1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:
Frank Hoppmann
Diploma Designer
Hohenzollernring 17
48145 Münster
Germany
Phone: +49 (0) 162 4452191
Email: mail@frankhoppmann.com
2. General Information on Data Processing
We process personal data only to the extent necessary to provide this website, respond to enquiries, process orders and contracts, or where processing is based on your consent.
Personal data means any information relating to an identified or identifiable natural person.
Processing is carried out in particular on the basis of Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligations) and Art. 6(1)(f) GDPR (legitimate interests).
3. Hosting
This website is hosted by:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
When you access this website, the hosting provider processes technically necessary connection and access data. This may include, in particular, your IP address, the date and time of access, the page or file accessed, access status, amount of data transferred, referrer URL, browser used, operating system, language and browser software version.
Processing is carried out to ensure the secure, stable and technically error-free provision of the website on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and reliable website.
Server log files are generally deleted by the hosting provider after no more than seven days. Longer storage may be necessary in individual cases, in particular for the investigation of attacks or other security-related incidents.
Where required, a data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.
4. SSL / TLS Encryption
This website uses SSL or TLS encryption. This ensures that data you transmit to us is transferred in encrypted form.
5. Contacting Us
If you contact us by email, telephone or via the contact form, we process the data you provide in order to respond to your enquiry. This may include, in particular, your name, email address, telephone number and the content of your message.
For general enquiries, processing is based on our legitimate interest in responding to enquiries pursuant to Art. 6(1)(f) GDPR. If your enquiry relates to the conclusion or performance of a contract, processing is based on Art. 6(1)(b) GDPR.
The data will be deleted once your enquiry has been fully processed and there are no statutory retention obligations or other legitimate reasons for further storage.
6. Contact Form
We use Contact Form 7 for the contact form on this website. The data you enter into the form is transmitted to us and processed in order to respond to your enquiry. Simply using the plugin does not result in the form data you enter being transmitted to the developer of Contact Form 7.
Processing is based on Art. 6(1)(b) GDPR if your enquiry relates to a contract or potential commission. For other enquiries, processing is based on Art. 6(1)(f) GDPR.
7. Newsletter
You can subscribe to an email newsletter on this website. We use “The Newsletter Plugin” within our WordPress installation to manage newsletter subscriptions.
The subscriber data you enter is stored in the database of our WordPress installation on our web server. Simply using the plugin does not result in subscriber data being automatically transmitted to the developer of the newsletter plugin.
When you subscribe to the newsletter, the following data may in particular be processed: – email address – date and time of registration – subscription status – IP address – record of consent – where applicable, assignment to specific newsletter lists
If the relevant statistical functions are enabled, information regarding delivery and opening of newsletters as well as clicks on links contained in them may also be processed.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
Subscription takes place using a double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription. This is intended in particular to provide evidence that the registration was actually made by the owner of the email address provided.
You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link contained in each newsletter. Data required to demonstrate that consent was properly obtained may continue to be stored for the duration of applicable statutory evidence and limitation periods.
8. Online Shop and WooCommerce
This website uses WooCommerce to provide the online shop.
When you place an order, we process the data required to perform the contract. This may include, in particular, your name, billing and shipping address, email address, telephone number, products ordered, order value, payment method, shipping method, and order and payment status.
Processing is carried out for the purpose of initiating and performing the purchase contract pursuant to Art. 6(1)(b) GDPR. Where data must be retained due to tax or commercial law requirements, further processing is based on Art. 6(1)(c) GDPR.
9. Customer Account
If the option to create a customer account is offered, the data you provide for this purpose is processed to manage your customer account and facilitate future orders. The legal basis is Art. 6(1)(b) GDPR.
You may request deletion of your customer account unless statutory retention obligations require continued storage. Data relating to completed orders may continue to be stored due to statutory retention requirements.
10. Payment Processing
For the purpose of processing an order, the data required for payment is transmitted to the payment service provider selected by you. This may include, in particular, your name, billing address, email address, order value, currency and transaction information. Processing is carried out for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.
PayPal
If you select PayPal as your payment method, the data required for payment processing is transmitted to: PayPal (Europe) S.à r.l. et Cie, S.C.A. 22–24 Boulevard Royal L-2449 Luxembourg
PayPal processes the data for the purpose of carrying out the payment and, where applicable, fraud prevention, risk assessment and compliance with legal obligations. Further information on the processing of personal data can be found in PayPal’s privacy policy.
Stripe
If you select a payment method processed via Stripe, the data required for payment processing is transmitted to companies of the Stripe group. Within the European Economic Area, the relevant services are provided in particular by: Stripe Payments Europe, Limited 1 Grand Canal Street Lower Grand Canal Dock Dublin Ireland
Stripe processes the data for the purpose of payment processing and, where applicable, fraud prevention, risk assessment and compliance with legal obligations. Further information on the processing of personal data can be found in Stripe’s privacy policy.
11. Shipping of Orders
For the purpose of delivering your order, the data required for shipping is transmitted to the shipping company commissioned with delivery. This includes in particular your name and delivery address and, where necessary and legally permissible, additional contact details. The legal basis is Art. 6(1)(b) GDPR.
12. Multilingual Website Using WPML
This website uses WPML to provide different language versions. WPML may store technically necessary information or cookies in order to remember the language you have selected and provide the appropriate language version of the website.
Where access to information stored on your device is required for this purpose, such access is based on Section 25(2) TDDDG, insofar as it is strictly necessary to provide the service expressly requested by you.
13. Cookies and Similar Technologies
Our website uses cookies and similar technologies. Some of these are technically necessary to provide the website and functions such as the shopping cart, checkout, language settings or security features.
Where the storage of information on your device or access to information already stored on your device is strictly necessary to provide a digital service expressly requested by you, this is carried out on the basis of Section 25(2) TDDDG.
Non-essential cookies or similar technologies are only used with your prior consent. In such cases, the storage of or access to information on your device is based on Section 25(1) TDDDG, and the subsequent processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw or change your consent at any time with effect for the future via the cookie settings on this website.
14. Google Analytics
This website uses Google Analytics 4, a web analytics service provided by: Google Ireland Limited Gordon House Barrow Street Dublin 4 Ireland (“Google”)
Google Analytics allows us to statistically analyse the use of our website and improve our services. The data processed may include, in particular, information about pages visited, interactions with the website, approximate location, technical information about the device used, browser and operating system, referrer information and pseudonymous identifiers.
Google Analytics uses cookies or similar technologies for this purpose. These may include cookies such as “_ga” and “ga”, which may be used to recognise a browser or device and statistically attribute usage activity.
Google Analytics is only activated on this website after you have given your prior consent. The storage of or access to information on your device is based on Section 25(1) TDDDG. The processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw or change your consent at any time with effect for the future via the cookie settings on this website.
According to Google, IP addresses are not logged or stored in Google Analytics 4. IP addresses are used during data collection to derive approximate location information and are subsequently discarded.
Information processed by Google Analytics may also be processed on servers outside the European Economic Area, in particular in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. According to Google, further applicable transfer mechanisms, in particular standard contractual clauses, are also used where required.
We determine the retention period for user and event data in our Google Analytics account. For standard Google Analytics 4 properties, Google provides retention periods of two or 14 months. Aggregated reports may remain available independently of these retention periods.
Further information on data protection at Google is available at:
https://policies.google.com/privacy?hl=en
Further information on Google Analytics is available at:
https://support.google.com/analytics/
15. External Links and Social Networks
This website may contain links to external services and social networks, for example Instagram, Facebook or Behance. In the case of simple links, no connection to the respective external provider is established merely by displaying the link.
Only when you click such a link do you leave our website and your browser establishes a connection to the respective provider. The respective provider is responsible for the subsequent processing of personal data on its website.
16. Recipients of Personal Data
Personal data is only disclosed where this is necessary for the performance of a contract, where there is a legal obligation, where we have a legitimate interest in disclosure, or where you have given your consent.
Recipients may in particular include: – hosting and IT service providers – payment service providers – shipping and logistics companies – tax advisers and accounting service providers – public authorities where disclosure is required by law
17. Storage Period
We generally store personal data only for as long as it is required for the relevant purpose of processing. Where statutory retention obligations apply, the relevant data will be stored for the duration of these obligations.
Once the purpose of processing no longer applies or statutory retention periods have expired, the data will be deleted unless another legal basis permits further processing.
18. Your Rights
Subject to the applicable legal requirements, you have in particular the following rights: right of access pursuant to Art. 15 GDPR right to rectification pursuant to Art. 16 GDPR right to erasure pursuant to Art. 17 GDPR right to restriction of processing pursuant to Art. 18 GDPR right to data portability pursuant to Art. 20 GDPR right to object pursuant to Art. 21 GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future pursuant to Art. 7(3) GDPR. The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.
19. Right to Object
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to processing for such purposes at any time.
20. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. For the controller based in North Rhine-Westphalia, the competent authority is in particular:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen – LDI NRW)
21. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy if the services used, the technical configuration of the website or the applicable legal requirements change.
Last updated: August 2026