Legal
Privacy
This page explains the data processed when you visit taschenbecher.com or contact us.
Updated: 3 October 2026
1. Controller
The controller is Andreas Heß und Eren Karaman GbR, Robert-Mayer-Str. 62, 70191 Stuttgart, Germany, represented by Andreas Heß and Eren Karaman. Send privacy enquiries to andi@taschenbecher.com or eren@taschenbecher.com. Eren’s additional address is in the legal notice.
2. Website and server logs
Accessing the website involves processing necessary connection data: IP address, date and time, requested page or file, HTTP status, volume transferred and, where supplied, browser identification and referring page. This serves delivery, troubleshooting and website security. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable and secure operation.
3. Hosting and technical operation
The website runs on a server at STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Digital Market Services GmbH, Robert-Mayer-Straße 62, 70191 Stuttgart, provides technical administration of the existing server. These parties may have technical access to connection data as part of that operation. The partnership named above remains the operator and data controller of the taschenbecher website.
4. Log retention
Server logs rotate daily. The configuration retains up to 14 daily archives alongside the current log. Where a specific security incident occurs, relevant extracts may be retained longer as necessary for investigation and legal claims.
5. Analytics – only with your consent
If you select “Allow analytics”, we use Google Analytics 4 from Google Ireland Limited, Ireland. We measure page views and sessions to improve the website. Data includes pseudonymous cookie identifiers, page path and title, timestamps, browser and device information, and approximate location. Your IP address is technically processed during transmission; Google states that GA4 does not log or store it. We send page addresses without query parameters or fragments, and only the origin of the referring page. Google Signals and advertising personalisation are disabled for this integration. No Google Analytics script loads before consent. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG. With your consent, we also record which artwork views you open, which material you select and which contact route (club, event, test or art) you click. We send only fixed categories and artwork identifiers, not names, email addresses or message contents. A contact click does not confirm that a message was sent.
5.1 Retention and withdrawal
We store your choice and its timestamp in local browser storage (taschenbecher.analytics.v2) for 180 days so we can respect it (section 25(2)(2) TDDDG; Article 6(1)(f) GDPR, our interest in applying your privacy choice). Analytics cookies with the tb_ga prefix have a configured lifetime of no more than 180 days. The Analytics property retains event data for 2 months and user data for 14 months; new activity restarts the user-data period. Aggregated reports may be retained longer. You can withdraw consent for future processing at any time by declining in “Cookie settings” in the footer. We then stop measurement and remove this website’s Analytics cookies. Withdrawal does not affect the lawfulness of prior processing or automatically delete data already sent to Google. For erasure requests, contact us at either address above.
5.2 Recipients and other content
Data may also be processed by Google LLC in the US. Google identifies the EU-US Data Privacy Framework and standard contractual clauses as transfer safeguards. The links below explain these safeguards and Google’s processing. Digital Market Services GmbH technically administers measurement within the existing Analytics account. Our own images and fonts still load from our server. Language switching sets no cookies. There are no embedded social-media feeds, user accounts or contact forms.
6. Email contact
When you email us, we process your email address, supplied contact details, message and any attachments to handle your enquiry. Article 6(1)(b) GDPR applies to steps towards a contract; Article 6(1)(f) applies to other enquiries, based on our interest in responding. Mailboxes are hosted by STRATO. Providing information is voluntary, but we may be unable to reply without the necessary contact details. We delete correspondence once the matter is resolved unless statutory retention or necessary preservation of evidence requires otherwise. Where such duties apply, use is restricted to that purpose.
7. External links and pilot feedback
Links to clubs, artists and suppliers lead to independent websites. Their data processing applies when you open them. This notice covers our concept website. Before any organised collection of photos or usage feedback during a pilot, participants will receive separate information about purpose, scope and retention. Visiting this website does not enrol anyone.
8. Your rights
Subject to the statutory conditions, you can request access, rectification, erasure, restriction and portability (Articles 15–20 GDPR). You can withdraw any consent at any time with future effect. This website carries out no automated decisions with legal or similarly significant effects.
9. Objection
Where processing is based on legitimate interests under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21 GDPR). Write to either contact address above.
10. Complaints and contact
You may complain to a data protection supervisory authority, particularly in the EU member state where you live, work or believe an infringement occurred. In Baden-Württemberg this is the state Commissioner for Data Protection and Freedom of Information. Contact us with any questions using the details on this page.