Data protection

1. Controller

Thomas Keppler
Auf der Reute 33/1
72770 Reutlingen, Germany
E-mail: tk@thomaskeppler.com

2. General Information on Data Processing

We process personal data of users only to the extent necessary to provide a functional website and to deliver our content and services.
Processing is carried out in accordance with the applicable data protection regulations, in particular the GDPR.

3. Hosting via Wix.com Ltd.

This website is hosted on the platform of Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel.

Wix provides the technical infrastructure and hosting services.
Data may be stored on servers located in Israel, the United States, and the European Union.

Israel is considered a secure third country under EU data protection law pursuant to an adequacy decision by the European Commission.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Wix.

Further information on data processing by Wix is available at:
https://www.wix.com/about/privacy

4. Collection and Storage of Personal Data When Visiting the Website
When you access this website, the following data is automatically processed by Wix:

IP address
Date and time of the request
Time zone difference to GMT
Requested content (specific page)
Access status/HTTP status code
Amount of data transferred
Referrer URL
Browser used
Operating system and its interface
Language and version of the browser software

These data are necessary for the technical operation of the website and to ensure system security and stability.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

5. Contact Form / Contacting Us
If you contact us via contact form or e-mail, the following data will be processed:

Name
E-mail address
Message content
Any additional information you voluntarily provide

The data are processed for the purpose of handling your inquiry and for conducting pre-contractual measures.
Legal bases:

Art. 6(1)(b) GDPR (pre-contractual steps)
Art. 6(1)(f) GDPR (legitimate interest in efficient communication)

No data is passed on to third parties.
Data will be deleted once your request has been fully processed and no statutory retention obligations apply.

6. Use of Cookies
Our website uses cookies and similar technologies.

Consent Management with Usercentrics

Cookie consent is managed through the consent management platform provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.
The consent banner allows you to decide which cookies and technologies you permit. Your choices are saved and documented.

Legal bases:

Technically necessary cookies: Art. 6(1)(f) GDPR
All other cookies (e.g., analytics, marketing): Art. 6(1)(a) GDPR (consent)

You may withdraw or modify your consent at any time via the cookie banner.

7. Embedded Third-Party Services

Google Fonts

Google Fonts are embedded locally. No connection to Google servers is established.
No data transfer to the United States takes place.

Wix Analytics

We use Wix Analytics, an integrated analytics service from Wix, to evaluate:

page views
time spent on pages
device types
general usage behavior

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).

YouTube

Some pages contain embedded YouTube videos.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Videos are embedded in “enhanced privacy mode.”
However, when a video is played, a connection to Google servers may still be established.

Legal basis: Art. 6(1)(a) GDPR (consent).

Social Media

We do not use active social media plugins that transfer data automatically when loading the website.
Links to platforms such as LinkedIn or Instagram merely redirect you to the respective sites when clicked.
No data is transmitted automatically.

8. Storage Period
Personal data are deleted as soon as the purpose for processing no longer applies and there are no statutory retention obligations.

9. Your Rights
You have the following rights at any time:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to object (Art. 21 GDPR)
Right to data portability (Art. 20 GDPR)

To exercise your rights, please contact:
tk@thomaskeppler.com

10. Right to Lodge a Complaint with the Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State where you reside or where the alleged violation occurred.

11. Updates and Amendments to This Privacy Policy
This privacy policy is currently valid (as of June 2025) and will be updated whenever legal or technical changes require it.

​Data protection

Contact

Data protection