DE
EN
Privacy Policy
Transparency and security of your data in accordance with the GDPR (EU General Data Protection Regulation)
1. An overview of data protection
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Who is responsible?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section "Information on the responsible party" in this privacy policy.
How do we record your data?
Your data is collected in two ways: firstly, when you provide it to us, for example, by entering information into a contact form; and secondly, automatically or with your consent when you visit our website, through our IT systems.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website. Other data
may be used to analyze your user patterns.
Your rights
You have the right to obtain information free of charge at any time regarding the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future.
2. Responsible party
Webdesign Kummert
Storetown Media Department
Jan-Hendrik Kummert
Schilfweg 17
25436 Tornesch
Germany
Contact:
Phone: +49 (0) 4122 4084792
Email: info@storetown-media.de
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
3. Storage period
Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted, provided we have no other legally permissible grounds for storing it.
| Data type | Storage duration | Legal basis |
|---|---|---|
| Contact form data | 6 months | Art. 6 para. 1 lit. f GDPR |
| Server log files | 30 days | Art. 6 para. 1 lit. f GDPR |
| Cookie data | Variable (see cookie policy) | Art. 6 para. 1 lit. a GDPR |
| Newsletter data | Until further notice | Art. 6 para. 1 lit. a GDPR |
| Browser notifications (push registration) | Until further notice | Art. 6 para. 1 lit. a GDPR |
| customer data | 10 years (tax law) | Art. 6 para. 1 lit. c GDPR |
4. Legal basis for processing
We process personal data on the basis of the following legal grounds:
- Consent (Art. 6 para. 1 lit. a GDPR): The data subject has given their consent to the processing.
- Contractual performance (Art. 6 para. 1 lit. b GDPR): The processing is necessary for the performance of a contract.
- Legal obligation (Art. 6 para. 1 lit. c GDPR): The processing is necessary for compliance with a legal obligation.
- Vital interests (Art. 6 para. 1 lit. d GDPR): The processing is necessary to protect vital interests.
- Public interest (Art. 6 para. 1 lit. e GDPR): The processing is in the public interest
- Legitimate interests (Art. 6 para. 1 lit. f GDPR): The processing is necessary for the purposes of legitimate interests.
5. Recording of data on this website
Cookie policy
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:
- The type and version of browser used.
- Operating system used.
- Referrer URL.
- The hostname of the accessing computer.
- The time of the server inquiry
- The IP address
This data will not be combined with other data sources. The collection of this data is based on Article 6(1)(f) GDPR.
Contact form
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.
Request by e-mail, telephone, or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request.
6. Social Media
We maintain online presences within social networks and platforms in order to communicate with customers, prospects and users active there.
- Facebook (Meta Platforms Ireland Limited)
- Instagram (Meta Platforms Ireland Limited)
- LinkedIn (LinkedIn Ireland Unlimited Company)
- Twitter/X (Twitter International Company)
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called usage profiles using pseudonyms.
7. Plug-ins and Tools
Google Fonts (hosted locally)
This website uses Google Fonts for consistent font display. The Google Fonts are installed locally. No connection to Google servers is established.
OpenStreetMap
We use the map service from OpenStreetMap (OSM). When you access a page with integrated OSM maps, your IP address is forwarded to the OpenStreetMap Foundation (OSMF).
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to verify whether data entry on this website (e.g., in a contact form) is done by a human or by an automated program. Its use is based on Article 6(1)(f) GDPR.
AI assistant “Käpt’n Ole” (Anthropic)
This website offers the AI assistant "Captain Ole" as a chat window. The assistant only becomes active when you open it and send a message; no transmission occurs without your input. When you send a message, it is first transmitted to our own server and from there forwarded to the "Claude" service by Anthropic, which generates the reply. For users in the European Economic Area, the service provider is Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland; for all other locations, it is Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA.
The purpose is to provide immediate answers to questions about our services, products, and content. The legal basis is our legitimate interest in providing fast and up-to-date advice to visitors of our website (Art. 6 para. 1 lit. f GDPR).
The following data is transmitted: the text you enter, the previous messages in the current chat history, and the identifier of the page on which you are using the chat. Please do not enter any personal or confidential data in the chat. For specific inquiries, please use our contact form, email address, or telephone.
Storage on our end: We do not store chat histories in our database. To protect against misuse, we only maintain a counter that processes your IP address solely as a non-reversible checksum and for a maximum of 24 hours. Regardless, the server log files described in section 5 are generated.
Storage by the provider: Anthropic processes the content on our behalf as a data processor based on a data processing agreement. According to the provider, the content is not used to train AI models and is regularly deleted within 30 days. If content is classified as a potential violation of the provider's terms of service, it may be stored there for a longer period.
Processing may also take place outside the European Union, particularly in the United States. The transfer is based on the EU Commission's Standard Contractual Clauses, which are incorporated into the data processing agreement. Despite these safeguards, access by government authorities in the third country cannot be completely ruled out.
Further information from the provider can be found in their privacy policy at www.anthropic.com/legal/privacy. Please also note: "Captain Ole" is an artificial intelligence and may make mistakes. Its information is non-binding and does not replace consultation with our staff.
8. Newsletter and browser notifications
Newsletter data
If you wish to subscribe to the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter.
Double opt-in procedure
Registration for our newsletter uses a double opt-in process. This means that after registering, you will receive an email asking you to confirm your subscription. This confirmation is necessary to prevent anyone from subscribing using someone else's email address.
Newsletter subscriptions are logged to document the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address.
Instructions for cancellation
You can revoke your consent to the storage of your data, email address and its use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter.
Browser notifications (web push)
You can subscribe to notifications on this website that your browser will display even when our site is not open. We use these notifications solely to inform you about new articles and important information about our own services. We do not send any third-party advertising through this channel.
Registration is voluntary and takes place in two steps: First, we ask you for your permission on the website itself, then your browser will ask for your permission again. Nothing will be saved without both confirmations. The legal basis for this is your consent pursuant to Art. 6 para. 1 lit. a GDPR.
When you register, we store the following information on our server: the delivery address generated by your browser, two associated technical keys, the name of the delivery service, your browser language, and the time of registration. We do not store your name, email address, or IP address.
The delivery process is technically mandatory and relies on the push service provided by your browser's manufacturer—Google (Firebase Cloud Messaging) for Chrome, Edge, and Android; Mozilla for Firefox; and Apple for Safari. This service receives the delivery address and the encrypted packet. The message content is end-to-end encrypted (using RFC 8291) and unreadable by the delivery service. Depending on the manufacturer, data may be transmitted to third countries.
Encryption and delivery take place on our own server. We do not create a profile of your behavior. We only analyze how often a message was delivered and clicked overall—without reference to individual recipients.
Revocation of browser notifications
We will store your registration until you revoke it. You can do this at any time: via the toggle on our website or in your browser's website settings by blocking notifications for this page. Your registration will then be deleted from our system. The same happens automatically if the delivery service reports your address as invalid or if delivery repeatedly fails.
9. Your rights as a data subject
As a data subject, you have the following rights:
You have the right to request confirmation as to whether personal data concerning you is being processed.
You have the right to request the immediate correction of inaccurate personal data concerning you.
You have the right to request the immediate deletion of personal data concerning you.
You have the right to request that the processing of your personal data be restricted.
You have the right to receive your personal data in a structured, commonly used and machine-readable format.
You have the right to object at any time to the processing of personal data concerning you.
You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:
Independent State Center for Data Protection Schleswig-Holstein
Holstenstrasse 98
24103 Kiel
Phone: + 49 (0) 431 988-1200
Email: mail@datenschutzzentrum.de
10. Status and Update
August 2026
We reserve the right to amend this privacy policy to always comply with the latest legal requirements or to implement changes to our privacy policy, such as the introduction of new services. Your new visit will be subject to the new privacy policy.
🔐 Data privacy is important to us.
If you have any questions about data protection or the processing of your personal data, please feel free to contact us.
{% endif %} {% if title and title != "" %}
{{ title }}
{% endif %} {% if excerpt and excerpt != "" %}