Privacy Policy / Datenschutzerklärung

1. Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information, please see the full Privacy Policy below.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Contact details are listed in “Information about the controller”.

How do we collect your data?

Some data is provided by you (e.g., via a contact form). Other data is collected automatically or after your consent by our IT systems when you visit the site (e.g., browser, OS, time of access).

What do we use your data for?

Part of the data ensures error-free provision of the website. Other data may be used to analyze user behavior. If contracts can be concluded or initiated via the website, transmitted data may also be processed for offers, orders, or related requests.

What rights do you have?

You may request information, rectification, erasure, or restriction of processing; revoke consent; and lodge a complaint with a supervisory authority. Contact us anytime.

Analytics tools and third-party tools

Your browsing behavior may be statistically evaluated, mainly with analytics programs. Details below.

2. Hosting

We host our website with:

All-Inkl

Provider: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf (“All-Inkl”). Privacy info: all-inkl.com/datenschutzinformationen.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable hosting). Where consent is requested, processing is based on Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG*. Consent can be revoked at any time.

Processing on our behalf

We have a Data Processing Agreement (DPA) with All-Inkl to ensure GDPR-compliant processing per our instructions.

3. General notes and mandatory information

Data protection

We treat your personal data confidentially and according to statutory regulations and this Privacy Policy. Note that internet data transmission (e.g., email) can have security gaps.

Information about the controller

David Nickel
An der Enckekaserne 15
39110 Magdeburg
Germany
E-mail: info@randomninja.com

The controller determines the purposes and means of processing personal data.

Storage period

Unless stated otherwise, data is kept until the purpose no longer applies. Upon justified erasure requests or consent withdrawal, we delete data unless statutory retention obligations apply.

Legal bases for processing

Depending on context: Art. 6(1)(a) GDPR (consent), Art. 9(2)(a) GDPR (special categories), Art. 49(1)(a) GDPR (third-country transfer with explicit consent), Sec. 25(1) TDDDG* (device access), Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(f) GDPR (legitimate interest).

Recipients of personal data

We share data with external parties only if necessary for contracts, legal obligations (e.g., tax authorities), legitimate interests, or other legal bases. With processors, a DPA applies; with joint controllers, a joint controller agreement applies.

Revocation of consent

You may revoke consent at any time. Past processing remains lawful.

Right to object (Art. 21 GDPR)

You may object at any time to processing based on Art. 6(1)(e) or (f) GDPR, including profiling, on grounds relating to your particular situation. We will stop processing unless we demonstrate compelling legitimate grounds or for legal claims.

If processed for direct marketing, you may object at any time; data will no longer be used for that purpose.

Complaint to a supervisory authority

You may lodge a complaint with a data protection authority, without prejudice to other remedies.

Data portability

You may receive data (based on consent/contract) in a machine-readable format or have it transferred to another controller where technically feasible.

Access, rectification, erasure

Within legal limits, you may request info about stored data, its origin, recipients, and purposes; and rectification/erasure.

Restriction of processing

You may request restriction of processing, e.g., while we verify accuracy, in unlawful processing instead of erasure, for legal claims, or pending an objection balancing test.

SSL/TLS encryption

We use SSL/TLS. Look for “https://” and a lock icon. With encryption active, transmitted data can’t be read by third parties.

Objection to unsolicited emails

We object to the use of contact details from our legal notice for unsolicited advertising. We reserve legal action against spam.

4. Data collection on this website

Cookies

We use session and persistent cookies (first-party/third-party). Necessary cookies: Art. 6(1)(f) GDPR. If consent is requested: Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG*. You can configure your browser to manage cookies; disabling may limit functionality.

Requests by email, telephone, or fax

Inquiries (incl. personal data) are processed to handle your request. Legal basis: Art. 6(1)(b) GDPR (contract/pre-contract), otherwise Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) GDPR (consent). Retention ends upon deletion request, consent withdrawal, or purpose expiry—subject to statutory retention duties.

5. Plugins and tools

Ninja Firewall

Provider: NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen’s Road Central, Sheung Wan, Hong Kong (“Ninja Firewall”).

Captures IP address (anonymized), request, referrer, and time to protect the site from unauthorized access/cyberattacks. Hosted on our servers; no personal data is transmitted to the provider or third parties.

Legal basis: Art. 6(1)(f) GDPR (effective protection against cyberattacks).


* TDDDG: German Telecommunications-Digital Services Data Protection Act (replaced TTDSG in 2024). It governs storing/reading information on user devices (e.g., cookies, device fingerprinting).

Source (DE template): e-recht24.de

Scroll to Top