Privacy policy

For privacy-related enquiries, please contact us at info@alfred-giegerich.de.

When you access this website, technically necessary access data may be processed in server logs. This may include, in particular, the IP address, date and time of access, the requested address, the transmitted referrer, browser and operating system information, the HTTP status code and the volume of data transferred.

This data is processed to provide the website securely, reliably and without errors, to detect technical faults and to prevent attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the security and proper functioning of our website.

Log data is retained only for as long as necessary for the relevant technical or security purpose, or for as long as statutory obligations require further retention. It is then deleted or anonymised.

The web application is self-hosted. We do not use analytics or marketing services. We do not embed Google Maps. The fonts used on this website are hosted locally, so no connection to external font providers is established for this purpose.

To store your selection, we use the technically necessary cookie ag_google_recaptcha_consent. It contains only versioned information indicating whether you have allowed or rejected Google reCAPTCHA. The cookie is stored for 180 days. It prevents us from asking you to make the same selection each time you visit the website and does not itself establish a connection to Google.

Google reCAPTCHA initially remains completely disabled. The service is loaded only after you have given your explicit consent. You can change your selection at any time using the cookie settings button, which is permanently available at the bottom of the page. Withdrawal of consent applies prospectively. Once the storage period has expired, or if there is a material change to the processing, we will ask you to make your selection again.

When you contact us using the contact form, we process the information you provide: your name, email address, optional telephone number, selected project type and message. This data is used solely to identify, process and respond to your enquiry.

Your enquiry is transmitted to our internal recipients via a TLS-secured SMTP connection. The content of your enquiry is not used for advertising, nor is the data sold.

If your enquiry relates to a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in appropriate communication and the proper handling of incoming enquiries.

The data is deleted once your enquiry has been fully dealt with, unless statutory obligations or the establishment, exercise or defence of legal claims require further retention.

To protect the contact form against automated submissions, spam and misuse, we use Google reCAPTCHA Enterprise with a score-based key. This version assesses the risk of misuse in the background and does not use visible image challenges. For customers with a German billing address, the contractual partner for Google Cloud is generally Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Irland, unless otherwise agreed in the specific contract.

Before you give your consent, neither the reCAPTCHA script nor any related content is loaded from Google. Only after consent has been given do we load the script provided via the Google domain recaptcha.net. In doing so, Google may process, in particular, the IP address, the page accessed and referrer information, the date and time, browser, operating system, device and language settings, cookies or similar identifiers, as well as technical interaction and usage signals. Google states that reCAPTCHA uses the cookie _GRECAPTCHA for risk analysis.

During the assessment, reCAPTCHA generates a short-lived token. Our server transmits this token, the public site key and, where available, the IP address to the reCAPTCHA Enterprise interface. Google returns information about the token’s validity, the action performed and the hostname, together with a risk assessment. An enquiry is sent only if the server-side verification is successful. The content of your enquiry is not transmitted to Google via this interface.

The legal basis for storing information on, or accessing information from, your device is your consent pursuant to section 25(1) TDDDG. The associated processing of personal data is based on Article 6(1)(a) GDPR. Consent is voluntary and can be withdrawn at any time via the cookie settings with effect for the future. Without consent, the protected contact form cannot be submitted; you can still contact us without reCAPTCHA by telephone or email.

Under the current Google Cloud Terms of Service we process the reCAPTCHA data as the controller; Google processes it as a processor under the Google Cloud Data Processing Addendum. Google may use additional subprocessors and infrastructure outside the European Union or the European Economic Area. Where personal data is transferred to a third country in this context, the transfer is governed by the statutory requirements and the applicable safeguards under the contract with Google. The contractual partners, processing locations and transfer mechanisms that actually apply depend on our specific Google Cloud configuration.

Further official information is available in the Google Cloud reCAPTCHA FAQ and the Google Cloud Data Processing Addendum as well as in the list of Google Cloud subprocessors and in the Google Privacy Policy.

Within the company, contact enquiries are accessible only to the internal recipients responsible for handling them. Data is disclosed to other recipients only where this is necessary to process your enquiry, where there is a legal obligation to do so, or where a technical service provider is engaged in accordance with data protection requirements. These recipients include the SMTP service provider used for email delivery and, solely with your consent and for security verification, Google Cloud and its subprocessors. Google reCAPTCHA Enterprise is used as described above. The content of your enquiry is neither disclosed nor sold for advertising or marketing purposes.

This website is delivered via HTTPS. SSL/TLS encryption protects transmitted content against unauthorised interception and alteration while in transit. Email content is additionally transmitted to internal recipients via a TLS-secured SMTP connection.

Where the statutory requirements are met, you have, in particular, the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR and the right to data portability under Article 20 GDPR.

You may object to processing based on Article 6(1)(f) GDPR, in accordance with Article 21 GDPR, on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

To exercise your rights, please email info@alfred-giegerich.de.

If you believe that the processing of your personal data infringes data protection law, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority. For private-sector bodies in Bavaria, you can contact the Bayerisches Landesamt für Datenschutzaufsicht in particular:

We update this privacy policy whenever the features used, the actual processing of data or the legal requirements change. The version published on this page at the relevant time is authoritative.