Privacy policy
This English page is a courtesy translation. The legally binding privacy statement is the German version at /datenschutz/.
1. Privacy at a glance
General
The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data means any data that can identify you personally. The German privacy statement is the complete, legally binding version.
Data collection on this website
Who is responsible for data collection?
I process data on this website as the operator. My contact details are in the controller section below.
How do I collect your data?
Some data you give me directly — for example when you submit the contact form. Other data is collected automatically or after your consent when you visit the site. That is mainly technical data (browser, operating system, time of the request). Collection of that technical data starts as soon as you enter the site.
What is the data used for?
Some data is needed to deliver the website reliably. Other data may be used to analyse usage where you have consented. If a contract is prepared or concluded via the site, submitted data is also processed for that purpose.
Your rights
You have the right to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You may also request correction or deletion. Where processing is based on consent, you can withdraw that consent at any time with effect for the future. You may also request restriction of processing in certain cases, and you have the right to lodge a complaint with the competent supervisory authority. For these and other privacy questions, contact me using the details below.
2. Hosting and content delivery
This website is hosted with the following providers:
Hetzner
Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Privacy policy:https://www.hetzner.com/legal/privacy-policy/.
Hetzner is used on the basis of Art. 6(1)(f) GDPR — a legitimate interest in a reliable presentation of the website. Where consent is requested (cookies or device access under the German TDDDG), processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG; consent can be withdrawn at any time. A data processing agreement (AVV) is in place with Hetzner.
Cloudflare
Provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare operates a global content delivery network with DNS. Traffic between your browser and this website is routed through Cloudflare’s network, which can analyse that traffic and filter malicious requests. Cloudflare may use cookies or similar recognition technologies solely for that purpose.
Cloudflare is used on the basis of a legitimate interest in a secure, reliable website (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU Commission’s standard contractual clauses. Cloudflare is certified under the EU-US Data Privacy Framework. Privacy policy:https://www.cloudflare.com/privacypolicy/. A data processing agreement is in place.
3. Controller
The controller for processing on this website is:
Jonas Imping
Grootkoppelstraße 56
22844 Norderstedt
Phone: +49 (0) 40 – 210 919 45-0
Email: hello@imping.digital
The controller is the natural or legal person who decides on the purposes and means of processing personal data.
Storage duration
Unless a more specific period is stated, personal data stays with me until the purpose of processing no longer applies. If you request deletion or withdraw consent, the data is deleted unless another lawful reason requires storage (for example tax or commercial retention). In that case deletion follows once those reasons lapse.
Legal bases (summary)
Consent: Art. 6(1)(a) GDPR (and Art. 9(2)(a) GDPR for special categories). Cookie or device-access consent additionally: § 25(1) TDDDG. Contract or pre-contractual steps: Art. 6(1)(b) GDPR. Legal obligation: Art. 6(1)(c) GDPR. Legitimate interest: Art. 6(1)(f) GDPR. The German statement names the basis for each processing in more detail. Consent can be withdrawn at any time.
SSL / TLS
This site uses SSL/TLS encryption. You can recognise an encrypted connection by https:// in the address bar and the lock icon. Data you send to me cannot be read by third parties while encryption is active.
4. Data collection on this website
Cookies
This site uses cookies — small data packets that do not harm your device. They may be session cookies (deleted when you leave) or persistent cookies (until you or your browser delete them). Cookies may be first-party or third-party. Some are technically necessary; others may be used for analysis or advertising where you consent.
Necessary cookies are stored on Art. 6(1)(f) GDPR unless another basis is stated. Where consent for cookies or similar technologies is requested, processing is based on that consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can configure your browser to refuse cookies; some functions of the site may then be limited.
CCM19
This website uses CCM19 to obtain and document consent for cookies and similar technologies. Provider: Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn. When you enter the site, a connection to CCM19 servers is made to collect your consent choices. CCM19 then stores a cookie in your browser so those choices can be assigned to you. Data is kept until you ask me to delete it, you delete the CCM19 cookie, or the purpose lapses — mandatory retention laws excepted.
CCM19 is used to obtain legally required consents (Art. 6(1) sentence 1(c) GDPR). A data processing agreement is in place.
Mission loadout (local storage)
If you load services into the “Mission loadout” on this site, your browser stores that selection locally (localStorage, key imping.mission). This is purely functional storage that you trigger yourself. There is no analytics, no profiling, and no transfer to third parties. The data leaves your device only when you deliberately submit the contact form. You can clear the selection at any time via “Clear loadout” on the contact page or by deleting this site’s data in your browser.
Server log files
The host automatically stores information that your browser sends. That includes:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR — a legitimate interest in a technically correct, optimised website.
Contact form
If you send a request via the contact form, the details you enter — including contact data — are stored so I can handle the request and follow-up questions. I do not pass this data on without your consent.
Processing is based on Art. 6(1)(b) GDPR where the request relates to a contract or pre-contractual steps; otherwise on legitimate interest in handling enquiries (Art. 6(1)(f) GDPR) or on consent (Art. 6(1)(a) GDPR) where consent was requested. Data stays until you ask for deletion, withdraw consent, or the purpose lapses (for example after the request is fully handled). Mandatory retention laws remain unaffected.
Email, phone or fax
If you contact me by email, phone or fax, the enquiry and any personal data it contains (name, request) are stored and processed to handle it. I do not pass this data on without your consent. The legal bases and retention rules are the same as for the contact form.
5. Further processors in the German text
The German privacy statement also documents additional processors and plugins that may appear in the generated legal text; the German version is authoritative.