Legal
Privacy
This is a translation for your convenience. The German version is legally binding.
No cookies, no audience measurement, nothing from third-party servers. Whatever is processed nonetheless is set out here in full. Last updated: October 2026.
The key points first
This website sets no cookies. It embeds nothing from third-party servers — no fonts, no maps, no videos from video services, no icons, no advertising. There is no audience measurement and no tracking: neither with nor without cookies, neither with our own nor with third-party tools. Everything your browser loads comes from the address shown in the address bar.
We process personal data in only three places: in the server log data, without which no page can be delivered; when you write to us of your own accord; and if you run a business to which we have sent a letter with a preview — see the dedicated section further below.
Controller
meinebetriebsseite.de, Lisa van Pieterson
Wittorfer Straße 17, 27386 Kirchwalsede, Germany
Email: [email protected]
There is no legal requirement to appoint a data protection officer: fewer than 20 people are permanently engaged in the automated processing of personal data (§ 38 German Federal Data Protection Act, BDSG).
Hosting
This website is operated by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). On our behalf, the provider processes the technically necessary server log data and delivers the site via its network; this involves a transfer to the USA. The basis is a data processing agreement under Art. 28 GDPR and the EU Standard Contractual Clauses under Art. 46 GDPR.
Server log data
When the site is accessed, the IP address, date and time, the file requested, the amount of data transferred, the previously visited page (referrer) and browser and operating system details are processed automatically. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure, stable and abuse-free operation of the site. This data is not combined with other sources. It is stored for no longer than 14 days.
Encryption
The site is delivered exclusively over an encrypted connection (HTTPS/TLS). You can tell by the padlock in your browser's address bar.
Contact, order and call-back forms
What you enter in a form is processed solely to handle your enquiry or order. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, insofar as you have also given consent, Art. 6(1)(a) GDPR. You can withdraw consent at any time with effect for the future; the lawfulness of processing carried out until then remains unaffected.
The only mandatory information is the contact detail at which we can reply to you. Everything else is voluntary and only serves to make our reply useful.
Your browser does not talk to any third-party service in the process: the form goes to our own function at the same address shown in the address bar. From there, Brevo GmbH, Köpenicker Straße 126, 10179 Berlin — a subsidiary of Sendinblue SAS, 17 rue de Salneuve, 75017 Paris — delivers the message to our mailbox. Processing takes place in the European Union; no transfer to a third country is involved. The basis is a data processing agreement under Art. 28 GDPR. The delivery service itself retains the transmissions for no longer than 30 days.
If delivery has not been set up, nothing at all is transmitted: the send button then opens your own email program with the message already written, and you decide yourself whether to send it.
We delete your details from our mailbox as soon as the matter is closed, unless commercial or tax retention periods (§ 257 German Commercial Code, HGB; § 147 German Fiscal Code, AO: six, eight or ten years) require otherwise.
Email mailbox
Our mailbox [email protected] is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. If you write to us — by email or through a form on this site — the message is stored there. The basis is a data processing agreement under Art. 28 GDPR; where data leaves the European Economic Area, the EU Standard Contractual Clauses under Art. 46 GDPR apply.
Letters to businesses and previews (Art. 14 GDPR)
Who this concerns: owners of businesses in our region to whom we show a non-binding preview of a website by letter. We did not collect this information from you — which is why we tell you here, on our own initiative, where it comes from.
What information, from where: company name, name of the owner, address, phone, email address, opening hours, services offered and a brief assessment of the existing website. Sources are exclusively publicly accessible ones: the business's own website, public trade and company directories and the Google Business Profile. We do not take over the business's logo, photos or texts.
For what purpose and on what basis: to make you a specific website offer once by letter — and at most with one reminder letter. The legal basis is our legitimate interest in direct marketing to traders (Art. 6(1)(f) GDPR, Recital 47). We do not phone and do not send marketing emails.
Where the preview is hosted: at an address with a random code, without the company name, blocked for search engines, delivered via the host named above. It carries a notice at the top and bottom stating that it is not the business's official website. The only recipient of the letters is the business; delivery is by post or by us in person.
How long: the preview is available for 30 days and is then switched off and deleted. If no order results, we delete the information about your business no later than three months after the last letter. Businesses we have noted but not written to are deleted no later than twelve months after being recorded.
Right to object to marketing (Art. 21(2) GDPR): you can object to the use of your information for marketing at any time without giving reasons — via the “Not interested” button on the preview, by email to [email protected] or by letter to the address above. We then delete the preview by the next working day at the latest and will not write to you again. So that this continues to apply, we keep only the company name, town and date of the objection on a suppression list (Art. 6(1)(c) and (f) GDPR).
Spam protection without sharing data
Our forms contain a hidden field that is invisible to you and only filled in by automated programs. If it is filled in, we discard the message. No external bot protection is used, in particular no reCAPTCHA — so no associated data sharing takes place either.
Storage in the browser (§ 25 German TDDDG)
This site can be adjusted: you can switch motion effects and the water surface on and off and adjust them. So that your setting isn't lost on the next click, it is stored in your browser — not with us. This information never leaves your device, does not allow recognition and is not read by us. This is storage access that is strictly necessary to provide the function you have expressly requested (§ 25(2) no. 2 TDDDG). The complete list:
| Key | Town/city | What it contains | How long |
|---|---|---|---|
mbs-effekte | localStorage | only on the effect sample pages: which of the three computed layers (swarm, globe, physics) you have switched on | until you clear your browser storage |
mbs-motion | localStorage | only on the effect sample pages: which motion graphics you have switched on and how you have set their sliders | until you clear your browser storage |
mbs-fx-benutzt | localStorage | only on the effect sample pages: that you have opened the effects panel before — after that it stops drawing attention to itself | until you clear your browser storage |
mbs-tropfen | localStorage | how you have set the water surface | until you clear your browser storage |
mbs-tropfen-hinweis | localStorage | that you have seen the note about the water surface | until you clear your browser storage |
mbs-hinweis | sessionStorage | that you have already been shown the note about the two switches | until you close the tab |
mbs-ladefilm | sessionStorage | that you have already seen the short intro on the home page | until you close the tab |
You can delete these entries yourself at any time — in any browser via the site data settings. The site then works exactly as before; it just starts again with the default settings.
No audience measurement
We use no analytics tools, no tracking pixels, no heatmaps, no A/B tests and no advertising networks. We don't know how long you spent on a page or where you went afterwards. All we see is our host's log data described above.
Recipients and automated decisions
Apart from the service providers named above — host, form delivery and email mailbox — we do not pass on any personal data. Data may only be passed on beyond this where we are legally obliged to do so. There is no automated decision-making, including profiling, under Art. 22 GDPR.
Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). An informal message to [email protected] is enough for any of these.
Right to object: where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object on grounds relating to your particular situation.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany. You may also contact the supervisory authority in the country where you live.
Changes
Version of this policy: October 2026. We update it as soon as the services we use change — not later.