchimp also processes data in the United States. Mailchimp is certified under the EU-US Data Privacy Framework. In addition, Mailchimp’s Data Processing Addendum incorporates the European Commission’s Standard Contractual Clauses. Where required, we have entered into a data processing agreement with Mailchimp.
Further information can be found in Mailchimp’s privacy information and its information on European data transfers.
11. External Media and Map Services
The services described below are blocked by Complianz and are loaded only after you have consented to the relevant category. Without consent, only a placeholder is displayed. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time through the cookie settings.
YouTube
We embed videos from YouTube. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Its parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.
After you have given your consent, a connection to YouTube’s servers is established. YouTube may process, in particular, your IP address, the page accessed, device and browser information, referrer, time of access, usage and interaction data, and cookies or similar identifiers. If you are signed in to YouTube or Google, the visit may be associated with your account.
Google may also process information in the United States and other countries. Transfers to certified US recipients may be based on the EU-US Data Privacy Framework; Google also states that it uses Standard Contractual Clauses.
Further information is available in Google’s Privacy Policy.
Google Maps
We use Google Maps to display geographic information and maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; its parent company is Google LLC in the United States.
After you have given your consent, Google may process, in particular, your IP address, location data, device information, the page accessed, referrer, usage data and Google identifiers. Google Maps may load Google Fonts and other Google services. If you are signed in to a Google account, use of the service may be associated with your account.
The information on third-country transfers set out in the YouTube section also applies. Further information can be found in Google’s Privacy Policy and the Google Maps Terms of Service.
Spotify
We embed content from the music and audio service Spotify. The provider is:
Spotify AB
Regeringsgatan 19
SE-111 53 Stockholm
Sweden
After you have given your consent, a connection to Spotify is established. Spotify may process, in particular, your IP address, browser and device information, the page accessed, referrer, time of access, interaction data, and cookies or similar identifiers. If you are signed in to Spotify, Spotify may associate the visit with your user account. Spotify may use additional service providers within its technical infrastructure and process data outside the European Economic Area.
Further information is available in Spotify’s Privacy Policy.
12. Fonts and Icons
Locally hosted Google Fonts
Some Google Fonts used on this website are stored locally on our server and served from there. This local integration does not, by itself, establish a connection to Google.
Externally loaded Google Fonts
Where individual fonts are loaded externally from Google servers, they are loaded only after you have given your consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the fonts are loaded, your IP address and technical browser and device information in particular are transmitted to Google. Google may also process data in the United States.
The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. Further information can be found in Google’s Privacy Policy and the Google Fonts privacy information.
Locally hosted Font Awesome
Some Font Awesome icons and font files used on this website are stored locally on our server. This local integration does not, by itself, establish a connection to Fonticons.
Externally loaded Font Awesome
Where Font Awesome files are loaded from servers or content delivery networks operated by Fonticons or its service providers, they are loaded only after you have given your consent. In particular, your IP address, the page accessed, browser and device information, and the time of access may be processed.
The provider is Fonticons, Inc., USA. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. Further information can be found in Font Awesome’s Privacy Policy.
13. Google reCAPTCHA
We use Google reCAPTCHA to protect forms and comment functions from automated submissions, spam and misuse. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; its parent company is Google LLC in the United States.
Once activated, reCAPTCHA analyses various characteristics of a website visit. This may include, in particular, your IP address, referrer, time spent on the site, mouse and keyboard movements, browser and device information, language settings, screen resolution, Google cookies and, where applicable, information from a signed-in Google account. The analysis is automated in order to assess the likelihood that the user is human.
reCAPTCHA is loaded only after you have given your consent. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. Without consent, a protected form may not be available. In that case, you may contact us by email.
Further information is available in Google’s Privacy Policy and Google’s Terms of Service.
14. Security Using Wordfence
We use Wordfence to protect the website against malware, brute-force attacks, unauthorised access and other security risks. The provider is Defiant, Inc., USA.
For this purpose, Wordfence may process, in particular, your IP address, timestamp, requested URL, referrer, browser and device information, login attempts, submitted requests and security-related events. Suspicious access attempts may be compared with Wordfence security databases and blocked.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to protect the website, its content and the data processed against cyberattacks and abusive access. Where Wordfence stores or accesses information on terminal equipment, this takes place only in accordance with Section 25 TDDDG.
Processing in the United States cannot be excluded. Wordfence provides the European Commission’s Standard Contractual Clauses for third-country transfers. Where required, a data processing agreement is in place.
Further information can be found in Wordfence’s Privacy Policy and its GDPR information.
15. Links to Social Networks
This website contains ordinary links to our or related profiles on Facebook, Instagram, X/Twitter and LinkedIn. Merely displaying these links does not establish a connection to the respective networks. No social media feeds, like buttons or tracking pixels from these providers are loaded.
When you click a link, you leave our website. The respective provider then processes data under its own responsibility. This may include, in particular, your IP address, referrer information, device and browser data and, if you are signed in, account information. The privacy policies of the respective networks apply:
16. Updates to this Privacy Policy
We update this Privacy Policy when the services used, the processing of data or the legal situation changes. The version published on this website at the relevant time applies.
Last updated: 13 November 2026
17. Language and Prevailing Version
This English version is provided for information and convenience. The German-language version is the legally authoritative version. If there is any discrepancy or ambiguity between the two versions, the German version shall prevail.