Privacy Policy
1. Controller:
Carsten Schmitt
Borchener Str. 150
D-33098 Paderborn
+49 (0) 173 2048346
2. General Information on Data Processing:
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, telephone number, IP address, or other details that can be associated with you.
In principle, we process personal data only to the extent necessary to provide a functional website, to process inquiries, to perform pre-contractual or contractual measures, or based on your explicit consent.
3. Visiting the Website and Server Log Files
When you visit our website, our web server automatically processes technical information. This may include in particular:
- IP address of the accessing device
- Date and time of access
- Page or file accessed
- Amount of data transferred
- Browser used
- Operating system used
- Referrer URL
- Server status codes
This processing is carried out to technically provide the website, ensure system security and stability, and detect unauthorized or abusive access.
The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure and trouble-free operation of our website.
Server log files are deleted as soon as they are no longer required for the purposes stated, provided there are no statutory retention obligations to the contrary.
4. Hosting
Our website is hosted by webhostone GmbH.
As part of hosting, technical data and server log files generated when visiting our website are processed.
WebhostOne provides a Data Processing Agreement (DPA) for hosting services. According to the provider, servers are located in German data centers.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest consists in the secure and reliable provision of our website.
5. Contacting Us
If you contact us using the contact details provided on the website, we will process the personal data you provide, in particular:
Name
Email address
Telephone number (if applicable)
Content of your message
Any other information provided voluntarily
This processing is carried out exclusively for the purpose of processing and responding to your inquiry.
Depending on the content of the inquiry, the legal basis is Art. 6 (1) lit. b GDPR if your inquiry is aimed at initiating or executing a contract, or Art. 6 (1) lit. f GDPR for other inquiries. Our legitimate interest consists in processing and answering contact inquiries.
The data will be stored only as long as necessary to process the request. Statutory retention obligations remain unaffected.
6. Contact Form
We use Convert Forms for contact inquiries submitted via the form provided on this website.
The data entered via the form is processed to handle your inquiry and transmitted to the email address stored by us.
The specific data collected can be seen from the respective input fields of the contact form. Mandatory fields are marked as such.
We kindly ask you not to transmit any particularly sensitive personal data via the contact form unless it is necessary for your inquiry.
The processing is based on Art. 6 (1) lit. b GDPR if your request serves the execution of pre-contractual measures, or on the basis of Art. 6 (1) lit. f GDPR for other inquiries.
The data you transmit will be deleted as soon as your request has been fully processed and there are no statutory retention obligations or other legitimate reasons for further storage.
7. Spam Protection with Cloudflare Turnstile
To protect our contact form against automated requests, spam, and misuse, we use Cloudflare Turnstile, a service provided by Cloudflare, Inc.
Turnstile checks whether a request is made by a human user. For this purpose, a technical widget is integrated into the form, processing technical information necessary to perform and verify the security check.
Convert Forms directly supports Cloudflare Turnstile as spam protection for Joomla forms.
This processing serves our legitimate interest in protecting the contact form from spam, automated access, and abuse.
The legal basis is Art. 6 (1) lit. f GDPR.
Cloudflare may process data as part of the technical verification. For more information on data processing by Cloudflare, please refer to Cloudflare's privacy policy.
8. Google Fonts
This website uses fonts from Google Fonts, which are stored locally on our web server via YOOtheme Pro and delivered from there.
When selecting a Google font, YOOtheme Pro downloads the required font files (in particular WOFF2 files) to our own web server and embeds them locally. As a result, no connections are established to Google Fonts servers when visiting our website.
Consequently, your IP address is not transmitted to Google Fonts through the use of these locally embedded fonts.
9. Google Maps
We use Google Maps on this website, a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps is used to display our location and help you find directions to our company.
Google Maps is integrated via YOOtheme Pro. The YOOtheme Consent Manager can be configured so that the connection to Google and the loading of the map only occur after the visitor has given their corresponding consent. Prior to consent, only a placeholder is displayed.
Data may be transmitted to Google only after you have given your consent. This may include your IP address as well as technical information about the device and browser used.
The legal basis for processing after consent has been given is Art. 6 (1) lit. a GDPR.
You can revoke or change your consent at any time with effect for the future via the settings of our consent manager.
For more information on data processing by Google, please refer to Google's privacy policy.
10. Consent Management
To manage your consents for certain external services, we use the Consent Manager integrated into YOOtheme Pro.
The Consent Manager makes it possible to block certain external services by default and load them only after you have given your consent.
In particular, Google Maps can be loaded via the Consent Manager only after corresponding consent has been granted.
Your preferences are saved so that your consent decision can be respected during further page views.
You can change or revoke your consent at any time via the corresponding link or setting on the website.
11. Technical Cookies
Our website may use technically necessary cookies or comparable technologies that are required for the operation of the website.
Technically necessary cookies serve, for example, to provide basic functions of the website or to save your preferences within the website.
Insofar as such cookies are technically required, their processing is carried out on the basis of Section 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and – insofar as personal data is processed – Art. 6 (1) lit. f GDPR.
Services and cookies that are not technically necessary are generally activated only after you have given your corresponding consent.
12. Legal Bases for Processing
We process personal data in particular on the basis of the following legal bases:
Art. 6 (1) lit. a GDPR
Consent of the data subject.
Art. 6 (1) lit. b GDPR
Processing for the performance of a contract or to take steps prior to entering into a contract.
Art. 6 (1) lit. c GDPR
Processing for compliance with a legal obligation.
Art. 6 (1) lit. f GDPR
Processing to protect our legitimate interests, unless overridden by the interests or fundamental rights and freedoms of the data subject.
13. Storage Period
As a rule, we store personal data only for as long as is necessary for the respective purpose.
In addition, statutory retention obligations may apply. If statutory retention obligations prevent deletion, processing is restricted accordingly.
Upon expiry of the respective retention periods, the data will be deleted unless there is another legal basis for further storage.
14. Your Rights
You generally have the following rights vis-à-vis us regarding your personal data:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object to processing pursuant to Art. 21 GDPR
- Right to withdraw consent given at any time pursuant to Art. 7 (3) GDPR
If data processing is based on your consent, you can revoke it at any time with effect for the future. The legality of the processing carried out up to the revocation remains unaffected.
15. Right to Object
Insofar as we process your personal data on the basis of Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such advertising.
16. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a data protection supervisory authority.
The data protection supervisory authority responsible for our registered office is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
17. Obligation to Provide Personal Data
As a general rule, you are not obliged to provide us with personal data.
However, when contacting us, we require the information that is necessary to process and answer your request. Without this information, it may not be possible to process the inquiry.
18. Automated Decision-Making and Profiling
Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place in connection with the use of this website.
19. Currency of and Changes to this Privacy Policy
We reserve the right to adapt this Privacy Policy if necessary due to technical changes to our website, new functions, changes to the services used, or due to changed legal or data protection requirements.
The version published on our website at the time of your visit shall apply in each case.
Status: September 2026
oneline | Mediendesign
Borchener Str. 150
D-33098 Paderborn
+49 (0) 173 2048346
www.one-l.de
