Privacy Policy

This Privacy Policy explains whether and to what extent personal data is collected when you visit this website, how we use it, and what rights you have regarding your data. The legal basis for all data processing is the General Data Protection Regulation (GDPR) and the applicable German data protection laws.

1. Controller

The controller within the meaning of the GDPR responsible for data processing on this website is:

2. SSL/TLS Encryption

The connection between your browser and this website is secured by TLS encryption (also known as SSL). You can identify active encryption by the "https://" prefix in the address bar and the padlock icon in your browser. This encryption ensures that all data transmitted between your device and our server cannot be accessed by unauthorized third parties.

3. Collection and Storage of Personal Data When Visiting the Site

When this website is accessed, the hosting provider automatically records technical access data in so-called server log files. This includes the following information:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Amount of data transferred
• Indication of whether the request was successful (HTTP status code)
• Browser type and version
• Operating system of the requesting device
• Previously visited website (referrer URL)
• Name of the internet service provider

This data is technically required to deliver the website correctly and also serves to ensure operations and to detect and defend against attacks. This data is not merged with other data sources.

The legal basis for processing is Art. 6(1)(f) GDPR (legitimate interest). The legitimate interest consists in the technically error-free provision and secure operation of the website.

Log files are automatically deleted after no more than 30 days, unless they need to be retained longer to investigate a specific security incident.

4. No Further Data Collection

This website is intentionally kept lean. No cookies are set — neither technically necessary nor optional ones. There is no contact form, no newsletter sign-up, and no other input fields through which you could submit data. External services such as fonts, analytics tools, map services, or social media integrations are not used. Your data is therefore only shared with third parties in the context of hosting (see Section 5).

5. Disclosure of Data to Third Parties – Hosting Provider

This website is hosted by:

As part of hosting, ALL-INKL.COM processes the server log file data described in Section 3 on our behalf. A data processing agreement in accordance with Art. 28 GDPR is in place with the provider. ALL-INKL.COM processes the data exclusively on servers within Germany and is contractually obligated to process the data only according to our instructions and solely for the purpose of providing the website.

No further disclosure to other third parties takes place.

6. Your Rights as a Data Subject

You have the following rights with respect to your personal data:

• Right of access (Art. 15 GDPR): You may request information about whether and which personal data we process about you.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): Under certain conditions, you may request the deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you may request that we restrict the processing of your data.
• Right to data portability (Art. 20 GDPR): You may request to receive the data you have provided in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) GDPR, where there are grounds relating to your particular situation.

To exercise your rights, please contact the address given in Section 1.

7. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. You may contact the authority at your place of habitual residence, your place of work, or the authority competent for us as the controller.

The supervisory authority competent for us is:

8. Currency and Amendments to This Privacy Policy

This Privacy Policy reflects the current state of our data processing practices. Should we make technical or legal changes that require an update, we will revise this Privacy Policy accordingly. The current version is always available on this page.

Last updated: March 2026