Privacy

Controller

heavy grafiX, owner Rudi Kirschen, Kochstraße 122, 04277 Leipzig, Germany. Email: mail@heavygrafix.de, phone: +49 1522 2733745.

Hosting

This website runs on a dedicated virtual server provided by Hostinger (Hostinger International Ltd., Cyprus) in a data centre in Germany. Hostinger processes the data generated when you visit the website on our behalf (Art. 28 GDPR). Texts, images, videos and fonts are served exclusively from this server.

Server logs

For every request, the web server keeps an access log. It contains the date and time, the requested address, status code, amount of data and response time, the previously visited page (referrer), information about your browser, operating system and language, and your IP address in shortened form (IPv4 without the last byte, IPv6 only the first 48 bits). Cookie contents, credentials and form contents are not logged. The logs are rotated daily and deleted automatically after eight days at the latest.

Only in the case of technical errors of the web server and for requests not addressed to heavygrafix.de (for example directly to the server's IP address) is the full IP address written to the system log. It is deleted after 30 days at the latest.

The purpose is secure and stable operation and troubleshooting. The legal basis is Art. 6(1)(f) GDPR. We do not use the logs for statistics or advertising.

No cookies, no analytics, no tracking

Visiting this website sets no cookies and stores nothing in your browser (no local storage either). There are no analytics, advertising or tracking services. Only the administration area sets technically necessary cookies for the operator's login.

Embedded content and links

No content from other providers is currently embedded. Links to other websites, for example to our profiles on Instagram and YouTube, are plain links. Only when you click them do you leave this website, and the privacy policy of the respective provider applies.

Contact by email or phone

If you email or call us, we process your details to answer your enquiry (Art. 6(1)(b) GDPR, otherwise (f)). Emails are stored by our mail provider IONOS SE, Montabaur, Germany, which processes them on our behalf.

Contact form

The form asks for your name, email address and message. Optionally you can add your company or newsroom, phone number, type of project, budget range and deadline. We also store the language of the page and the time of your consent. The data is stored in the website's database on the Hostinger server.

To prevent spam, there is a hidden field and a minimum time. In addition, the server counts submissions per IP address (at most five in ten minutes). This counter exists only in memory, is not stored permanently and expires at the latest when the service restarts.

To handle enquiries, we may analyse them with the AI assistant Claude by Anthropic, for example to summarise them or draft a reply. The assistant receives your name, company, message, type of project, budget and deadline, but not your email address or phone number. Anthropic may also process this data outside the EU, in particular in the USA.

The legal basis is Art. 6(1)(b) GDPR (enquiry about a possible commission) and your consent via the checkbox (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by email, with effect for the future.

Retention

• Access logs: eight days at most. System log: 30 days at most.
• Enquiries: until they have been dealt with. If they lead to a commission, the statutory retention periods apply.
• The database is backed up on the server every night. We keep 14 daily and 8 weekly backups as well as the last 10 backups taken before updates. Deleted data therefore only disappears from the backups once these periods have passed.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on Art. 6(1)(f) (Art. 21). You can withdraw consent at any time (Art. 7(3)). An informal email to mail@heavygrafix.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Devrientstraße 5, 01067 Dresden, Germany.

Last updated: 1 November 2026