Before publishing: Replace every square-bracket placeholder with accurate business information and have this document checked for your exact legal status, services and data-processing setup.
1. Controller
[FULL LEGAL NAME / BUSINESS NAME]
[COMPLETE BUSINESS ADDRESS]
Email: hello@bissblitz.de
Telephone: [BUSINESS TELEPHONE]
2. Hosting and website delivery
This website is hosted by [CONFIRM CURRENT HOSTING PROVIDER AND CONTRACTING ENTITY]. When the website is accessed, technical connection data may be processed to deliver the site securely and reliably. The legal basis and any data-processing agreement must match the actual hosting arrangement.
3. Server log data
Technical logs can include IP address, date and time, requested resource, referrer, browser and operating-system information. Such data may be processed for secure operation, error analysis and defence against misuse, based on the controller's legitimate interests where applicable.
4. Contact and audit forms
When you submit a contact or free-audit form, the information you provide is processed to handle your enquiry, prepare requested pre-contractual information or communicate about services. Required and optional fields must be identified in the live form.
Forms used: Fluent Forms IDs 1 and 3. Confirm where submissions are stored, who receives email notifications, the deletion schedule, spam protection, and whether any external processors receive the data.
5. Email communication
Messages sent to hello@bissblitz.de are processed by [CONFIRM EMAIL HOSTING PROVIDER]. Email communication can contain transmission risks. Do not send confidential credentials through ordinary email.
6. Cookies, analytics and external media
[LIST EVERY ACTIVE COOKIE, CONSENT TOOL, ANALYTICS SERVICE, EMBED, CDN, GOOGLE FONT DELIVERY METHOD, MAP, VIDEO, CAPTCHA, ADVERTISING PIXEL OR OTHER THIRD-PARTY SERVICE. REMOVE THIS SECTION ONLY AFTER THE ACTUAL SITE HAS BEEN AUDITED.]
7. Retention
Personal data is retained only as long as required for the relevant purpose, legal obligations, the establishment or defence of claims, and documented deletion schedules. Insert the actual retention periods used for form submissions, email, customer records, backups and logs.
8. Your rights
Subject to the conditions of applicable data-protection law, individuals may have rights of access, rectification, erasure, restriction, data portability and objection, and may withdraw consent for future processing. A complaint may be submitted to a competent data-protection supervisory authority.
9. Security and updates
Appropriate technical and organisational safeguards are used according to risk. This policy should be updated whenever the website, service providers or processing activities change.
Last updated: [DATE]