Privacy

Privacy policy

Last updated: October 2026

This English version is a convenience translation. In case of doubt, the German version applies.

1. Controller

Pascal Grommisch
Peter-Früh-Weg 1
87480 Weitnau, Germany
Email: [email protected]

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Overview

This website uses no cookies, no analytics or tracking tools, no advertising and no social media plugins. Fonts are not loaded from third-party servers. If you switch the language or the color scheme, your browser stores this choice locally (localStorage). This information is not transmitted to us. Personal data is processed only to the extent necessary to operate the website or to answer your enquiry.

3. Hosting and delivery (Cloudflare)

The website is delivered via Cloudflare Pages and Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page requested, the browser type and the operating system. This data is required to deliver the website, to ensure its security (for example defense against attacks) and to analyze errors.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure and stable delivery of the website. A data processing agreement (Art. 28 GDPR) exists with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR); the EU Standard Contractual Clauses also apply. Further information: cloudflare.com/privacypolicy.

To protect against spam, the email address shown on the website is obfuscated by Cloudflare and only made readable in your browser by a script. No additional personal data is collected and no cookies are set in the process.

4. Contact form and email

If you write to us via the contact form or by email, we process the data you provide (name, email address, topic, message) solely to handle your enquiry. The form data is not stored on the website. It is forwarded as an email to our GMX mailbox via Cloudflare’s email service (Cloudflare Email Routing, provider see section 3). The mailbox provider is 1&1 Mail & Media GmbH, Brauerstraße 48, 76135 Karlsruhe, Germany.

The legal basis is Art. 6(1)(b) GDPR where your enquiry aims at a contract or pre-contractual measures, and otherwise Art. 6(1)(a) GDPR (your consent via the checkbox) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). You can withdraw any consent you have given at any time with effect for the future by email.

Your enquiry is deleted once it has been finally handled and no statutory retention obligations apply, but no later than 12 months after the last communication.

To protect against automated spam messages, the form contains a field that is invisible to humans and checks the time taken to fill it in. We also use Cloudflare Turnstile on the contact page (provider see section 3). Turnstile uses technical characteristics of your browser and your IP address to check whether the request comes from a human. It sets no cookies for advertising or analytics purposes and creates no user profiles. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protection against misuse and spam. Further information: Turnstile privacy information.

5. “File Repair” tool

The tool at /datei-reparatur/ processes the files you select exclusively locally in your browser. The files and their contents are not transmitted to us or to third parties and are not stored.

To process Office and PDF files, the tool loads two program libraries (JSZip, pdf-lib) from the cdnjs service, which is operated by Cloudflare (provider see section 3). Your IP address is transmitted to Cloudflare in the process. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the reliable provision of the functions.

6. Links to other services

This website links to other projects, for example SpritRadar at sprit.mrpg.dev. Their own privacy notices apply to those services. No data is transmitted until you click a link.

Donations via Ko-fi: You can make voluntary donations via the page ko-fi.com/mrpgdev. The payment is handled by the provider Ko-fi; depending on the payment method chosen, a payment service provider also processes the data. The provider processes the data necessary for the payment (for example name, email address, payment details, amount and optionally your message). We only receive the information needed to assign and confirm the donation. We do not see the payment data itself. The legal basis is Art. 6(1)(b) GDPR (processing of the donation). The provider’s privacy notices apply.

7. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw any consent you have given (Art. 7(3)). An informal email to [email protected] is sufficient.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

8. Security

The connection to this website is encrypted using TLS (HTTPS). There is no automated decision-making or profiling. Providing your data is neither legally nor contractually required; however, without the details in the contact form we cannot answer your enquiry.

9. Changes

We will adapt this privacy policy if the website or the legal situation changes. The version published here applies.