Last updated: March 2026
Data Processing Statement
I. General information
This notice applies to the use of the website schongeil.de (hereinafter also referred to as “website”, “us” or “we”) under the URL https://www.schongeil.de
Privacy notices are required when personal data is processed. Personal data are in particular name, address, telephone number, e-mail address, social media identifier (profile name), bank details, date of birth, IP address, cookie identifiers and geotags.
Important abbreviations:
GDPR: General Data Protection Regulation (EU Regulation 2016/679)
TDDDG: German Telecommunications Digital Services Data Protection Act
EEA: European Economic Area
Art.: Article
Para.: Paragraph
lit.: Letter
II. Legal bases, purposes and duration of data processing
The following legal bases and the purposes based on them describe the data processing operations that actually take place on this website. The presentation of further legal bases, in particular Art. 6 para. 1 lit. c, lit. d and lit. e GDPR, has been deliberately omitted, as these are not relevant for the processing of personal data when using this website.
Under the last heading “Processing”, this data protection notice contains specific information on the processing operations, e.g. regarding the use of cookies or the integration of third-party content. These concrete purposes of data processing can be assigned to the legal bases listed here.
1. Data processing with consent, Art. 6 para. 1 lit. a GDPR
Data processing is always permissible if consent has been given.
• Contact by e-mail
• Comments on blog posts
• Integration of embedded content (third-party media content)
2. Data processing for the protection of legitimate interests, Art. 6 para. 1 lit. f GDPR
Data processing is also permitted if our legitimate interests or the interests of third parties must be safeguarded and these interests outweigh your interest in protecting your data. Your interest in protecting the data outweighs, for example, the impairment of your fundamental rights or freedoms.
• Short-term storage of the IP address for comments to prevent abuse
• Contact by e-mail, if necessary to protect legitimate interests
3. Duration of data processing
A deletion of the personal data takes place,
• if you assert your right to erasure against us and there is no legal basis for further processing
• if the data is no longer required to achieve the purpose for which it was collected
• for IP addresses from comments: after 14 days
• for cookies from third-party providers (embedded content): in accordance with the respective provider’s retention periods
III. Responsible entity
Contact details of the controller of personal data:
Oliver Eichhof
Eismeerweg 9E
22145 Hamburg
Germany
E-Mail: schongeil@mailbox.org
IV. Rights of the persons concerned
As a data subject, you can assert the following rights against the responsible body. For this purpose, please use the contact options indicated under the heading “Responsible entity”.
1. Right to confirmation and information, Art. 15 GDPR
You can request confirmation that personal data relating to you is being processed. If you receive confirmation, you can then request information about:
• the purposes of the data processing
• the categories of personal data
• the recipients or categories of recipients of the data
• the planned duration of the storage or criteria for determining the duration
• the existence of the rights of rectification or erasure
• the existence of the right to restrict processing
• the existence of the right to object
• the existence of the right to lodge a complaint with a supervisory authority
• any available information on the origin of the data, if the data has not been collected directly from you
• the existence of automated decision-making (incl. “profiling”) pursuant to Art. 22 (1) and (4) GDPR
• the existence of data transfer to a third country and / or to an international organisation
• in the case of data transfer to a third country and / or to an international organisation: appropriate safeguards pursuant to Art. 46 GDPR
2. Right to rectification and / or completion, Art. 16 GDPR
If the personal data concerning you is incorrect or incomplete, you may request that it be corrected and/or completed. The controller must then carry out the correction / completion without delay and will inform you of this.
3. Right to erasure (“right to be forgotten”), Art. 17 GDPR
In the following cases, you can request immediate deletion of the personal data concerning you:
• the data are no longer necessary for the purposes for which they were collected or otherwise processed
• consent given is revoked and there is no other legal basis for further processing
• objection pursuant to Art. 21 (1) GDPR without overriding legitimate grounds for processing
• objection pursuant to Art. 21 (2) GDPR
• the data have been processed unlawfully
• the data controller is obliged to erase the data on the basis of Union law or the law of one of the Member States
• there is a data collection and processing pursuant to Art. 8 (1) GDPR
The right to erasure is excluded if the processing of the data is necessary:
• to exercise the right to freedom of expression and information
• to comply with a legal obligation under Union law or a law of one of the Member States
• to perform a task in the public interest
• for the exercise of official authority, insofar as this has been delegated to the controller
• for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR
• if deletion of the data is likely to render impossible or seriously prejudice the achievement of the purposes of the following processing operations (Art. 89 (1) GDPR):
– archiving purposes in the public interest
– scientific or historical research purposes
– statistical purposes
• to assert, exercise or defend legal claims
If there is an obligation to delete the data:
The responsible body will inform you about the deletion of the data. If the personal data concerning you has been made public by the responsible body, all responsible bodies that process this data will also be informed of your request for deletion. This then also concerns the deletion of all links to the data and / or copies and / or replications of the data.
4. Right to restrict processing, Art. 18 GDPR
Under the following conditions, the processing of personal data concerning you must be temporarily or permanently restricted at your request:
• you have contested the accuracy of the data, Art. 16 GDPR, and this is verified by the controller
• the processing is unlawful, but you wish to have the processing restricted instead of erasing it
• the data is no longer necessary for the purposes of processing, but you need the data to assert, exercise or defend legal claims
• you have lodged an objection to processing, Art. 21 (1) GDPR, but it is not yet clear whether this is justified
After the restriction of processing has taken place, you will be informed of this by the controller, as well as before the restriction is lifted again. After the restriction, your data may continue to be stored, but only processed in the following cases:
• consent has been given
• legal claims are to be asserted, exercised or defended
• for the protection of another person
• there is an important public interest of the EU and / or a Member State
5. Right to information, Art. 19 GDPR
If you have exercised your rights under Articles 16 to 18 of the GDPR (rectification, erasure, restriction of processing), the controller is obliged to inform all recipients to whom the data have been disclosed, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
6. Right to data portability, Art. 20 GDPR
The controller must provide you with the personal data relating to you in a structured, commonly used and machine-readable format. The unimpeded transfer of this data to another controller must be ensured, provided that
• the processing is based on consent (Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR) and / or
• the processing is carried out with the aid of automated procedures
The freedoms and rights of other persons must not be affected. The right to data portability does not exist for data processing operations
• for the performance of a task in the public interest
• in the exercise of official authority, insofar as it has been delegated to the responsible body
You may request that the data be transferred directly to another responsible body, insofar as this is technically feasible.
7. Right of objection, Art. 21 GDPR
You may object at any time if the data processing
• is based on Art. 6 para. 1 lit. f GDPR or
• serves direct advertising purposes or
• is carried out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR
The same applies to corresponding profiling. The objection must be justified. It is sufficient if you state as a reason that you no longer wish the data to be processed. After the objection, the data will no longer be processed.
The controller may continue to process the data despite your objection if
• there are compelling legitimate grounds for the processing which override your interests, rights and freedoms; or
• the processing serves to assert, exercise or defend legal claims, or
• in the case of processing under Article 89(1) of the GDPR: processing is necessary for the performance of a task carried out in the public interest.
In connection with the use of information society services, you may also exercise your right to object by means of automated procedures using technical specifications.
8. Right of withdrawal, Art. 7 (3) GDPR
You can revoke the data protection consent in its entirety for the future at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected by this.
9. Automated decision in individual cases including profiling, Art. 22 GDPR
You have the right to withdraw from a decision based on automated processing if the decision produces legal effects vis-à-vis you or similarly significantly affects you. The same applies to profiling.
This right is not subject to limitations if the decision is based on special categories of personal data as defined in Article 9(1) of the GDPR, e.g. data concerning political opinions, religious or philosophical beliefs, genetic or biometric data and data concerning health or sex life or sexual orientation.
However, if you have consented to automated processing and neither Union law nor the law of a Member State prohibits such consent (Article 9(2)(a) GDPR) or if the processing is necessary for a substantial public interest (Article 9(2)(g) GDPR), your right may be excluded as described below, even if special categories of personal data are processed.
This right shall not exist if the decision based on automated processing is
• is necessary for the conclusion or performance of a contract between you and the controller, or
• is permissible based on legal provisions of the Union and/or one of the Member States and
• your rights, freedoms and legitimate interests are adequately protected by these legal provisions or
• is carried out with your express consent
In the above first and last case of an exclusion of your right described here, the controller will take reasonable steps to safeguard your other rights, freedoms and legitimate interests. This includes, in particular, the right to intervene in the decision by the controller, to express your point of view and to contest the decision.
10. Right to complain to a supervisory authority, Art. 77 GDPR
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. You will be informed by the supervisory authority to which the complaint has been lodged about the status and outcome of the complaint, including the possible remedies (esp. Art. 78 GDPR). The competent supervisory authority for us is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str 22
20459 Hamburg, Germany
Tel.: +49 40/42854-4040
E-Mail: mailbox@datenschutz.hamburg.de
Web: https://datenschutz-hamburg.de
V. Processing
The following processing operations (purposes of data processing) can be assigned to the legal bases under section II of this data protection notice. Any data transfer to third countries (states outside the EU / EEA) is shown in detail for each processing operation.
1. Web analytics
We do not use any web analytics that process personal data. Internally used access statistics are collected completely anonymously, without cookies, IP addresses or visitor profiles.
2. Contact
Our website provides an e-mail address through which you can contact us. Clicking on this address opens your default e-mail application. No data is collected on our server in this process. The processing of personal data (your e-mail address and the information you provide in the e-mail) takes place exclusively within the resulting e-mail correspondence.
3. Comments
If you use the comment function, you can enter a name and optionally your email address. Entering the email address is not obligatory. When you send the comment, your IP address will be saved. This is automatically deleted after 14 days. The purpose behind this: Should insults or abuse of any kind take place, this short-term collection is necessary in order to be able to act accordingly.
4. Server log files
We do not collect or process any information automatically transmitted by your browser in so-called server log files. The web space provided to us is configured by default not to store any log files.
5. Cookies and embedded content
This website only uses technically necessary cookies that are required for the operation of the site (legal basis: Section 25 (2) No. 2 TDDDG). These are:
• A language cookie (Polylang) that stores your chosen language version when you switch the language of the website.
• A consent cookie that stores your consent decision regarding embedded third-party content, so that you do not have to make this decision again on every page visit.
In addition, we offer various media content, so-called embedded content, via various integrations. This media content is only loaded with your consent (legal basis: Section 25 (1) TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR), which means that cookies from the respective providers can also be set. You can revoke or adjust your consent at any time: Cookie Settings
The providers from which content may be embedded are listed below. Where providers are based in the USA, data is transferred to the USA. Unless otherwise stated, these providers are certified under the EU-US Data Privacy Framework or Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR) are used as appropriate safeguards:
YouTube
Operator: YouTube LLC (Google), USA
Privacy Policy: https://policies.google.com/privacy?hl=en
Vimeo
Operator: Vimeo Inc., USA
Privacy Policy: https://vimeo.com/privacy
SoundCloud
Operator: SoundCloud Limited, Germany
Privacy Policy: https://soundcloud.com/pages/privacy
Bandcamp
Operator: Bandcamp Inc., USA
Privacy Policy: https://bandcamp.com/privacy
hearthis.at
Operator: Benedikt Groß, Germany
Privacy Policy: https://hearthis.at/datenschutz/
Instagram
Operator: Meta Platforms Ireland Ltd., Ireland
Privacy Policy: https://privacycenter.instagram.com/policy
Mixcloud
Operator: Mixcloud Limited, UK
Privacy Policy: https://www.mixcloud.com/privacy/