1. Controller
geisten Holding UG (haftungsbeschränkt)
Wilhelm-Haas-Str. 1
41564 Kaarst
Germany
Email: g.schlegel@geisten.net
2. Purpose and audience
This website provides information about geisten, supports business enquiries and enables communication with interested parties, customers and partners. The offer is directed exclusively at businesses, not consumers. The website does not provide user accounts, ordering or payment processes.
3. Hosting
This website is hosted by OpenBSD Amsterdam. According to publicly available information, the service is operated by High5! B.V., Amsterdam, the Netherlands. Technical data required to operate and deliver the website is processed as part of hosting.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient provision of this online service.
4. Server log files
When these pages are accessed, the server automatically collects and stores information transmitted by the browser in log files. This may include:
- IP address
- date and time of access
- requested URL and transferred data volume
- referrer URL
- browser and operating system information
The legal basis is Article 6(1)(f) GDPR for operation, security and error analysis. The recipient is the hosting provider. Data is retained only as long as required for secure operation, error analysis and misuse detection.
5. Cookies, tracking and external content
This website sets no cookies and stores nothing on your device. It uses no analytics or tracking and loads no content from third parties: fonts, images and scripts are served from this server. Links to other websites, such as GitHub, only transfer data to those sites when you follow them.
6. Email communication
When you contact us by email, we process the information you provide in order to handle the enquiry. The legal basis is Article 6(1)(f) GDPR or, where the enquiry relates to a pre-contractual relationship, Article 6(1)(b) GDPR.
Gmail is used for email communication. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Email content and metadata may also be processed by Google-affiliated companies, including through access from third countries such as the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework; transfers to the United States are based on the European Commission's adequacy decision of 10 July 2023 (Article 45 GDPR) and, in addition, on the EU Standard Contractual Clauses (Article 46(2)(c) GDPR).
Recipients of data submitted by email are us and service providers involved in providing email. Data is retained only for as long as necessary to handle the enquiry, initiate or perform a business relationship, or meet statutory retention obligations. Providing this information is voluntary; without it, we may be unable to process an enquiry fully.
7. Recipients and international transfers
Where necessary for website operation or communication, the following categories of recipients may access personal data:
- hosting providers for the technical delivery of the website
- email providers for processing and delivering messages
Hosting takes place within the European Union. When Gmail is used, processing outside the EU or EEA, especially in the United States, cannot be excluded.
8. Your rights
Subject to the legal requirements, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20).
Right to object (Article 21 GDPR): where we process your data on the basis of Article 6(1)(f) GDPR, you may object at any time, on grounds relating to your particular situation. We will then stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An email to the address above is sufficient.
You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
9. Privacy questions
For privacy-related questions, contact g.schlegel@geisten.net. We are not required to appoint a data protection officer.
10. No automated decision-making
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
Last updated: October 2026.