Privacy Policy
1. Controller
Rak Interactive, Inh. Nils Bartnick
Graslitzer Straße 31a
84478 Waldkraiburg
Germany
Email:
2. Hosting
This website is hosted by:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
Web: all-inkl.com
Processing is carried out under a data processing agreement pursuant to Art. 28 GDPR. The provider processes connection data (IP address, date, time, pages accessed) as part of server operations. ALL-INKL.COM is a German company; no transfer to third countries takes place. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating an accessible and secure website).
3. Contact Form
When using the contact form, the following data is collected:
- Name
- Email address
- Message content
This data is used solely to process your enquiry and is transmitted via email through ALL-INKL.COM. No data is stored in a database. Data is deleted after the communication is complete, unless legal retention obligations apply.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
4. Cookies
This website uses only technically necessary cookies:
-
Session cookie (
laravel_session) — stores an anonymous session ID to associate requests within a browser session (e.g. form feedback). Deleted when the browser is closed. -
Language preference cookie (
locale) — stores the language selected by the user (deoren). Contains no personal data. Expires after 12 months or is overwritten when the user switches language again. -
CSRF token (
XSRF-TOKEN) — protects forms against cross-site request forgery attacks. Deleted when the browser is closed.
Technically necessary cookies do not require consent pursuant to § 25(2)(2) TTDSG. The legal basis for the associated data processing is Art. 6(1)(f) GDPR (legitimate interest in the secure and functional operation of the website). No tracking or marketing cookies are used.
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object pursuant to Art. 21 GDPR. As only technically necessary cookies are used — without which the website cannot function properly — the legitimate interests of the operator will generally override any such objection.
5. Data Security
This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data. You can recognise an encrypted connection by the address bar changing from "http://" to "https://" and by the padlock icon in the browser bar.
6. Retention Periods
Personal data is stored only for as long as necessary for the respective purpose:
- Contact form: Data submitted via the contact form is deleted after the communication is complete, unless statutory retention obligations apply.
- Server logs: Connection data (IP address, access time) is stored by the hosting provider for typically 7 days and then automatically deleted.
- Cookies: The session cookie and CSRF token are deleted when the browser is closed; the language preference cookie expires after 12 months.
7. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority for Bavaria is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Web: lda.bayern.de