Skip to main content
tonträgerankauf. Call us now
Navigation menu

Privacy Policy

1. Controller and contact details

The controller responsible for processing personal data on this website is:

Boris Deiwick
Hundsbuschstraße 79
45478 Mülheim an der Ruhr

Phone: 0173 / 54 10 711
Email: mail@tontraegerankauf.com

Personal data means information relating to an identified or identifiable person. We process such data as necessary to operate the website securely, handle your enquiries or comply with legal obligations.

2. Hosting and technical delivery

Hosting by alittlebyte GmbH

alittlebyte GmbH, Krummenhakstraße 28, 47053 Duisburg, provides hosting and technical maintenance for this website. The underlying server infrastructure is operated with Scaleway SAS, 8, rue de la Ville-l’Évêque, 75008 Paris, France.

When you visit the website, your IP address is technically processed to deliver the requested content to your browser. The hosting providers have access to the data required to provide and maintain these services. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of the website.

Web server access logs

The web server records technical information about page requests. This includes the IP address, date and time, requested address, response status, browser and operating system information supplied by your browser and, where provided, the referring page. These records support secure operation, troubleshooting and the detection of abuse. They are not used to create advertising profiles.

Web server access logs are deleted through log rotation after no more than 7 days. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is protecting our services and keeping them operational.

3. Strictly necessary cookies and session data

We use only first-party, strictly necessary cookies for session management and to protect our forms against forged requests (CSRF protection). The session cookie is named tontragerankauf-session. The XSRF-TOKEN cookie protects form requests. Associated session data is processed on the server. These functions are not used for advertising or to analyse your browsing behaviour.

These cookies expire after 120 minutes and are renewed on subsequent page requests. Server-side sessions become invalid after 120 minutes of inactivity and are deleted through automatic session cleanup.

Storage and access to this strictly necessary information are based on section 25(2)(2) TDDDG. Associated processing of personal data is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure operation of the website and its forms. No consent is required for this purpose.

4. Contact and collection enquiries

When you use the contact or collection enquiry form, we process your name, email address, message and the information you provide about your collection. Providing a phone number for follow-up questions is optional. When you contact us by email or phone, we likewise process the information you provide to handle your request. Form enquiries are transmitted to the website operator for processing.

Processing is based on Art. 6(1)(b) GDPR where your enquiry concerns steps before entering into a contract or the performance of a contract. For other enquiries, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is responding to your enquiry.

We retain this information for as long as necessary to handle your enquiry and, where applicable, perform the contract. It is then deleted unless statutory retention requirements or other legal grounds justify continued storage. Business records subject to statutory retention are deleted after the applicable retention periods expire.

5. Fonts, media and audience measurement

Fonts, images, videos and the scripts needed by this website are served from our own website. No external font providers or embedded video platforms are contacted for this purpose.

No audience measurement or marketing services are currently embedded. We do not set analytics, marketing or consent cookies or create usage profiles for these purposes.

External references, such as the link to our technical service provider, are ordinary links. The external website is requested only when you follow such a link. Its operator is responsible for the processing carried out there.

6. Your rights

Subject to the applicable legal conditions, you have the following rights:

  • Access to your personal data under Art. 15 GDPR,
  • Rectification of inaccurate data or completion of incomplete data under Art. 16 GDPR,
  • Erasure under Art. 17 GDPR,
  • Restriction of processing under Art. 18 GDPR,
  • Data portability under Art. 20 GDPR where the conditions apply.

Objecting to processing

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Art. 21 GDPR. We will then stop processing the affected data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is necessary for establishing, exercising or defending legal claims.

Withdrawal of consent and complaints

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal. Under Art. 77 GDPR, you may also lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. You can exercise your rights by contacting the controller named above.

7. Transmission security

This website uses HTTPS with TLS encryption to protect the transmission of content and form submissions. We cannot guarantee complete protection against every risk associated with transmitting data over the internet. This applies particularly to subsequent communication by email.