Privacy policy.

1. Data controller

BRUHN MEDIA
Owner:
Christopher Bruhn
Falkenweg 17
21781 Cadenberge
Germany

2. Hosting, server logs and IONOS WebAnalytics

Our website is hosted with IONOS Webhosting Premium by 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Technical access data, such as access time, requested resources, browser, operating system, referrer and IP or anonymised IP information, may be processed to operate and secure the website (Art. 6(1)(f) GDPR). IONOS generally states a retention period of eight weeks for web-hosting visitor data; other technical services may have different retention periods. Connections use HTTPS/TLS encryption.

IONOS WebAnalytics may analyse hosting access data for statistical purposes. According to IONOS, this is cookie-free and uses anonymised IP information. It is separate from Google Analytics.

3. Content delivery network (IONOS / Cloudflare)

We use IONOS CDN Basic for www.bruhn-media.de to deliver website content efficiently and reliably. This service uses infrastructure operated by Cloudflare, Inc., USA. IP addresses, technical connection data and requested content may be processed during delivery. The legal basis is our legitimate interest in secure and reliable website delivery (Art. 6(1)(f) GDPR).

IONOS lists Cloudflare as a subprocessor for CDN services and refers to EU standard contractual clauses for potential international transfers. The specific CDN connection-data retention period has not yet been verified and must not be confused with the hosting-log retention period.

4. Contact, forms and email hosting

When you contact us by email, contact form or project configurator, we process the information you provide to handle your enquiry. Art. 6(1)(b) GDPR applies to contractual or pre-contractual matters; otherwise Art. 6(1)(f) GDPR applies. Forms transmit enquiries to our server and forward them by email; no automatic order is placed. We use IONOS Mail Basic 5 for business email. Data is deleted once no longer needed, subject to legal retention obligations and other lawful reasons.

5. Cookies, local settings and analytics

Our website may store language and privacy preferences in your browser’s localStorage. You can remove these using your browser settings. Google Analytics is not active in the current website code because no valid measurement ID has been configured. IONOS WebAnalytics is a separate hosting service. If we introduce technologies requiring consent, we will provide information and obtain consent before activating them.

6. Website security: SiteLock

We use IONOS Site Scan + Repair (SiteLock) to check our website for malware and security vulnerabilities. The official SiteLock security badge is embedded in the footer. To display it, your browser retrieves an image from shield.sitelock.com. Connection data, including your IP address, may therefore be transmitted to SiteLock as soon as you visit our website. Clicking the badge opens the external SiteLock verification page. Security scans serve our legitimate interest in website security (Art. 6(1)(f) GDPR). The legal basis for automatically loading the external badge image, including any consent requirements, international transfers and retention periods, requires separate verification.

7. Recipients and data processing agreements

We have entered into a data processing agreement with IONOS under Art. 28 GDPR, concluded on 9 October 2026. IONOS identifies Cloudflare as a subprocessor for CDN services and refers to EU standard contractual clauses for potential transfers to the USA. Applicable safeguards should be checked against the current IONOS documentation.

The retention of connection data processed by the CDN depends on the purposes of processing and the deletion policies of the providers involved. We have not verified one specific retention period for all CDN data and do not equate it with the eight-week retention period for IONOS web-hosting visitor data.

8. Retention periods

We retain personal data only for as long as necessary or required by law. IONOS generally states eight weeks for web-hosting visitor data. CDN, SiteLock and email retention periods may differ.

9. Your rights

Subject to the GDPR, you have rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), notification (Art. 19), portability (Art. 20) and objection (Art. 21). You may withdraw consent with future effect under Art. 7(3) GDPR and lodge a complaint with a supervisory authority (Art. 77). You may object to direct marketing at any time.

10. Updates

We update this notice when our services or data processing change. The subscribed IONOS AI Search Manager has not yet been configured and is not currently described as an active website service.