← Back DE

Privacy Policy

Controller

Jonas Onstein
zwoelfstein — Agentur & Management
Königsallee 19
40212 Düsseldorf
Email: hi@zwoelfstein.de
Phone: +49 171 141 092 1

Overview of Processing Activities

The following overview summarizes the types of data processed and the purposes of their processing, and refers to the rights of the data subject.

1. Controller

The controller responsible for data processing on this website is:

Jonas Onstein, zwoelfstein — Agentur & Management, Königsallee 19, 40212 Düsseldorf

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. Hosting

This website is hosted on servers within the European Union. The server infrastructure is located in Germany. A transfer of data to third countries takes place only where expressly indicated below in connection with the services used (e.g. Google Fonts).

We have entered into a data processing agreement (DPA) with our hosting provider in accordance with Art. 28 GDPR, which ensures compliance with data protection requirements.

3. General Information

We generally only process personal data of our users to the extent necessary to provide a functioning website and our content and services. The processing of our users' personal data regularly takes place only with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by legal provisions.

4. Consent (Consent Management)

On your first visit to this website, a consent banner is displayed. There you can choose which types of data processing you wish to allow:

You have the option at any time to withdraw your consent or change your privacy settings:

Consent is obtained on the basis of Art. 6 (1)(a) GDPR. Your consent is stored locally in your browser (localStorage). Your consent is valid for 12 months and will be requested again afterwards. If we make material changes to our privacy policy, we will ask for your consent again.

5. Contact Form / Email Contact

If you send us inquiries via the contact form or by email, your details from the inquiry form, including the contact information you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of the data entered into the contact form is based on your consent (Art. 6 (1)(a) GDPR).

Retention period: Your contact data will be stored until your inquiry has been resolved and subsequently for the duration of statutory retention periods (in particular tax and commercial retention periods of 6 to 10 years), unless there is no legal obligation to delete it.

6. Newsletter

If you subscribe to our newsletter, the email address you provide will be stored for the purpose of sending the newsletter. Registration takes place via a double opt-in procedure: you will receive a confirmation email in which you must confirm your subscription before the newsletter is sent.

The processing is based on your consent (Art. 6 (1)(a) GDPR). You may withdraw your consent at any time by unsubscribing via the unsubscribe link in the newsletter or by contacting us.

Retention period: Your email address will be stored until you withdraw your consent.

Sending service provider: The newsletter is sent via a service provider within the EU. We have entered into a data processing agreement (DPA) with the sending service provider.

7. Server Log Files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

This data is not combined with other data sources.

The processing of server log data is based on Art. 6 (1)(f) GDPR (legitimate interest in ensuring the smooth operation of the website).

Retention period: Server log data is automatically deleted after 30 days, unless it needs to be retained longer to resolve faults or for legal reasons.

8. Google Fonts

This website integrates external fonts (Google Fonts) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Fonts are only loaded after your explicit consent. If you do not give consent, the fonts will not be loaded and the website will use system fonts as an alternative.

When you visit this website, your browser loads the required fonts into your browser cache in order to display text and fonts correctly. For this purpose, the browser you use must connect to Google's servers. This informs Google that our website was accessed via your IP address.

The use of Google Fonts is based on your consent (Art. 6 (1)(a) GDPR).

Transfer to third countries: Google LLC is based in the USA. Your IP address is transmitted to Google servers in the USA when the font files are retrieved. An adequacy decision by the European Commission (EU-US Data Privacy Framework) is in place, ensuring an adequate level of data protection for data transfers to US companies certified under the Framework. Google is certified under the EU-US Data Privacy Framework.

Further information on Google Fonts can be found in Google's privacy policy: https://policies.google.com/privacy

9. Cookies and Local Storage

This website uses technically necessary local storage (localStorage) to store your consent decision (consent to external services). This storage does not contain any personal data other than the information about which categories you have allowed and the time of consent.

No further use of cookies or tracking technologies (in particular marketing cookies, analytics cookies) takes place.

10. Image Sources

Images and graphics used on this website originate from the following sources:

All image rights belong to the respective creators or to zwoelfstein. Use without express permission is not permitted.

11. External Links

This website contains links to external websites (e.g. Instagram, LinkedIn). By clicking on these links, you leave our website. The respective operators of the linked pages are responsible for data processing on those pages.

12. Automated Decision-Making and Profiling

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR that produces legal effects or similarly significantly affects you takes place.

13. Your Rights

You have the right at any time to request free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as a right to rectification or erasure of this data. You may contact us at any time regarding this and any further questions on the subject of personal data.

14. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent supervisory authority in North Rhine-Westphalia is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)
Kavalleriestraße 2–4
40213 Düsseldorf
https://www.ldi.nrw.de

15. Changes to this Privacy Policy

We reserve the right to amend this privacy policy to ensure it complies with current legal requirements, or to reflect changes to our services in the privacy policy. The new privacy policy will then apply to your next visit. If your consent is required, or if the privacy policy changes materially, we will ask for your consent again.

Last updated: May 2026