Legal

Privacy policy

Below you will find information about which personal data is processed when you visit this website, for what purposes this happens, and which rights you have in this context.

Controller

The controller responsible for processing personal data on this website is:

Quest17 Media
Sebastian Joos
c/o Impressumservice Dein-Impressum
Stettiner Strasse 41
35410 Hungen

Hosting and delivery via Cloudflare Pages

This website is provided via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

When you visit the website, Cloudflare processes technically necessary data in order to deliver the pages, defend against attacks, and ensure the stability and security of the service.

This may also involve processing personal data in third countries, especially the United States. According to Cloudflare, transfers from the EEA rely in particular on the EU-U.S. Data Privacy Framework, with Standard Contractual Clauses referenced as a fallback where required.

The legal basis for this processing is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, performant, and reliable provision of this website.

  • IP address
  • date and time of the request
  • requested file or URL
  • referrer URL
  • browser type and browser version
  • operating system used
  • transferred data volume and HTTP status

Contact by email

If you contact me by email, I process the information you send in order to handle your enquiry and, where necessary, respond to follow-up questions.

This usually includes your email address, the content of your message, and any other information you provide voluntarily.

The legal basis is Art. 6(1)(b) GDPR where the communication relates to pre-contractual or contractual matters, and otherwise Art. 6(1)(f) GDPR. The legitimate interest lies in the efficient handling of incoming enquiries.

Cookies

The public-facing website currently does not use analytics, marketing, or convenience cookies.

Where technically necessary cookies are used in individual cases, they serve only the secure and functional provision of the website.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and technically reliable provision of the website.

Locally hosted fonts and no embedded third-party content

The fonts used on this website are hosted locally. No visitor data is transmitted to external font services.

The public-facing website currently does not load externally embedded videos, maps, social media plugins, or comparable third-party content.

Storage duration

Personal data is stored only for as long as necessary for the relevant purpose.

Email communication and related details are deleted once the matter has been concluded and no statutory retention duties or legitimate interests require further storage.

Technical log data connected with hosting is retained only for as long as the hosting provider requires it for operation, security, and troubleshooting.

Your rights

Access, rectification, erasure, restriction

You have the right to request access to the personal data processed about you. You may also request rectification of inaccurate data and, where the legal requirements are met, erasure or restriction of processing.

Data portability

Where the legal requirements are met, you have the right to receive data that you have provided in a structured, commonly used, and machine-readable format.

Complaint to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is unlawful.

Right to object

Where I process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.

If you object, I will no longer process the relevant data unless I can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise, or defence of legal claims.

No automated decision-making

This website does not use automated decision-making, including profiling.