Legal texts are prepared. Owner information and the publication review are still pending.
This notice describes the intended website’s data processing. Owner details and actual hosting and retention information must be completed and reviewed before publication.
Service provider and controller
[Philipp Gross / designstudio denkplatz]
[Geschwister-Scholl-Ring, 4, 38444, Wolfsburg, Deutschland]
contact@denkplatz.com
Hosting and server logs
Hosting is intended to be provided by STRATO in Germany. Requests may be logged with IP address, time, URL, browser and technical connection information. The purpose is secure, reliable operation, based on Article 6(1)(f) GDPR. Actual retention is to be stated below. A data processing agreement must be concluded with the hosting provider.
[Enter actual hosting log retention]
Contact enquiries
The form processes name, email, subject and message and sends them to contact@denkplatz.com. It does not store the message in the website database. Enquiries are handled under Article 6(1)(b) GDPR for pre-contractual requests or (f) for other enquiries. The message remains in the mailbox according to the stated retention and any legal duties.
[Enter enquiry retention and applicable legal periods]
Registration and project access
Voluntary project access stores name, email, language, password hash and registration and verification times. Article 6(1)(b) GDPR is the basis for providing the requested account. Passwords are never stored in plain text. Verification links expire after 24 hours and password links after one hour; both are single-use. Unverified accounts are removed after seven days at the next cleanup. Verified accounts remain until deletion or a documented change in retention. Users can download their data and delete their account.
Sessions, security and local preferences
An essential session cookie supports sign-in, language and form protection. Access expires after 60 minutes of inactivity; the cookie ends with the browser session. Necessary storage relies on section 25(2)(2) TDDDG and security processing on Article 6(1)(f) GDPR. Motion preference is stored locally only on deliberate user interaction. Abuse protection uses a keyed hash of the IP address and action; no plain-text IP is stored in the application database. Windows last at most one hour. Administrative changes are logged for 90 days. Expired data is removed during cleanup.
Recipients and data transfers
Recipients are the website operator and STRATO as hosting and mail provider. The application uses no external fonts, analytics, advertising or video services and plans no third-country transfer. Required disclosures to authorities and the provider’s actual contractual terms must be considered separately.
Your rights
Subject to legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. Any consent given may be withdrawn for the future. Contact contact@denkplatz.com. You may complain to a supervisory authority. Form and registration data are provided voluntarily; without required information the enquiry or access cannot be processed. There is no automated decision-making or profiling.
[Zuständige Datenschutzaufsichtsbehörde mit Adresse und URL]