Privacy notice.

1. Controller

Controller for this website:
Max Mustermann, sole proprietorship
To be verified: operator name, legal status and address.
Musterstraße [street number to be confirmed], 12345 Musterstadt, Germany
Email: kontakt@zeitquell.de

2. Hosting and server logs

According to the operator information, the website is intended to run via Coolify on a Hetzner Cloud server in Germany. When the website is accessed, technically necessary server log data may be processed, for example IP address, time of access, requested URL, HTTP status, referrer and user agent. The exact scope, retention period and access rights must be verified in the actual server and Coolify configuration.

3. Cookies, tracking and external content

Based on the current code audit, the website does not use analytics cookies, Google Analytics, Google Tag Manager, external Google Fonts, external image CDNs or embedded third-party videos. Therefore, no cookie banner has been implemented merely as a precaution.

4. Basic Authentication

According to the operator information, the website is temporarily protected by HTTP Basic Authentication. The concrete implementation, logging and password handling are outside the repository audit and must be checked in Coolify or on the server.

5. Contact form

Contact form submissions are validated server-side and processed to respond to the request. Required fields are name, business email address and message. Company, industry and phone number are optional. The submission is not stored in an application database.

The request is sent server-side through the authenticated Zeitquell mailbox via SMTP to a fixed Zeitquell recipient address. According to the operator information, the email provider is Hetzner. The visitor's email address is used only as the reply address. The content is subsequently processed in the mailbox according to its access, retention and deletion rules.

6. Spam protection and rate limiting

The contact form uses a hidden honeypot field and a server-side rate limit. A pseudonymous hash is derived from the IP address or an IP value supplied by the reverse proxy. Only this hash, the attempt count and the end of the 15-minute window are stored. Expired entries are removed during the next processing operation. This data is used solely to protect the form against misuse.

7. Email contact

When contacting kontakt@zeitquell.de by email, the transmitted content and contact details are processed to handle the request. According to the operator information, the email provider is Hetzner. Concrete mailbox configuration, retention periods, backups and access rights must be confirmed outside the code.

8. Legal bases, recipients and rights

Possible legal bases include handling pre-contractual requests, legitimate interests in secure website operation and legal obligations. The final GDPR assessment, retention periods, recipients, potential third-country transfers and responsible supervisory authority must be completed by the operator.