Privacy Policy
Last updated: October 2026
Controller
GHLR Digital GmbHJägerstraße 6
01099 Dresden, Germany
Email: hallo@ghlr.it
What this website does not do
This website sets no cookies, embeds no third-party services, and loads no fonts, scripts or other content from third-party servers. There is no contact form and there are no user accounts. No automated decision-making or profiling takes place.
Server logs
When you access this website, the web server automatically stores data transmitted by your browser in log files: your IP address, the date and time of access, the address requested, the previously visited page if your browser transmits it, and your browser type and operating system.
This data is required to deliver the website, ensure its stability and security, and detect attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the technically sound and secure operation of the site. The logs are kept on our own servers, are not combined with other data sources and are deleted after seven days at the latest, unless they are needed longer to investigate a specific security incident. We also count page views from them, see “Reach measurement”.
Reach measurement
To see how many people visit this website and which pages they view, we use the software Umami. It runs on our own servers in Germany (see “Hosting”); no data goes to anyone else. Umami sets no cookies and stores no IP addresses. From the IP address and the browser identifier it forms a check value that is valid for one day only, so it cannot link a visit on another day to you. Stored are the page viewed, the previously visited page, date and time, browser type, operating system, device type, language setting, and the country and region derived from the IP address. We delete this data after 13 months.
Without your consent we count page views solely from the server logs above. Nothing is read from or stored on your device for this. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in knowing whether and how this website is used.
With your consent your browser additionally loads the Umami script from stats.ghlr.it. It also transmits the screen size and the time spent on a page. The legal basis is your consent under Art. 6 (1) (a) GDPR and section 25 (1) TDDDG. Without your agreement the script is not loaded. We store your choice in your browser’s local storage, not in a cookie, so that we do not ask you again on every visit; this is permitted without consent under section 25 (2) no. 2 TDDDG. You can withdraw your consent at any time with effect for the future via the “Privacy settings” link at the bottom of every page. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, we treat it as a refusal and do not ask.
Hosting
The website runs on a server operated by Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany. The reach measurement with Umami and our email server run on servers of Contabo GmbH, Aschauer Strasse 32a, 81549 Munich, Germany. All servers are located in Germany. Hetzner and Contabo process the data described in this policy as processors on our behalf (Art. 28 GDPR).
Transport encryption
This website is served exclusively over encrypted HTTPS connections, protecting the content you retrieve against interception in transit.
Contacting us
If you contact us by email or telephone, we process the information you provide in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the contact concerns the initiation or performance of a contract, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries. We keep your enquiry for as long as it takes to deal with it, and beyond that only where statutory retention periods require it. Emails are received and stored on our own email server at Contabo (see “Hosting”).
Your rights
You have the right to obtain information about the data stored about you (Art. 15 GDPR), to have it rectified (Art. 16), erased (Art. 17), or its processing restricted (Art. 18), and to data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3)). Please use the contact details above.
Right to object: Where we process data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), such as the server logs and the reach measurement without consent, you may object to this at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to the address above is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Maternistrasse 17, 01067 Dresden, Germany.
Changes
If the scope of this website changes, we will update this policy. The version published here is the one that applies.