PRIVACY POLICY
Last Updated: July 2026
Your privacy matters. This page explains what information we collect, why we collect it, and how your data is protected when you use Berlin Dossier.
Controller
Controller Responsible for Data Processing
This privacy policy explains what personal data is processed when you visit brosentmetoberlin.com, why it is processed, and what rights you have under the GDPR and German data protection laws.
Name: Oliver Simens
Address: Ahrenshooper Str. 78, 13051 Bezirk Lichtenberg, Germany
Email: brosentmetoberlin@gmail.com
Overview of Processing
When you use this website, personal data may be processed in the following situations. Depending on how you interact with the website, information may be collected automatically, after your consent, or when you actively contact us.
Server Log Files
Cookies
Contact Forms
Embedded Content
Legal bases
We process personal data only where a legal basis under Art. 6(1) GDPR applies:
Art. 6(1)(a) GDPR
our consent (analytics cookies, embedded content)
Art. 6(1)(b) GDPR
performance of a contract or pre-contractual steps (responding to your inquiry)
Art. 6(1)(f) GDPR
our legitimate interests (secure and error-free operation of the website)
Where cookies or similar technologies store or read information on your device, this additionally requires your consent under § 25(1) TDDDG, unless the storage is strictly necessary to provide the service you requested (§ 25(2) TDDDG).
Hosting and server log files
This website is hosted by Symbol Host.
When you access the website, the following data is automatically processed in server log files:
- IP address
- Date and time of the request
- Requested URL and referrer URL
- Browser type, operating system, and language settings
- HTTP status code and transferred data volume
This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable, and error-free operation of the website, including defense against attacks. Log files are deleted after 14 days unless a specific incident requires longer retention.
Google Analytics 4
Only with your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Analytics uses cookies and similar technologies to analyze how visitors use the website. The information generated (pages visited, duration of visit, device and browser information, approximate location at city level, and interaction events) is transmitted to Google servers and processed there. In Google Analytics 4, full IP addresses are not logged or stored; IP data is used only for approximate geolocation and then discarded.
Purposes: measuring reach, understanding which content is read, improving the website.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG — exclusively your consent, given via the consent banner. We have activated Google Consent Mode v2; no Analytics cookies are set and no measurement data is transmitted before consent.
Data transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework (DPF). Transfers to the USA are based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, we have concluded the EU Standard Contractual Clauses (Art. 46 GDPR) with Google as a fallback transfer mechanism, together with the Google Ads Data Processing Terms (Art. 28 GDPR).
Retention: user- and event-level data stored by Google Analytics is deleted after 14 months.
You can withdraw consent at any time via the cookie settings. You can additionally prevent collection by installing the Google browser add-on for deactivating Google Analytics:
https://tools.google.com/dlpage/gaoptout
Further information: Google's privacy policy at
https://policies.google.com/privacy
Google Search Console
We use Google Search Console to monitor the technical status and search performance of this website. Search Console provides us with aggregated data only (search queries, clicks, impressions). No personal data of website visitors is transmitted from this website to Search Console, and no cookies are set on your device for this purpose.
Fonts
The fonts used on this website are hosted locally on our own server. No connection to Google Fonts servers or any other third-party font service is established when the website loads.
Embedded third-party content (YouTube)
Where this website embeds YouTube videos, we use YouTube’s extended privacy mode (youtube-nocookie.com). In addition, embedded content loads only after you actively click on a placeholder and thereby consent (two-click solution). Only then is a connection to Google servers established and your IP address transmitted.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data transfers to the USA are safeguarded as described in Section 6. YouTube privacy policy: https://policies.google.com/privacy
Contact form and email contact
If you contact us via the contact form or by email, we process the data you provide (name, email address, message content) to handle your inquiry and any follow-up questions.
Legal basis: Art. 6(1)(b) GDPR where your inquiry relates to a contract or pre-contractual steps; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering inquiries directed at us.
Your data is deleted once the inquiry is fully handled, unless statutory retention obligations apply. Data is transmitted encrypted (TLS).
Social media links
This website contains plain links to our social media profiles. These are simple hyperlinks, not embedded plugins. No data is transmitted to the platforms when you load our pages. When you click a link, the respective platform's privacy policy applies.
Storage periods
Unless a specific retention period is stated in this policy, we store personal data only as long as necessary for the stated purpose. Statutory retention obligations (for example, under tax and commercial law: 6 or 8 years, § 147 AO, § 257 HGB) remain unaffected. After expiry, data is deleted routinely.
International data transfers
Where data is transferred to the USA (Google services, see above), the transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR) for DPF-certified recipients, and additionally on EU Standard Contractual Clauses (Art. 46 GDPR). Should the adequacy decision be invalidated or a recipient lose its certification, transfers will rely on the Standard Contractual Clauses together with supplementary measures, or the service will be discontinued. Any transfer connected to website hosting is described in Section 4.
Your rights
You have the following rights regarding your personal data: Right of access (Art. 15 GDPR) Right to rectification (Art. 16 GDPR) Right to erasure (Art. 17 GDPR) Right to restriction of processing (Art. 18 GDPR) Right to data portability (Art. 20 GDPR) Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR) To exercise these rights, contact us at the address in Section 1. We respond within one month (Art. 12(3) GDPR). Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(f) GDPR (legitimate interests), you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims. Where personal data is processed for direct marketing, you may object at any time without stating reasons.
Obligation to provide data
You are not legally or contractually required to provide personal data on this website. Without certain data, however, individual functions may be unavailable (for example, we cannot answer a contact inquiry without an email address).
Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Data security
This website uses TLS encryption (HTTPS) for all data transmission. We apply appropriate technical and organizational measures (Art. 32 GDPR) to protect data against loss, misuse, and unauthorized access.