Legal

Privacy Policy

This Privacy Policy informs you, in accordance with Articles 12, 13 and 14 of the General Data Protection Regulation (GDPR), about how personal data is processed when you visit this website or contact us.

This website is intentionally kept technically simple. It consists of static HTML and CSS files. We currently do not use analytics or tracking services, advertising networks, social-media plugins, embedded videos, externally loaded fonts, contact forms or non-essential cookies.

1. Controller

The controller responsible for data processing on this website is:

Denis Sandmann
Karlstraße 9
49809 Lingen (Ems)
Germany

Phone: +49 591 97784931
Email: hello@guest-reality.com

2. Hosting

This website is hosted by ALL-INKL.COM - Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

When you access this website, the hosting provider processes technical data required to deliver the website to your device and to ensure secure and stable operation. The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and technically error-free provision of our website and in protecting it against attacks and misuse.

Where ALL-INKL processes personal data on our behalf, this is carried out under a data processing agreement pursuant to Art. 28 GDPR.

3. Server Log Files

Each time this website is accessed, technical information is automatically processed by the web server or hosting provider and stored in server log files. This may include, in particular:

• IP address of the requesting device,
• date and time of access,
• time difference between the requesting host and the web server,
• page accessed or file requested,
• HTTP request method and protocol used,
• access status or HTTP status code,
• amount of data transferred,
• referrer URL,
• browser type and browser version,
• operating system used,
• browser language and other technical browser information.

The purpose of this processing is to technically provide the website, ensure its functionality and stability, and detect and prevent attacks and abusive access. The data is not analysed for marketing purposes. We do not combine this data with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically error-free provision of the website and in protecting our IT systems.

According to our hosting provider, regular web server log files are deleted after no more than seven days. Longer storage may be necessary in individual cases, in particular where there are specific indications of an unlawful attack or misuse.

The recipient of this data is, in particular, our hosting provider ALL-INKL.COM as part of the technical provision of the website.

4. Cookies, Local Storage and Similar Technologies

In its current technical configuration, this website does not set its own cookies and does not use Local Storage, Session Storage or similar technologies to recognise visitors. No analytics, statistics, marketing or tracking cookies are used.

Since no technologies requiring consent are currently used, a cookie consent banner is not required for the current technical configuration of this website.

5. External Content and Third-Party Services

This website currently does not embed external fonts, maps, videos, social-media plugins, analytics tools or other content that would establish a connection to servers operated by external third parties simply by visiting the website.

Images and stylesheets are served locally from our own web hosting environment.

6. Contact by Email or Phone

If you contact us by email or phone, we process the data you provide, in particular your contact details, the content of your enquiry and any other information you voluntarily provide, for the purpose of handling your enquiry.

The email links used on this website are standard mailto links. Clicking such a link will generally open the email application configured on your device. No information is transmitted to us until you actually send the email.

If your enquiry relates to the initiation or performance of a contract, processing is based on Art. 6(1)(b) GDPR. In all other cases, processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in properly handling incoming enquiries. Where consent is requested in an individual case, Art. 6(1)(a) GDPR serves as the legal basis.

The data you provide will be deleted once the purpose for storing it no longer applies and there are no statutory retention obligations or other legal reasons requiring further storage. In the case of business correspondence, commercial and tax law retention obligations may apply.

Recipients may include, in addition to us, technical IT, hosting and email service providers where they are required for data processing on our behalf or for the technical transmission of communications.

7. SSL/TLS Encryption

This website uses SSL/TLS encryption. This protects data transmitted between your browser and our server against interception by third parties while in transit. You can generally recognise an encrypted connection by "https://" in your browser's address bar.

Please note that ordinary email communication may involve security risks independently of this website unless additional end-to-end encryption is used.

8. Retention Period

Unless a more specific retention period is stated in this Privacy Policy, we store personal data only for as long as necessary for the respective processing purpose. The data will subsequently be deleted unless statutory retention obligations, legitimate interests or other legal grounds require continued storage.

9. Recipients and International Data Transfers

Personal data is only disclosed where this is necessary for the provision of the website, the handling of an enquiry, the performance of a contract, compliance with legal obligations or on the basis of another legal permission.

As part of the operation of this static website, we do not intentionally transfer personal data to countries outside the European Union or the European Economic Area.

10. Requirement to Provide Data

The technical connection data transmitted when accessing the website is required in order to deliver the website to your device. Without this technical processing, the website cannot be accessed.

Contacting us by email or phone is voluntary. Without the information required to process your enquiry, we may not be able to respond to your request or initiate or perform a contract.

11. Automated Decision-Making and Profiling

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place in connection with this website.

12. Your Rights

Subject to the applicable legal requirements, you have, in particular, the following rights:

• the right of access to your personal data pursuant to Art. 15 GDPR,
• the right to rectification of inaccurate data pursuant to Art. 16 GDPR,
• the right to erasure pursuant to Art. 17 GDPR,
• the right to restriction of processing pursuant to Art. 18 GDPR,
• the right to data portability pursuant to Art. 20 GDPR, where the legal requirements are met,
• the right to object to processing based on Art. 6(1)(e) or (f) GDPR pursuant to Art. 21 GDPR,
• the right to withdraw consent previously given with effect for the future pursuant to Art. 7(3) GDPR.

The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected by the withdrawal.

13. Right to Object Pursuant to Art. 21 GDPR

Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

14. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for our business location is, in particular:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany
Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de

You may also contact any other supervisory authority competent under Art. 77 GDPR, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

15. Objection to Unsolicited Advertising Emails

We object to the use of contact details published as part of our legal notice obligations for the purpose of sending unsolicited advertising and informational materials. We reserve the right to take legal action in the event of unsolicited promotional communications, in particular spam emails.

16. Changes to this Privacy Policy

We may update this Privacy Policy if the technical configuration of the website or applicable legal requirements change. The current version of this Privacy Policy is dated September 2026.