Legal information
Privacy policy
Last updated: October 4, 2026
2. Hosting and server logs
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, STRATO processes connection and access data that are technically necessary. These may include the page or file requested, the date and time of access, the amount of data transferred, browser type and version, operating system, referrer URL, and hostname or IP address.
This processing supports the secure, stable, and efficient operation of the website and the detection of technical faults and attacks. The legal basis is Article 6(1)(f) of the GDPR. The legitimate interest is the secure and reliable operation of this website.
STRATO’s customer portal provides anonymized access logs for the previous six weeks and error logs for up to five days. For its own log and temporary data, STRATO specifies retention periods ranging from a few days to a maximum of 60 to 90 days, depending on security and operational needs. Data may be retained longer where necessary to investigate a security incident or comply with legal obligations.
As the hosting provider, STRATO processes data on behalf of the controller under Article 28 of the GDPR.
3. Cookies and local storage
This website does not use tracking services or local browser storage. The application form uses only the technically necessary session cookie described below.
Vehicle access permit application
Controller and purpose
Sven Ganter is the data controller; contact details are provided in Section 1. Application information and vehicle registration certificates are processed to issue vehicle access permits for Kuhwaldsiedlung and, where necessary, to review applications afterward.
Data and legal basis
The data processed include first and last name, address, email address, up to five vehicle license plate numbers, and uploaded images of the front of the vehicle registration certificates. Phone number and comments are optional. The other information is needed to review and process the application. Processing is necessary to carry out the public task entrusted to me as district representative, under Article 6(1)(e) of the GDPR in conjunction with Section 3(1) of the Hessian Data Protection and Freedom of Information Act (HDSIG).
Data are not used for advertising or added to a marketing list. Submitting the application does not itself grant an access permit. You may also apply by email without using this online form.
Transmission and recipients
Your information and files are sent over an encrypted connection to the form endpoint hosted by STRATO. Email delivery uses the Brevo service. Brevo receives the application content, including the vehicle registration certificates, and forwards it to my inbox at mail@svenganter.de. Your email address is used as the reply-to address. Recipients therefore include me and the service providers used for hosting, email delivery, and mailbox operation.
Retention period
Application data, including vehicle registration certificates, that I retain for issuing permits and any subsequent review are deleted at the end of the relevant calendar year. This includes the associated application emails, attachments, and information copied into processing lists.
The form does not create a permanent public file repository or an application database on the web server. Vehicle registration certificates are processed temporarily in the upload directory and deleted at the end of the request.
Technical delivery logs at Brevo are retained separately to monitor delivery and detect misuse. Retention for the sender used is set to one month; deletion may then take up to a further 24 hours. Brevo does not store email previews for new messages. These technical logs are separate from the application documents stored in my mailbox.
Session and abuse prevention
The technically necessary “permit_session” cookie is set for form submission. It contains a random identifier and is valid only for the form endpoint. The session token is valid for no more than one hour and cannot be reused after a submission attempt. No advertising or usage profile is created. The cookie is a session cookie; browsers may retain it when restoring a session. Storage is based on Section 25(2), point 2, of the German Telecommunications Digital Services Data Protection Act (TDDDG).
To limit automated attempts, the endpoint processes hourly counters and a cryptographically derived value of the IP address. The counter file contains no form content or IP addresses in plain text. The derivation changes hourly; previous counters are replaced on the next corresponding request in a new hour. This does not affect the technical server logs described in Section 2.
4. Contacting me
For permit applications, the specific information on purpose, processing, and deletion in the permit application section applies. If you contact me by email or phone about other matters, the information you provide is processed solely to handle your request. Depending on the nature of the inquiry, the legal basis is Article 6(1)(b) or Article 6(1)(f) of the GDPR. The legitimate interest is responding to your message.
The information is deleted once the inquiry has been fully handled and there are no statutory retention obligations or legitimate reasons for further storage.
5. External links and social networks
No social network content is embedded on this website. Visiting a page therefore does not transmit data to Instagram, Facebook, LinkedIn, or other linked providers. You access their services only when you click an external link. The respective provider is responsible for data processing on its service.
6. Recipients and transfers
STRATO receives technically necessary data as the hosting provider. Brevo, as the email delivery service, and the provider of my receiving mailbox are also used to transmit permit applications. Processing serves the technical provision and transmission of the application and its handling.
The service providers’ contractual data protection provisions and the subprocessors identified in them also apply to their processing. Further information about the email delivery service is available in Brevo’s privacy policy.
7. Your rights
Subject to the applicable legal requirements, you have the right to access, rectify, erase, and restrict the processing of your personal data. You also have a right to data portability where the legal requirements are met.
Objecting to processing
Where processing is based on Article 6(1)(e) or Article 6(1)(f) of the GDPR, you may object at any time on grounds relating to your particular situation. The processing will then stop unless compelling legitimate grounds overriding your interests can be demonstrated or the data are needed to establish, exercise, or defend legal claims.
To exercise your rights, simply send a message to datenschutz@svenganter.de.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority particularly responsible for this controller is:
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
datenschutz.hessen.de
9. Updates to this policy
This privacy policy will be updated if the website, hosting service, or legal requirements change.