Important Announcement
Top bars don’t need to be tiny you know. Check out this one.

Privacy Policy

Status of the Privacy Policy: 19.02.2021

Privacy Statement - Data protection

In the following I would like to inform you about the data protection on my website as well as about the type, scope and purpose of the personal data that are collected and processed. I would also like to inform you about your rights to which you are entitled. Data protection is very important to me.

Responsible for privacy protection/ processing entity is

Tobias Forst
Eduard-Hamm-Str. 12
94036 Passau

Phone +49 176 81321273

Accessing the website - processing of personal data and the type and purpose of use

When you call up my website you transmit (due to a technical necessity) data to our web server via your Internet browser. The following data are processed in the server log files during an ongoing connection for the communication between your internet browser and our web server:

  • Site, from where the file was requested - Referrer URL
  • the name of the requested file
  • the date and time of the request
  • a description of the type of web browser used / browser version and operating system
  • IP address of the requesting computer
  • access status (file transferred, file not found, etc.)
  • Transmitted data volume

For technical reasons (access to the website), this data is temporarily stored. It is not possible for me to draw any conclusions about individual persons based on this data. The IP addresses will be deleted or anonymized after 7 days at the latest.

The data is only evaluated for internal statistical purposes and does not allow me to draw any conclusions about you personally. A comparison with other databases does not take place.

The data mentioned are processed for the following purposes:

  • ensuring a proper and smooth connection to the website,
  • ensuring comfortable use of the website,
  • evaluation of system security and stability of the website
  • for other administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. The legitimate interest follows from the data collection purposes listed above. Under no circumstances do I use the data collected for the purpose of drawing conclusions about you personally. You can visit the website without providing any personal information.

Data processing through contact via email or phone

If you contact me by email or phone, your request, including all personal data resulting from it (e.g. name, request) will be stored and processed by me for the purpose of processing your request. The data will not be passed on without your consent. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing your data.

This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR, if your request is related to the fulfillment of a contract or is necessary for a pre-contract. In all other cases, processing is based on your consent (Art. 6 Para. 1 S 1 lit a GDPR) and / or on legitimate interests (Art. 6 Para 1 S 1 lit f GDPR).

The data you send to me via contact requests will be stored by me until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - especially statutory retention periods - remain unaffected.

Contact form

If you send me a message via my contact form, you can also use a pseudonym instead of your real name. Entering an email address is necessary to enable me to contact you by email. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing your data.

The data you enter in the contact form will only be used by me to answer the contact in the context of your inquiry via the contact form. I do not pass on the data you enter in the contact form to third parties or use this data for any purposes other than to answer your request. The data processing takes place either for the purpose of fulfilling a contract to which the data subject is party, or for the implementation of pre-contractual measures (Art 6 I S 1 lit b GDPR), or according to Art. 6 Para. 1 S. 1 lit. a GDPR on the basis of your voluntarily given consent and / or on my legitimate interests (Art. 6 Para. 1 lit. f GDPR), as I have a legitimate interest in effectively processing the inquiries sent to me.

Your data will be deleted after your request has been processed, provided that the deletion does not conflict with any statutory retention requirements.

E-Mail advertising and your right to object

If I have received your e-Mail address in connection with the sale of a product or service and you have not objected, I reserve the right, on the basis of § 7 III UWG, to regularly send you e-Mail offers for products similar to those already purchased by you. The legal basis arises from my legitimate interest in advertising to my customers and the processing of the data is permissible according to Art 6 I S1 lit f GDPR within the scope of a weighing of interests.

You can object to the use of your e-Mail address at any time by sending a message to me or via the corresponding link in the advertising e-Mail. After the legal basis for data processing for advertising e-mails no longer exists, your e-Mail address will be deleted, unless there are statutory retention requirements (e.g. tax or commercial retention requirements).

You have the right acc. Art. 21 GDPR to object to the processing of your personal data at any time for the future. The objection can in particular be made against processing for direct marketing purposes.

Social Network Links

On my website are no social plugins from Facebook or other social networks integrated. Therefore, no program code of a social network is active on our pages. The icons for Facebook, Instagram etc. on our website are only linked images.

Data protection notice for online presence on Facebook / Instagram

Facebook Ireland (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland – “Facebook”) and the site administrator (I) are responsible for processing the personal data for the products included in the Terms of Use on the site administrator’s Facebook account that are processed in connection with a visit to or interaction with a page (including its content).

Products included are all Facebook Products, Facebook Pages, and Page Insights. Facebook products include Facebook itself (including the Facebook mobile app and the browser in the app), Messenger, Instagram (including apps like Direct and Boomerang), Portal branded devices, Bonfire, Facebook Mentions, Facebook Shops, Spark AR Studio, Audience Network, NPE Team Apps and any other feature, app, technology, software product, product or service offered by Facebook, Inc. or Facebook Ireland Limited. In addition, the Facebook business tools are also among the Facebook products.

The scope of joint processing and the addition for responsible parties includes the collection of the personal data specified in the Terms of Use for Covered Products and their transmission to Facebook. The subsequent processing of data by Facebook is not part of the joint processing. Likewise, it is not part of the joint processing if personal data is processed exclusively by the site administrator - in this case he is solely responsible for the data processing.

According to Article 13 I lit. a and b GDPR you can access the information required in Facebook's data policy at . Further information on joint processing can be found in the respective terms of use for the specific products.

For the use of certain Facebook products (so-called "Facebook business tools") and the associated data processing, the additional agreement between us and Facebook as jointly responsible according to Art. 26 GDPR applies, which you can find at

The site administrator and Facebook have closed this addendum for data controllers to determine the respective responsibilities for the fulfillment of the obligations under GDPR with regard to joint processing (as set out in the Terms of Use for Covered Products).

Furthermore, we have agreed that between the parties Facebook is responsible for enabling the rights of data subjects in accordance with Articles 15-20 of the GDPR with regard to the personal data stored by Facebook after joint processing.

Data processing conditions on Facebook

I expressly point out that the use of certain Facebook products may involve the transmission of personal information to Facebook. Facebook Ireland Limited may also transmit EU data to Facebook Inc. in the USA for storage and further processing. By using Facebook products, the user agrees to Facebook's data processing conditions. You can find this at

You can find the Facebook EU data transfer supplement at

The Facebook data policy can be found at - the Instagram data policy can be found at  

Information about cookies and other storage technologies on Facebook can be found at

You can view Facebook's data security conditions at

You can find Facebook's terms of use for commercial use at

You can contact the data protection officer of Facebook at

More Information about Facebook Page Insights data

Facebook continues to provide the page operator with so-called page insights for the Facebook page. Page insights data are aggregated data that gives the site administrator information on how users interact with the Facebook page. The legal basis for data processing is Art. 6 Para. I S. 1 lit. f GDPR – the legitimate interest is an optimized presentation of the website and effective communication with users.

The data processing takes place on the basis of an agreement between the jointly responsible persons in accordance with Art. 26 GDPR, which you can view at

Further information on page insights data on Facebook can be found at  and at

Data processing when contact is made via Facebook products

I process personal data when you contact me e.g. via the contact form or via Messenger. These data are stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for the processing of the data is my legitimate interest in answering your request in accordance with Art. 6 Para. I S. 1 lit. f GDPR. Your data will be deleted after your request has been processed, provided that there are no statutory retention requirements.

Your rights

Facebook and I have agreed that Facebook is primarily responsible for providing you with information about the joint processing and for enabling you to exercise your rights under the GDPR. According to the GDPR, you have the right of information, correction, transferability and deletion of your data, as well as to object to the processing of your data and to restrict processing. You can find out more about these rights in your Facebook settings. For further information on your rights, see also under "Rights of the Data Subject" in this data protection declaration.

Facebook and I have agreed that the Irish Data Protection Commission will be the primary body responsible for overseeing the processing. You have the right to start a complaint with the Irish Data Protection Commission (see or with your local supervisory authority.

Right to object to advertising

You can object to the processing of your data for advertising purposes on Facebook at any time by changing your settings for advertisements in your Facebook user account at

Legal basis

I operate my Facebook / Instagram page for advertising purposes for our goods and services. The processing of personal data takes place on the basis of Art 6 I S 1 lit f GDPR.

Data transfer to payment service providers

In order to fulfill the contract with you, I can pass on your data to the company commissioned with the payment, insofar as this is necessary to pay for the services ordered. Depending on which payment service provider you select in the ordering process, I will pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by me, or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. a, b GDPR.


On my website payment via PayPal can be offered. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you choose to pay via PayPal, the payment details you have entered will be transmitted to PayPal.

The transfer of your data to PayPal takes place on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.

Further data protection information can be found in the PayPal data protection principles at

Google reCAPTCHA

For protection when submitting forms, I use the reCAPTCHA service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is used to differentiate whether the input is made by a natural person or improperly through machine and automated processing. Your IP address and any other data required by Google for the reCAPTCHA service will be sent to Google. Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. On behalf of the operator of this website, Google will use this information to evaluate your use of this service and to prevent spam. This represents a legitimate interest according to Art 6 I S 1. 1 lit f GDPR. The IP address transmitted by your browser as part of reCaptcha will not be merged with other data from Google.

You can view Google's data protection provisions at

Data Security

On my website I use the SSL-process (Secure Socket Layer) in connection with the respective highest level of encryption supported by your browser. You can recognise if an individual page of our website is transmitted in an encrypted fashion by the locked depiction of the key or lock symbol in the lower status bar of your browser.

Apart from that I apply appropriate technical and organisational security measures in order to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. My security measures are continuously improved according to technological developments.

Processing/ Disclosure of Data

A disclosure of your personal data towards third parties for purposes other than the ones mentioned above or below does not take place. I only pass on your data to third parties if:

  • You have given your explicit consent to it according to Art. 6 Par. 1 S. 1 lit a GDPR,
  • this is permitted by law and according to Art. 6 Par. 1 S. 1 lit. b GDPR necessary for the performance of a contract or for the performance of measures prior to entering into a contract with you,
  • in the case that according to Art. 6 Par. 1 S. 1 lit. c GDPR there is a legal obligation for me to do so,
  • if according to Art. 6 Par. 1 S. 1 lit. f GDPR processing is necessary for the purposes of the legitimate interests pursued by me or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Rights of the Data Subject

You have the right:

  • according to Art. 15 GDPR obtain information from me about the personal data on you I have processed. In particular you can request information about the purposes of processing, the categories of personal data concerned, the categories of recipients that your personal data was disclosed to or are being disclosed to, the planned period of storage of such data, the existence of the right to request from us the correction, the erasure, the restriction of processing of data or objection, the existence of the right to lodge a complaint, insofar as the data were not collected by me any available information as to their source, as well as to the existence of automated decision-making including profiling and if necessary, meaningful information about their particulars;
  • according to Art. 16 GDPR request the immediate correction of incorrect data or the completion of your personal data stored by me;
  • according to Art. 17 GDPR request the erasure of your personal data stored by me insofar as the processing thereof is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of the public interest or the establishment, exercise or defence of legal claims;
  • according to Art. 18 GDPR obtain the restriction of processing of your personal data in as far as the accuracy of the data is contested by you, their processing is unlawful, but the erasure thereof opposed by you, and I no longer need the data, but you need them for the establishment, exercise or defence of legal claims, or according to Art 21 GDPR you have objected to the processing of the data;  
  • according to Art. 20 GDPR to receive your personal data provided to me in a structured, commonly used and machine-readable format or to request their transmittal to another person responsible;
  • according to Art. 7 Abs. 3 GDPR withdraw their consent given to me at any time. This has the consequence that in the future I no longer have the right to process the data, once consented to;
  • according to Art. 77 GDPR to lodge a complaint with a supervisory authority. In general you can turn to the supervisory authority at the place of your habitual residence or workplace or our place of business. A list of data protection officers as well as their contact data can be found under the following link:

Right to Objection

You have the right to object to the processing of personal data pertaining to you taking place according to Article 6 Par. 1 lit e or f, due to reasons arising from your special situation. After objection by you I no longer process your personal data, except for the case in which I can prove compelling and legitimate reasons for the processing that outweigh your interests, rights or freedoms, or their processing serves the establishment, exercise or defence of legal claims.

If you want to make use of your right of objection an email to me suffices.

Changes to this Privacy Statement - Date

By developing my website and offers via the same further or due to changed legal or official requirements it can become necessary to make changes to this privacy statement in compliance with the applicable data protection regulations. The respective current privacy statement can at any time be called up by you on my website under Privacy Statement and printed out.

Dated: February 2021