Privacy Policy
Responsible Party
Rita Franzen
Kettungsstr. 2
65510 Idstein-Oberrod
Deutschland
altstadtdomizil.idstein [ at ] gmail [dot] com
Overview of Data Processing
The following overview summarizes the types of data processed and the purposes of their processing: Inventory data (names, addresses), contact data (email), content data (text inputs), usage data (pages visited, access times), meta/communication data (IP addresses, device information).
Applicable Legal Bases
Below is an overview of the legal bases under GDPR on which we process personal data: Consent (Art. 6(1)(a) GDPR), Contract performance and pre-contractual inquiries (Art. 6(1)(b) GDPR), Legitimate interests (Art. 6(1)(f) GDPR).
Security Measures
We take appropriate technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of risks to ensure a level of protection appropriate to the risk. Measures include in particular securing the confidentiality, integrity, and availability of data through SSL/TLS encryption.
Deletion of Data
The data processed by us will be deleted in accordance with legal requirements as soon as the consent permitted for processing is revoked or other permissions cease to apply (e.g., if the purpose of processing this data has ceased or it is no longer necessary for the purpose).
Rights of Data Subjects
As a data subject, you have various rights under GDPR, which arise in particular from Articles 15 to 21 GDPR:
- Right to information: You have the right to request confirmation as to whether relevant data is being processed and to receive information about this data.
- Right to rectification: You have the right to request the completion or correction of inaccurate data concerning you.
- Right to erasure: You have the right to request that relevant data be deleted immediately.
- Right to restriction of processing: You have the right to request restriction of processing.
- Right to data portability: You have the right to receive the data concerning you in a structured, commonly used, and machine-readable format.
- Right to object: You have the right to object at any time to the processing for reasons arising from your particular situation.
- Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority.
Competent supervisory authority: The Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany, Email: poststelle@datenschutz.hessen.de
Hosting
This website is hosted by Amazon Web Services (AWS) Amplify in the eu-central-1 (Frankfurt) region. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. AWS processes technically necessary data as a data processor to provide the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and efficient provision). More information: https://aws.amazon.com/privacy/
Server Log Files
The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are: Browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of server request, IP address. This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR.
Cookies and Consent
This website uses cookies. Cookies are text files that are stored in or by the internet browser on the user's computer system. We use technically necessary cookies (e.g., for language settings and storing your cookie preference). Marketing and analytics cookies are only set after your explicit consent. You can revoke your consent at any time via the cookie icon at the bottom left of the page.
Google Tag Manager
This website uses Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Container ID: GTM-T4G73SMP). Google Tag Manager itself does not store cookies and does not process personal data. It serves as a container that enables the management and deployment of other tags, such as Google Analytics. Tags deployed via Tag Manager are only activated after your consent via our cookie banner. The legal basis is Art. 6(1)(a) GDPR (consent). More information about Google Tag Manager: https://www.google.com/intl/en/tagmanager/use-policy.html
Google Analytics
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is loaded via Google Tag Manager and is only activated after your consent. Google Analytics uses cookies that enable analysis of your use of the website. The information generated by the cookie about your use of this website is transmitted to and stored on a Google server. We use the IP address anonymization function. Google will use this information to evaluate your use of the website and to compile reports on website activity. The legal basis is Art. 6(1)(a) GDPR (consent). You can revoke your consent at any time via the cookie icon at the bottom left of the page. Alternatively, you can install the browser add-on to disable Google Analytics: https://tools.google.com/dlpage/gaoptout
OpenStreetMap
This website uses OpenStreetMap for map display. The provider is the OpenStreetMap Foundation. OpenStreetMap is an open project and does not set cookies. When loading the map, your IP address is transmitted to OpenStreetMap servers. This is necessary to display the map content. The legal basis is Art. 6(1)(f) GDPR.
Contact by Email
If you contact us by email, your information including the contact details you provide will be stored for the purpose of processing the request and in case of follow-up questions. The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interests (Art. 6(1)(f) GDPR). We will not share this data without your consent.
Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.
Last updated: Januar 2026