Data controller
Vitali Kristian
Deutschland, 73035 Göppingen, Rechberghäuser Weg 56
info@vitalius.de
Hosting
ALL-INKL.COM · Deutschlan
02742 Friedersdorf, Hauptstraße 68
The hosting provider processes necessary connection data, including IP address, time, requested URL and browser identifier, to deliver and protect the site. Confirm the legal basis, recipients and retention period against the hosting contract before publication; necessary security processing may rely on Article 6(1)(f) GDPR.
Hosting provider log retention period:
Contact
We process your name, email address, subject and message to handle enquiries. Depending on the enquiry, the basis is Article 6(1)(b) or (f) GDPR. Authorised administrators and the configured email service have access. Normal deletion period unless legal obligations or outstanding matters require otherwise: 90 days.
Guestbook
Guestbook entries are processed for publication and moderation. Approved names and messages are public. Requested publication relies on Article 6(1)(b) GDPR; abuse prevention may rely on (f). Entries remain until removal or a valid deletion request.
Optional visitor analytics
With consent, optional local analytics process a random visitor ID, truncated IP, approximate origin, pages, browser, device, OS, screen size, language, time zone, referrer domain and app mode. Basis: Article 6(1)(a) GDPR and section 25(1) TDDDG for non-essential device storage. Withdraw via cookie settings. No external analytics or cross-device fingerprinting. Deletion period: 30 days.
CAPTCHA / spam protection
Contact and guestbook use a local CAPTCHA. The random challenge and expiry are temporarily stored in the session; request limits protect against abuse. No CAPTCHA data is sent to external providers.
Photo gallery
Photo ratings store photo ID, score, time and a monthly changing hashed IP check value to limit duplicate votes. This value is pseudonymous, not anonymous. Purpose: requested rating and abuse prevention; basis Article 6(1)(b) or (f) GDPR. Ratings are deleted with the photo.
Visitor map
Admin only: openstreetmap.de map images are fetched through this server after permission and clicking Load map. The provider receives the server IP and tile requests, not visitor IP addresses or identifiers. Requested tiles may reveal the approximate displayed region. Permission lasts for this session and can be withdrawn in cookie settings.
Security
Session data and short-lived hashed IP values protect sign-in, forms and ratings. Administrator actions are logged for up to 90 days; rate-limit records normally expire after one day. Necessary security processing may rely on Article 6(1)(f) GDPR.
Your rights
Subject to legal requirements, you may request access, correction, deletion, restriction and portability, and object to processing. Consent may be withdrawn for future processing. You may complain to a supervisory authority. Contact info@vitalius.de. No automated decisions with legal effects are made.
Recipients and international transfers
The operator, authorised administrators and necessary hosting and email providers have access to the extent required. CAPTCHA is processed locally. Map tiles are retrieved through the server only at the administrator’s explicit request. Actual providers follow the operator details and configuration. If providers process data outside the European Economic Area, the conditions under Articles 44 et seq. GDPR, destination country and appropriate safeguards must be checked before use and specifically documented here.
Further processing information
Name and email in the contact form are required to handle your request. Without them the form cannot be submitted; you may email us directly instead. Other pages remain available without analytics consent. Analytics relies on Article 6(1)(a) GDPR; necessary security measures on Article 6(1)(f) GDPR (the interest in secure operation); contract-related enquiries on Article 6(1)(b) GDPR. No automated decisions with legal or similarly significant effects are made. Consent can be withdrawn for the future in cookie settings. Under Article 77 GDPR you may complain to a supervisory authority, particularly where you live, work or where an alleged infringement occurred. Access, rectification, erasure, restriction, portability and objection rights apply subject to statutory conditions. Contact: info@vitalius.de.
Voluntary browser location
IP geolocation is approximate. With separate consent and browser permission, coordinates, device-reported accuracy and time can be linked to a pseudonymous visit. Only authenticated administrators can view them. At most one location query occurs per page load, without continuous background tracking. The legal basis is consent under GDPR Article 6(1)(a).
Optional address lookup
With your separate address consent, the website server automatically sends shared coordinates to Photon / OpenStreetMap. Visitor ID and visitor IP are not sent. The provider receives coordinates and server IP. Results may be incomplete or indicate a nearby address; they do not verify a home address. Without this additional consent, no lookup occurs.
Retention and withdrawal
Analytics: up to 30 days. Browser coordinates and addresses: up to 7 days, removed during daily cleanup. Cookie choices last up to 180 days. Withdraw using Cookie settings. Location withdrawal deletes location records linked to your still-available visitor identifier from the active database; withdrawing address permission removes corresponding address data. Earlier lawful processing is unaffected. Technical backups are access-protected and used for recovery.
Recipients and social links
The operator, hosting provider and any configured mail provider process data for their respective functions. Social icons are local and plain links: no social-platform connection occurs before clicking. Platform privacy information applies after opening a link. HTTPS and access controls protect transmission and administration.
Your rights
You may request access, rectification, erasure, restriction and, where applicable, portability under GDPR Articles 15–20. You may object to legitimate-interest processing under Article 21, withdraw consent under Article 7(3) and complain to a supervisory authority under Article 77. Contact the controller above. Location sharing is not required to use site content, contact or the guestbook.
Automatic address provider: Photon / OpenStreetMap · Privacy
YouTube / external media
With your consent, YouTube players are loaded. Google/YouTube receives your IP address and browser information. Your choice is stored for 180 days and can be withdrawn in cookie settings. No players are loaded without consent.