GRITTMANN / Legal information
What data we process, for what purpose and what rights you have.
Last updated: November 11, 2026
01 / Responsible person according to GDPR
Sebastian Grittmann
GRITTMANN – development · design · hosting
Obere Schloßgasse 5, 55234 Biebelnheim, Germany
Email: mail@grittmann.media
Telephone: +49 6733 4819999
Mobile: +49 157 57 44 99 65
These notices apply to this website including contact forms, journal, registration and customer portal.
This website is hosted and operated by GRITTMANN – development · design · hosting, owner Sebastian Grittmann. The server is located in Germany. The provider and the person responsible for data protection are identical; The contact details can be found above in the “Your contact person” section.
When called up, technically required connection data is transferred to the web server. This includes, in particular, IP address, time, requested address, browser information and, if applicable, the previously visited page. The processing serves the delivery and security of the website. The legal basis is Article 6 Paragraph 1 Letter f GDPR; our legitimate interest lies in safe, functional operation.
The Apache system logs are retained for 14 days and then deleted.
If you contact us, we will process your contact details and the content of your message in order to process and respond. In particular, name, email address, message and voluntary information such as telephone number, service request, budget and callback request are stored in the forms. Individual forms can contain additional, visibly labeled fields.
For contract-related inquiries, this is done in accordance with Art. 6 Para. 1 lit. b GDPR, for other inquiries in accordance with Art. 6 Para. 1 lit. f GDPR due to our interest in answering. Confirmation of having read the data protection information does not constitute consent to advertising. The form cannot be processed without the information marked as required. Alternatively, you can contact us by phone or email.
Requests are stored in the website database. Automatic email sending is deactivated in the current application configuration. Messages that you send directly by email are processed via the email services used; Their providers still need to be recorded for the final version.
For provisioned accounts, we process contact details, associated companies, roles, permissions and password hashes. Assigned projects, tasks, messages, tickets, files, approvals as well as information about invoices, offers, contracts and hosting services can be processed in the portal. This serves the purpose of contract execution and cooperation (Art. 6 Para. 1 lit. b GDPR), the fulfillment of legal obligations (Art. 6 Para. 1 lit. c GDPR) and access security (Art. 6 Para. 1 lit. f GDPR).
Access is granted to authorized internal persons and the assigned customer. An account is not required to read the public website. Registered sessions expire after more than two hours of inactivity; the check takes place the next time it is called.
If you submit a comment, we save the name, email address, comment text and the assignment to the post. The email address will not be published and will be used to confirm receipt. Moderation takes place before publication. Shared comments and names are publicly readable. The legal basis is Article 6 Paragraph 1 Letter f GDPR; Our interest is the exchange you want about the contribution. Please do not submit any confidential information. If you have any requests for changes or deletion, please contact us using the contact details provided above.
You can subscribe or unsubscribe from the newsletter on the newsletter page. Both processes only take effect after clicking on the respective confirmation link in your email. You can also voluntarily request our newsletter in the comment form. The switch is off by default. When you register, we save your email address, your name, the consent text displayed as well as the time of request and confirmation. The registration will only become active when you click on the confirmation link in the email. The link is valid for 48 hours. You can contact us at any time Newsletter subscription and unsubscribe page log out. You can submit comments regardless of subscribing to the newsletter.
To protect against abusive requests and login attempts, the application stores time-limited counters with a hash of the IP address and purpose. A hash is not a guarantee of anonymity. The application cleans these counters during subsequent limit checks after 24 hours. Security-relevant actions can be logged with user ID, time and process. The legal basis is Article 6 Paragraph 1 Letter f GDPR.
We only store data as long as the respective purpose, legal retention requirements or the assertion or defense of claims require it. They are then deleted or anonymized. Statutory retention obligations can particularly affect contract and billing documents. Backups must be included in a coordinated deletion and restoration concept.
With your consent, we use Matomo to evaluate page views. The configured analysis server is matomo.grittmann.media. Matomo wird auf einem Server in Deutschland betrieben. Erst nach Zustimmung wird das Analyse-Script geladen. Die IP-Adresse wird auf dem Analyseserver vor der Speicherung um zwei Bytes gekürzt. Bei der Verbindung werden zunächst insbesondere die IP-Adresse, technische Browserinformationen und die aufgerufene Seite an den Analyseserver übermittelt. Die Einbindung setzt keine Analyse-Cookies. Nach einem Widerruf kann Matomo das funktionale Cookie mtm_consent_removed store for up to 400 days to respect the rejection; Details can be found in the Cookie overview. Formularinhalte, URL-Parameter und Bestätigungs-Tokens werden nicht übertragen; geschützte Bereiche werden ohne Datensatz-IDs und Seitentitel erfasst.
We will save your selection as grittmann-analytics-consent for 180 days in local browser storage. You can change your selection and stop further tracking at any time on this data protection page. Data that has already been transmitted will not be automatically deleted if you revoke your consent.
The tested application uses a technically necessary session cookie for registration and form protection. Details about the purpose, duration and settings can be found on the page Cookies. Externe Schriftarten und Marketing-Scripte sind nicht eingebunden. Eine optionale Matomo-Statistik wird bei Aktivierung erst nach Ihrer Zustimmung geladen. Die optionale Standortkarte wird ausschließlich nach Ihrer Aktivierung geladen.
On the contact page you can open a location map of the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. Opening the dialog does not load an external map. Only by clicking “Load map” do you consent to the connection to OpenStreetMap (Art. 6 Para. 1 lit. a GDPR). In particular, your IP address, the map accessed and technical browser information are transmitted. Any necessary access to your device is based on your consent in accordance with Section 25 Paragraph 1 TDDDG. Processing outside the EU is possible. Information about recipients, storage period and international transfers is provided by the OpenStreetMap Foundation ready. You can revoke your consent for further card connections by closing the dialog; the lawfulness of the previous processing remains unaffected. The selection is not saved permanently. Without consent, the address and an external map link remain available. External links, for example to an appointment calendar, open offers from other operators; A connection is only established when you call it up. Editorially integrated external images, on the other hand, can transmit data to their provider as soon as they are loaded; new media should therefore be provided locally.
Under the legal requirements, you have rights to information (Article 15 GDPR), correction (Article 16), deletion (Article 17), restriction (Article 18) and data portability (Article 20). You can revoke your consent at any time with effect for the future; previous processing remains unaffected.
If processing is based on Article 6 (1) (e) or (f) of the GDPR, you can object to this for reasons relating to your particular situation in accordance with Article 21 of the GDPR. You can object to direct advertising at any time without giving reasons.
To exercise your rights, please contact mail@grittmann.media. Außerdem können Sie sich bei einer Datenschutzaufsichtsbehörde beschweren, insbesondere an Ihrem Aufenthaltsort, workplace oder am Ort des vermuteten Verstoßes. Für Rheinland-Pfalz erreichen Sie den Landesbeauftragten für den Datenschutz und die Informationsfreiheit über datenschutz.rlp.de.
No automated decision, including profiling, within the meaning of Art. 22 GDPR takes place in the tested application code.