GRIMMGHOZT
PRIVACY POLICY
1. CONTROLLER
Dominique Mahler
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach
Germany
Email: contact@grimmghozt.com
2. DELIVERY, SECURITY AND HOSTING VIA CLOUDFLARE
This website is delivered through Cloudflare Pages and Cloudflare's network. When the website is accessed, Cloudflare processes technically necessary connection and access data, in particular the IP address, time of access, requested URL, browser/device information and technical traffic data. This is required to deliver the website, defend against attacks and abuse, and ensure stability and security.
Where this processing takes place under our responsibility, we rely on Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of the website. We do not create additional personal server-log archives ourselves. Technically necessary security and operational data at Cloudflare are processed in accordance with the contractual and service-specific retention periods applicable to the relevant Cloudflare service and then deleted or aggregated unless longer retention is required for security or legal reasons.
Service provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare may process data internationally. For transfers from the EEA to the United States, Cloudflare refers in particular to its certification under the EU-U.S. Data Privacy Framework and, where required, Standard Contractual Clauses.
3. DATA-MINIMISED SERVER-SIDE REACH STATISTICS AND LONG-TERM ARCHIVE
To retain a long-term view of the website's reach, we maintain a deliberately data-minimised statistic in a Cloudflare D1 database. For a normal HTML page view, only daily totals and separate aggregate series by page path, country at country level, broad device class and broad referrer category are increased. These dimensions are deliberately not joined into visitor profiles or request-level combinations of attributes. Obvious automated bots are excluded from this statistic on a best-effort basis using simple technical indicators.
We do not store an IP address, the full User-Agent string, the full referrer URL, query strings, city or GPS location, or any persistent visitor or device identifier for this archive. The stored daily figures are aggregate data used solely for historical comparisons of website reach and are retained indefinitely so that multi-year development remains available. Individual user profiles are not created.
Where technical information is temporarily processed during the live page request in order to create these aggregates, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a minimally invasive, long-term assessment of our own website's performance. This server-side statistic does not access additional information stored on the visitor's terminal device.
4. CLOUDFLARE WEB ANALYTICS – ONLY WITH CONSENT
Cloudflare Web Analytics may additionally be used for more detailed reach and performance analysis. The required JavaScript beacon is loaded on this website only after you explicitly select “Allow analytics” in our privacy settings. Without consent, the beacon is not loaded and the website remains fully usable.
According to Cloudflare, Web Analytics usage metrics do not use cookies or Local Storage and do not fingerprint individual visitors using IP addresses, User-Agent or comparable characteristics. The service can evaluate, among other things, page views and visits, loading times/Core Web Vitals and aggregated dimensions such as country, host, path, referrer, device type, browser, operating system and navigation type. According to Cloudflare's documentation, unsampled beacon data is retained for seven days and then aggregated for longer-term analysis; data is currently available in the Web Analytics dashboard for up to six months.
The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG to the extent that the use involves access to information on your terminal device. You can change your choice at any time with future effect using “Privacy settings” in the footer. Refusing consent does not disadvantage use of the website.
5. STORAGE OF YOUR PRIVACY CHOICE
To respect your Cloudflare Web Analytics choice and avoid asking on every page view, we store the selected option (“analytics allowed” or “necessary functions only”) together with a timestamp locally in your browser. This storage is used solely to manage the privacy choice you explicitly made and is not used for advertising or profiling. You can change the choice at any time via “Privacy settings”. The storage is necessary to provide this settings function requested by you (Section 25(2) no. 2 TDDDG).
6. PUBLIC PAGE-VIEW COUNTER
The footer of the Legal Notice page may display a simple server-side counter showing the total number of HTML page views. The stored record contains only an aggregate counter value and an update timestamp. It does not set cookies and does not store its own user ID or IP address in the counter database. Repeat visits and automated requests may be counted.
7. SESSION STORAGE FOR WEBSITE FUNCTIONS
For language switching, position restoration and the existing intro/navigation logic, the website temporarily uses the browser's Session Storage. This information is used solely for the website functions you use, not for reach measurement or user profiles, and is discarded no later than the end of the browser session. This use is a technically necessary function within the meaning of Section 25(2) no. 2 TDDDG.
8. EMAIL AND CONTACT FORM
If you contact us by email or through the contact form in the Legal Notice, we process your name, email address, message and any information you voluntarily provide solely to handle and respond to your request. Depending on the subject matter, processing is based on pre-contractual measures or performance of a contract under Art. 6(1)(b) GDPR, or on our legitimate interest in processing general enquiries under Art. 6(1)(f) GDPR.
The contact form is processed server-side through Cloudflare infrastructure and Cloudflare Email Service before being forwarded to contact@grimmghozt.com. Cloudflare processes the form data for the technical delivery of the message. The message is not additionally stored in our analytics database. Email communication and the destination mailbox are provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
Ordinary enquiries are generally deleted no later than six months after final handling if they are no longer required. Where messages constitute contractual, business or tax-relevant correspondence, or are required to establish, exercise or defend legal claims, statutory retention periods or limitation periods may require longer storage.
9. EXTERNAL LINKS AND MEDIA PLATFORMS
Streaming services, YouTube and social-media services are not embedded in this website as external players or social plugins. A connection to a third-party provider is established only when you actively open the corresponding external link. From that point onwards, the privacy rules of the respective provider apply.
10. COOKIES AND OTHER TRACKING
The website itself does not use marketing cookies and does not load advertising or social-tracking pixels. Cloudflare Web Analytics is loaded only after your consent. Apart from that, only the technically necessary storage functions described above and the purely server-side aggregate statistic without a persistent visitor identifier are used.
11. RECIPIENTS AND INTERNATIONAL TRANSFERS
Recipients of personal data in the processes described above may in particular include Cloudflare as hosting/infrastructure provider and IONOS as email provider. Data is disclosed only where necessary for the respective purpose or where there is a legal basis. For possible transfers by Cloudflare to the United States, see Section 2. IONOS provides the email mailbox as a service provider based in Germany.
12. YOUR DATA-SUBJECT RIGHTS
Subject to the statutory requirements, you have in particular the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You may withdraw consent at any time with future effect. To exercise your rights, contact us at contact@grimmghozt.com.
13. RIGHT TO OBJECT UNDER ART. 21 GDPR
Where we process personal data on the basis of Art. 6(1)(e) or (f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to that processing. Following an effective objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.
14. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
Without prejudice to any other remedy, Art. 77 GDPR gives you the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The German Data Protection Conference provides an overview of German supervisory authorities: German data-protection supervisory authorities.
Last updated: 11 August 2026