Skip to content

Privacy policy

Last updated: 2026-10-14

This privacy policy informs you in accordance with Art. 13 GDPR about which personal data is processed when you use this website, for which purposes and on which legal basis, and which rights you have. The German version of this policy is authoritative.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Marco Lembert, Augsburger Straße 17a, 86391 Stadtbergen, Germany

Email: info@woobie.eu · Phone: +49 175 7390483

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Provision of the website and server log files

When you access this website, the web server processes technically necessary connection and access data and stores it in server log files:

  • IP address and client port
  • date and time of access
  • requested host and requested path, including any URL parameters (query string)
  • HTTP method, protocol version and HTTP status code
  • duration of the request and size of the request and response
  • content type of the request and response
  • user agent (information about the browser or client used)
  • technical identifier of the individual request (request ID)

The server's firewall also records rejected connection attempts with IP address, port, protocol and time in the server's system log. The same purposes, legal basis and deletion period apply to this log.

In addition, the server evaluates the language preference sent by your browser (Accept-Language) to redirect you to the matching language version when you open an address without a language prefix. This information is not stored.

The purpose of the processing is to deliver the website, to ensure its stability and functionality, to analyse errors and to protect the website and the underlying IT systems against misuse and attacks. The log data is not used to create usage profiles and is not combined with other data. It is only evaluated in relation to a person where this is necessary to investigate and defend against a specific attack or misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically proper provision of this website.

Server log files and the system log are deleted automatically after 7 days at the latest. Data needed to investigate a specific security incident is exempt; it is deleted as soon as the incident has been conclusively resolved.

Providing this data is neither a statutory nor a contractual requirement. It is, however, technically necessary; without it the website cannot be delivered.

Information that is part of a URL or query string appears in the server log files for technical reasons. Please do not transmit personal or confidential information via URL parameters.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in data centres in Germany.

Hetzner processes the data arising from the use of this website on our behalf and solely in accordance with our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable and secure provision of this website.

4. Contact by email or telephone

If you contact us by email or telephone, we process the data you provide. This may include in particular:

  • your email address or telephone number
  • your name, if you state it or it is apparent from the message
  • the content of your message, including any attachments
  • technically necessary email metadata (e.g. date, time, mail servers involved)

The data is processed solely to handle your enquiry and to communicate with you.

The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at entering into or performing a contract. In all other cases the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in handling and answering enquiries addressed to us.

Our email mailboxes are also operated by Hetzner Online GmbH on servers in Germany; this processing is covered by the data processing agreement mentioned in section 3.

We delete the data as soon as it is no longer needed to handle your enquiry. It is stored longer only where statutory retention obligations apply (generally six years for business correspondence, Section 147 of the German Fiscal Code) or where the data is required for the establishment, exercise or defence of legal claims.

Where we store data to comply with statutory retention obligations, this is based on Art. 6(1)(c) GDPR in conjunction with the applicable statutory provisions, in particular Section 147 of the German Fiscal Code and Section 257 of the German Commercial Code.

Providing your data is voluntary. Without the necessary information, however, we cannot handle your enquiry.

The contact form on this website is currently disabled; no data is transmitted or stored through it.

5. Cookies and similar technologies

This website uses a single cookie named “ao_consent”. It is only set once you make a choice in the consent banner and stores nothing but your decision on statistics, the version of the request and the time of your decision. It contains no identifier that could be used to recognise you. The cookie is deleted after 6 months; after that we ask again.

The cookie is necessary to respect your decision and to be able to demonstrate it. Storing it is permitted without consent under Section 25(2) No. 2 TDDDG. The legal basis for the processing is Art. 6(1)(c) GDPR in conjunction with the obligation to demonstrate consent under Art. 7(1) GDPR.

Beyond that, this website sets no cookies and stores no application settings in localStorage or sessionStorage.

The language version is determined by the address you open (/de or /en). For addresses without a language prefix, we evaluate the language preference sent by your browser (Accept-Language) and redirect you to a matching language version. No language setting is stored in cookies or web storage. The colour scheme defaults to light mode. A manual switch is held in memory for the duration of the current visit; reloading the page resets it.

6. Audience measurement with Umami (only with your consent)

If you agree to the “Statistics” category in the consent banner, we measure the use of this website with the open-source software Umami. We operate Umami ourselves on our own server at Hetzner Online GmbH in Germany (stats.woobie.eu). The measurement data is not transferred to the maker of the software or to any other third party. Without your consent the measurement script is not loaded and no measurement data is collected.

Umami sets no cookies and stores no information on your device. When a page is opened, the measurement script sends the following information to our server:

  • the page opened (hostname and path, including any URL parameters) and the page title
  • the previously opened page (referrer)
  • date and time of the visit
  • browser, operating system and device type, derived from the user agent
  • screen resolution and browser language setting
  • approximate location (country, region, city), derived from the IP address
  • technical page load metrics (Core Web Vitals)

Your IP address is processed only briefly in memory to determine the approximate location and to compute a pseudonymous session identifier; it is not stored in the statistics database. The session identifier is a hash of the website's identifier, the IP address, the user agent, a secret key and the current calendar month. The IP address cannot be derived from it. Visits can therefore not be recognised beyond the respective calendar month or across other websites. The requests of the measurement script to stats.woobie.eu additionally produce the server log files described in section 2.

The purpose of the processing is to understand and improve the reach and the technical quality of this website (in particular its loading times). We do not create profiles of individual persons, do not combine the measurement data with other data and do not use it for advertising.

The legal basis is your consent under Art. 6(1)(a) GDPR and, where information on your device is accessed, under Section 25(1) TDDDG. Consent is voluntary; the website can be used without it and without restrictions.

You can withdraw your consent at any time with effect for the future by deselecting statistics via the “Cookie settings” link in the footer of this website. The lawfulness of the processing carried out until the withdrawal remains unaffected. If the “Do Not Track” setting is enabled in your browser, no measurement takes place regardless of your choice.

The measurement data is deleted automatically after 12 months at the latest.

Fonts, scripts, images and videos are delivered exclusively from our own servers. No connection to third-party servers is established when you access this website. We do not use any third-party advertising or tracking services.

7. Recipients and transfers to third countries

The recipient of personal data is Hetzner Online GmbH as processor for hosting the website, operating the self-hosted statistics (section 6) and operating the email mailboxes.

Beyond that, we disclose personal data only where we are legally obliged to do so or where this is necessary for the establishment, exercise or defence of legal claims.

Personal data is not transferred to countries outside the European Union or the European Economic Area.

8. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

9. Your rights

Subject to the statutory requirements, you have the following rights:

  • right of access to the data processed about you (Art. 15 GDPR)
  • right to rectification of inaccurate data (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object to processing (Art. 21 GDPR, see section 10)
  • right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR, see section 6)

To exercise your rights, an informal message to the contact details given in section 1 is sufficient.

10. Right to object under Art. 21 GDPR

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

11. Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

12. Data security

This website is delivered exclusively over an encrypted connection (TLS). Please note that communication by email can have security gaps; you should therefore not send us confidential information by unencrypted email.

13. Changes to this privacy policy

We adapt this privacy policy when the website, the technical systems used or the legal requirements change. The version published on this page applies.