1. Responsible Party (Data Controller)
The responsible party for data processing on this website is:
Nicolas Kerscher
Jourdanallee 53A
64546 Mörfelden-Walldorf
Germany
Phone: +49 6105 403 816 4
Email: nicolas+legal@kerscher.it
2. Our Approach: Data Minimization & Technical Necessity
We follow the principle of data minimization. All data processed on this website is used exclusively for technically necessary purposes or is fully anonymized.
- No Cookies: This website does not store or use cookies or any other data in your browser’s local storage or system.
- No Accounts/Forms: There are no user accounts, no contact forms, and no comment functions that collect data.
- Traffic analysis: No data is collected or processed for traffic analysis or visitor behaviour tracking.
3. Detailed Legal Bases
We process personal data according to the following legal bases under the General Data Protection Regulation (GDPR):
- Legitimate Interests (Art. 6 Para. 1 lit. f GDPR): To provide a secure and stable website, we process technical connection data (server logs) and conduct local, anonymous analytics.
- Contractual/Pre-contractual Measures (Art. 6 Para. 1 lit. b GDPR): If you contact us via email or phone, we process your details to handle your request.
- Device Integrity (§ 25 TDDDG): Since we do not use cookies or non-essential tracking, we comply with the protection of your terminal equipment.
4. Hosting and Server Log Files
Our website is hosted by Netcup GmbH (Daimlerstraße 25, 76185 Karlsruhe, Germany).
When you visit our site, the server automatically collects the following information in “log files” which your browser transmits:
- IP address (stored briefly for security and DDoS prevention)
- Date and time of the request
- Browser type and version
- Operating system used
- Referrer URL (the site you came from)
This data is used solely for technical security and is not merged with other data sources. We have a Data Processing Agreement (AVV) with Netcup to ensure your data is handled according to GDPR standards.
5. Third-Party Content (Embeds)
To provide a rich experience, we may embed videos from YouTube or posts from Mastodon and X (Twitter).
When you load a page containing these embeds, your IP address is technically required to be sent to the respective provider to display the content:
- YouTube: Google Ireland Limited, Ireland
- X: X Corp., USA
- Mastodon: The server of the specific instance the post originates from.
These providers may set their own cookies or track your interaction if you are logged into their services. We have no influence over their data processing.
6. Your Rights as a Data Subject
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR): You can request confirmation as to whether we process your data and a copy of that data.
- Right to Rectification (Art. 16 GDPR): You can demand the correction of inaccurate personal data.
- Right to Erasure (Art. 17 GDPR): You can request the deletion of your data (the “Right to be Forgotten”).
- Right to Restriction (Art. 18 GDPR): You can request that we restrict the processing of your data under certain conditions.
- Right to Data Portability (Art. 20 GDPR): You can request your data in a machine-readable format.
- Right to Object (Art. 21 GDPR): You can object to processing based on our “legitimate interests.”
- Right to Lodge a Complaint (Art. 77 GDPR): You have the right to complain to a data protection supervisory authority.