Privacy policy

This is a translation. The German version is legally binding.

1. Controller

Creative Timeout, Jens Vossen
Mühlenweg 2
64625 Bensheim, Germany
Email: Show email address

2. Hosting and server log files

This website runs on our own server in Germany. When you visit it, the server stores technical access data: IP address, time, requested page, browser type and referrer URL. This data is used only to operate the website securely (Art. 6(1)(f) GDPR) and is deleted automatically after 7 days at the latest. It is not passed on to third parties.

3. Postcard (contact form)

When you write a postcard, your first and last name, email address and message are sent to our server ctb01.creativetimeout.de and forwarded from there to us as an email. The data is used only to answer your message (Art. 6(1)(f) GDPR, legitimate interest in answering enquiries). It is not stored in a database and is deleted once your message has been dealt with.

To prevent abuse, rejected submissions (for example automated spam attempts) are logged with IP address, name and subject and deleted after 7 days at the latest (Art. 6(1)(f) GDPR).

To send the email we use the email service Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) as a processor under Art. 28 GDPR. Brevo keeps the dispatch metadata (sender and recipient address, subject, time) in its sending logs for one month; it does not store the content of the email. Processing takes place mainly on servers in the EU. Brevo may use sub-processors outside the EEA; such transfers are safeguarded by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

4. No cookies, no tracking

This website sets no cookies and uses no analytics or tracking services. Fonts and all other files come from our own server; no content is loaded from third parties.

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Please contact the address above. You may also lodge a complaint with the competent supervisory authority: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.