— Legal

Imprint

Disclaimer of liability

Privacy policy

Status: October 2026

Controller

The controller in the sense of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Steffen Ludwig
LUDWIG+FRIENDS e.K.
Im Nonnengarten 33
67098 Bad Dürkheim
Germany
Phone: +49 6322 790 73 73
E-mail: info{at}ludwigfriends.de

Summary

Protecting your personal data is very important to us. This privacy policy informs you about which personal data we collect when you visit and use our website, how we process it and for what purposes.

Our website is deliberately designed to collect as little data as possible: we do not use cookies, we do not use any analytics or tracking tools, and we do not embed any third-party content. All parts of the website – including fonts and images – are loaded exclusively from our own web server. Data is only transferred to third parties if you yourself click a link to an external service (see below).

Your data subject rights

You can exercise the following rights at any time using the contact details of the controller provided above:

Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data stored by us and its processing.

Right to rectification (Art. 16 GDPR): You have the right to request the immediate rectification of inaccurate personal data concerning you.

Right to erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data stored by us, unless legal retention obligations or other reasons prevent this.

Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your data if, for example, the accuracy of the data is disputed or the processing is unlawful.

Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR.

Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller, where the processing is based on consent or on a contract.

If you have given us your consent to process your data, you can revoke this consent at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time (Art. 77 GDPR), e.g. with the supervisory authority responsible for your place of residence or with the authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Collection of general information when visiting our website (server log files)

Type and purpose of processing:
When you visit our website, our web server automatically collects information of a general nature. This information (so-called server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, the date and time of access and similar data.

This data is processed in particular for the following purposes:

Ensuring a smooth connection to the website.

Ensuring smooth use of our website.

Evaluating system security and stability.

Optimising our website.

We do not use this data to draw conclusions about your person.

Legal basis and legitimate interest:
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the stability and functionality of our website and in ensuring IT security.

Recipients:
The recipient of the data is our hosting provider, which acts as a processor for the operation and maintenance of our website.

Storage period:
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. Further storage may be necessary in individual cases to track system errors or attacks, in order to protect our legitimate interest in IT security.

Provision required or necessary:
The provision of the aforementioned data is neither legally nor contractually required. However, without the collection of your IP address, the service and functionality of our website cannot be guaranteed. For this reason, an objection to the processing of this technically necessary data within the scope of the website visit is excluded.

No cookies, no analytics, no tracking

Our website does not use cookies and does not store any information on your device. We do not use any analytics, statistics, marketing or tracking tools and do not create user profiles. For this reason, no cookie banner or consent request is required.

Fonts

For a consistent appearance we use the fonts “Inter Tight” and “Instrument Serif” (licensed under the SIL Open Font License). The font files are stored locally on our own web server and are loaded from there. No connection to servers of Google or any other third party is established.

Contact form

Type and purpose of processing:
The data you enter into our contact form (name, e-mail address, message) is transmitted to our web server in encrypted form, forwarded to us from there by e-mail, and stored and processed for the purpose of individual communication with you. A valid e-mail address and your name are required in order to assign and answer your inquiry.

Legal basis:
The processing of the data entered into the contact form takes place on different legal bases, depending on the purpose of your contact:

If you contact us with a general inquiry or to clarify questions, the legal basis is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR in enabling you to contact us easily and in processing your inquiry.

If you contact us to request an offer or to initiate a contractual relationship, the processing takes place for the performance of pre-contractual measures or for the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR.

Recipients:
Recipients of the data may be our hosting provider and our e-mail provider, which act as processors on our behalf.

Storage period:
The data will be deleted no later than 6 months after your inquiry has been fully processed, unless statutory retention obligations prevent this. If a contractual relationship is established, we are subject to statutory retention periods (e.g. under the German Commercial Code (HGB) and Fiscal Code (AO)) and will delete your data after these periods have expired.

Provision required or necessary:
The provision of your personal data via the contact form is voluntary. However, we can only process your inquiry if you provide us with at least your name, your e-mail address and the reason for your inquiry.

Contact by e-mail or phone

If you contact us by e-mail or phone, we process the data you provide exclusively to handle your request. The legal basis, storage period and your rights correspond to the information given for the contact form.

Data upload via pCloud

For the transfer of large files we provide an upload link to the pCloud service. The provider is pCloud International AG, Switzerland. Only when you click the “Data upload” button are you redirected to the pCloud website; in the process, in particular your IP address as well as the files you upload and any data you enter are transmitted to pCloud.

Purpose and legal basis:
The processing serves to receive files in the context of our collaboration and is carried out for the performance of pre-contractual measures or the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR, as well as on the basis of our legitimate interest in a secure and straightforward exchange of data in accordance with Art. 6 para. 1 lit. f GDPR.

Recipients and transfer to third countries:
pCloud acts as a processor on our behalf. The data we use is stored in data centres within the European Union. For Switzerland, where the provider is based, there is an adequacy decision of the European Commission (Art. 45 GDPR) confirming a comparable level of data protection.

Storage period:
We delete uploaded files from the pCloud server immediately after downloading them to our own systems.

Further information can be found in pCloud’s privacy policy: https://www.pcloud.com/privacy_policy/.

Links to external websites (including Google Maps)

Our website contains links to external services, e.g. to our location on Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or to the website of the Kinderhospiz Sterntaler. These are simple links – the Google Maps map is not embedded in our website. Merely visiting our website therefore does not transfer any data to Google or any other linked provider.

Only when you click such a link do you leave our website, and the respective provider receives the usual connection data (e.g. your IP address). The respective provider is solely responsible for the data processing on these websites. Information on data processing by Google can be found at: https://policies.google.com/privacy.

General information on transfers to third countries

We ourselves only transfer personal data to recipients in a third country outside the European Union or the European Economic Area (EEA) if an adequacy decision of the European Commission exists for the country concerned (Art. 45 GDPR), if appropriate safeguards exist, such as the standard contractual clauses adopted by the EU Commission (Art. 46 para. 2 lit. c GDPR), or if you have given your explicit consent (Art. 49 para. 1 lit. a GDPR).

SSL/TLS encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (SSL/TLS) via HTTPS. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

Information about your right to object under Art. 21 GDPR

Right to object in individual cases:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. f GDPR (data processing on the basis of a balancing of interests). This also applies to profiling based on this provision within the meaning of Art. 4 no. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an objection: Steffen Ludwig, info{at}ludwigfriends.de

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send us an e-mail to info{at}ludwigfriends.de. The person responsible for data protection, Steffen Ludwig, will handle your request.

In case of doubt, the German version of this privacy policy shall prevail.

This privacy policy was last updated on: 9 October 2026