Data controller
Vitali Kristian
Deutschland, 73035 Göppingen, Rechberghäuser Weg 56
info@vitalius.de
Hosting
ALL-INKL.COM · Deutschlan
02742 Friedersdorf, Hauptstraße 68
The hosting provider processes necessary connection data, including IP address, time, requested URL and browser identifier, to deliver and protect the site. Confirm the legal basis, recipients and retention period against the hosting contract before publication; necessary security processing may rely on Article 6(1)(f) GDPR.
Hosting provider log retention period:
Contact
We process your name, email address, subject and message to handle enquiries. Depending on the enquiry, the basis is Article 6(1)(b) or (f) GDPR. Authorised administrators and the configured email service have access. Normal deletion period unless legal obligations or outstanding matters require otherwise: 90 days.
Guestbook
Guestbook entries are processed for publication and moderation. Approved names and messages are public. Requested publication relies on Article 6(1)(b) GDPR; abuse prevention may rely on (f). Entries remain until removal or a valid deletion request.
Optional visitor analytics
With consent, optional local analytics process a random visitor ID, truncated IP, approximate origin, pages, browser, device, OS, screen size, language, time zone, referrer domain and app mode. Basis: Article 6(1)(a) GDPR and section 25(1) TDDDG for non-essential device storage. Withdraw via cookie settings. No external analytics or cross-device fingerprinting. Deletion period: 30 days.
CAPTCHA / spam protection
Contact and guestbook use a local CAPTCHA. The random challenge and expiry are temporarily stored in the session; request limits protect against abuse. No CAPTCHA data is sent to external providers.
Photo gallery
Photo ratings store photo ID, score, time and a monthly changing hashed IP check value to limit duplicate votes. This value is pseudonymous, not anonymous. Purpose: requested rating and abuse prevention; basis Article 6(1)(b) or (f) GDPR. Ratings are deleted with the photo.
Visitor map
IP geolocation uses a local data list. Visitor IPs are not sent to a geolocation service. The map is administrator-only. Tiles are fetched only when the administrator loads the map; the external tile provider then receives the administrator IP.
Security
Session data and short-lived hashed IP values protect sign-in, forms and ratings. Administrator actions are logged for up to 90 days; rate-limit records normally expire after one day. Necessary security processing may rely on Article 6(1)(f) GDPR.
Your rights
Subject to legal requirements, you may request access, correction, deletion, restriction and portability, and object to processing. Consent may be withdrawn for future processing. You may complain to a supervisory authority. Contact info@vitalius.de. No automated decisions with legal effects are made.
Recipients and international transfers
Before publication, specify the actual hosting, SMTP, CAPTCHA and other recipients. For processing outside the EEA, document applicable safeguards under Articles 44 onward GDPR. This draft does not confirm unverified transfer mechanisms.