Privacy policy

This is a translation for your convenience. In case of doubt, theGerman version is legally binding.

Protecting your personal data matters to me. Here you can find out which data is processed when you visit wilmhar.de, why this happens and what rights you have.

1. Controller

2. Overview and legal bases

I only process personal data to the extent necessary for a functioning website, for answering your enquiries or – with your consent – for audience measurement. The legal bases are in particular:

• Art. 6 (1) (a) GDPR – consent
• Art. 6 (1) (b) GDPR – contract or pre-contractual measures (e.g. enquiries)
• Art. 6 (1) (c) GDPR – legal obligations
• Art. 6 (1) (f) GDPR – legitimate interests
• § 25 (1) TDDDG – consent to storing and reading information on your device (e.g. cookies); § 25 (2) TDDDG where this is strictly technically necessary

3. Hosting and server log files

This website is hosted by Febas, owner Roman Baumgärtner, Ostlandstraße 5, 49565 Bramsche, Germany. When you access the site, the server automatically stores so-called server log files transmitted by your browser:

• IP address
• date and time of access
• page or file accessed
• referrer URL (the previously visited page)
• browser and operating system used

Processing is based on Art. 6 (1) (f) GDPR. My legitimate interest lies in providing the website in a technically error-free and secure manner. The log files are rotated daily and automatically deleted after 7 days at the latest. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

4. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

5. Contact form

If you write to me via the contact form, your details (name, email address, optionally company and topic, and your message) are processed to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or its initiation, otherwise Art. 6 (1) (f) GDPR (interest in answering enquiries).

To send the form data by email, I use the service Web3Forms, a product of Web3Creative, Kerala, India. The Web3Forms servers are located in the USA. According to its own information, Web3Forms does not store form content but only forwards it to my email inbox; technical server logs are deleted there regularly after about two months.

There is no adequacy decision by the EU Commission for India and the USA with regard to this service. There is therefore a risk that authorities there may access the data and that you may not have the same legal remedies as in the EU. The transfer is based on your explicit consent pursuant to Art. 49 (1) (a) GDPR, which you give by submitting the form. If you do not want this, simply email me directly.

Your enquiry will be deleted once it has been fully dealt with and no statutory retention obligations (e.g. for a resulting contract) apply.

6. Contact by email

If you email me directly, I process your details solely to handle your enquiry (Art. 6 (1) (b) or (f) GDPR). Deletion takes place as described for the contact form.

7. Cookies and consent

This website only sets cookies for audience measurement if you have agreed via the consent banner on your first visit (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). Your decision is stored in your browser’s local storage so that the banner does not reappear on every visit; this is technically necessary (§ 25 (2) no. 2 TDDDG). Your language choice (German or English) is also stored there so that the notice about the other language version does not reappear. This information never leaves your browser.

You can withdraw or change your consent at any time with effect for the future:

Change cookie settings

8. Google Analytics

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This allows me to evaluate how visitors use the website and to improve it.

The following data, among others, is processed:

• pages visited, time spent and interactions (e.g. clicks, scroll depth)
• approximate location (country, region, city)
• technical information (browser, operating system, device type, screen resolution)
• referrer (the page you came from)

Google Analytics 4 does not store full IP addresses; for access from the EU, the IP address is only used to determine location and then discarded. The cookies “_ga” and “_ga_*” are set for recognition and are stored for up to two years. Event data (e.g. individual page views) is automatically deleted after 2 months, user-related data after 14 months without a new visit. Google Signals and advertising features are disabled.

It cannot be ruled out that data is transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the EU Commission’s adequacy decision (Art. 45 GDPR). A data processing agreement is in place with Google.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Without consent, Google Analytics is not loaded. Further information can be found inGoogle’s privacy policy.

9. Fonts

All fonts used on this website are stored locally on the server. No connection to third-party servers (e.g. Google Fonts) is established when the page is loaded.

10. Videos

Videos on this website are delivered directly from my own server. No platforms such as YouTube or Vimeo are embedded.

11. Links to social networks

This website contains simple links to my profiles on LinkedIn, Instagram, Pinterest and Flickr. These are not embedded plugins: data is only transferred to the respective provider when you click a link and visit their site. The privacy policy of the respective provider applies there.

12. Your rights

You have the right at any time to:

• access the data I hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Where I process data on the basis of legitimate interests, you may object to this processing at any time on grounds relating to your particular situation.

An informal email to mail@wilmhar.de is all it takes.

13. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:

14. Changes

I will update this privacy policy whenever the website or legal requirements change. The version published here applies.

Last updated: September 2026