1. Controller and overview
The controller responsible for the processing of personal data on this website is:
Dr. Marcus Reiß
c/o Federsitz
Marcel Schütte
Graefenhainweg 7A
30519 Hannover
Germany
E-Mail: magic@grammarofmagic.com
Personal data is any information that can be used to identify you directly or indirectly, such as your name, your email address or your IP address. This policy explains which data is generated when you visit this website, what I use it for, on what legal basis, how long it is stored and what rights you have.
Data arises in two ways: first, when you tell me something, for example via the contact form or by email. Second, automatically, as soon as you open the website. This is mainly technical information such as your browser, operating system and the time of the visit.
2. Legal bases
I only process personal data if there is a legal basis for it. Depending on the case, this is:
- Your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future. Processing carried out up to the withdrawal remains lawful.
- Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), for example if your enquiry is aimed at a contract.
- A legal obligation (Art. 6(1)(c) GDPR), such as retention obligations under tax or commercial law.
- My legitimate interest (Art. 6(1)(f) GDPR), for example in the secure and error-free operation of the website and in answering enquiries.
For storing information on your device or reading such information (e.g. cookies), Section 25 TDDDG (the German Telecommunications Digital Services Data Protection Act) also applies. Technically necessary access is permitted without consent under Section 25(2) no. 2 TDDDG; all other access only with your consent (Section 25(1) TDDDG).
3. Hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The host processes the data that arises when the website is accessed on my behalf. Further information can be found in its privacy policy at https://all-inkl.com/datenschutzinformationen/.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is in providing the website reliably. A data processing agreement under Art. 28 GDPR is in place with the host. It ensures that the host processes the data only on my instructions and in compliance with the GDPR.
4. Server log files and access statistics
When you open the website, the server automatically stores information that your browser transmits:
- Browser type and browser version
- Operating system used
- Referrer URL (the page visited before)
- Host name of the accessing device
- Time of the request
- IP address, in shortened form (the last two digits are removed)
This data is not merged with other data sources and is deleted automatically after seven days. From the log files, the host creates statistics on the number of page views. No cookies are set in the process, and no third-party tools are integrated.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the technically error-free presentation of the website, in securing it and in evaluating its reach.
5. Cookies
Cookies are small text files stored by your browser. They do not cause any damage to your device. Session cookies are deleted when your visit ends; persistent cookies remain until they expire or until you remove them.
This website only uses technically necessary cookies. These include a cookie that stores your language selection (Polylang) and two cookies of the consent management tool SureCookie: one stores your cookie decision, the other an identifier of your session. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. I only set cookies that are not necessary with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time.
To prove your decision, the website records the time, your choice for each cookie category, the session identifier, your IP address and the country derived from it. These records are stored in the database of this website and deleted automatically after 365 days. The legal basis is my legal obligation to be able to demonstrate consent (Art. 7(1) GDPR in conjunction with Art. 6(1)(c) GDPR).
In your browser you can set it so that you are informed about cookies, allow them only in individual cases, reject certain or all cookies, or have them deleted when you close the browser. If you deactivate cookies, the website may only work in a limited way.
6. Contacting me
If you write to me by email, I process your message and the details it contains (e.g. name, email address, content of your enquiry) in order to answer it. I do not pass on your data without your consent.
If your enquiry serves the performance of a contract or the preparation of a contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases it is my legitimate interest in the effective handling of enquiries (Art. 6(1)(f) GDPR) or, if obtained, your consent (Art. 6(1)(a) GDPR). I delete your data as soon as your enquiry has been dealt with, you ask me to delete it or you withdraw consent you have given. Statutory retention periods remain unaffected.
7. Fonts
The fonts used on this website are stored locally on the server of this website. When you visit the site, no connection to servers of Google or other font providers is established, and no data is transmitted to third parties.
8. External links
This website may contain links to other websites, for example to bookshops or profiles on social networks. These links only establish a connection to the respective provider when you click on them. The respective operator is responsible for data processing on those sites, and its privacy policy applies there.
9. Encryption (SSL/TLS)
For security reasons, this website uses SSL/TLS encryption so that content such as your enquiries cannot be read by third parties during transmission. You can recognise an encrypted connection by the “https://” in the address bar and by the lock symbol in your browser.
Please note: when communicating by email, transmission may have security gaps. Complete protection against access by third parties is not possible on the internet.
10. Recipients and third countries
The recipients of your data are only those parties that are necessary to operate the website or to process your enquiry, above all the host named above as a processor. Beyond that, I only pass on data if I am legally obliged to do so (e.g. to authorities), if this is necessary for the performance of a contract, if there is a legitimate interest under Art. 6(1)(f) GDPR, or if you have consented. No data is transferred to countries outside the EU and the EEA.
11. Storage period
Unless a more specific period is stated in this policy, I store personal data until the purpose of the processing no longer applies. If you make a legitimate request for deletion or withdraw your consent, I delete the data, unless other legal grounds prevent this, for example retention periods under tax or commercial law. In that case, deletion takes place once those grounds cease to apply.
12. Obligation to provide data and automated decisions
You are not obliged to provide me with personal data. If you only read the website, only the technically required data described in section 4 arises. There is no automated decision-making, including profiling.
13. Your rights
Under the GDPR you have the following rights. To exercise them, please contact the email address given above.
- Access (Art. 15 GDPR): You can request free information about your stored data, its origin, recipients and the purpose of the processing.
- Rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR) of your data.
- Restriction of processing (Art. 18 GDPR). This right exists if you dispute the accuracy of the data (for the duration of the verification), if the processing is unlawful and you want restriction instead of erasure, if I no longer need the data but you need it to establish, exercise or defend legal claims, or if you have objected and it has not yet been determined whose interests prevail. Restricted data may – apart from being stored – only be processed with your consent or to protect legal claims or important public interests.
- Data portability (Art. 20 GDPR): Data that I process automatically on the basis of your consent or a contract can be provided to you in a commonly used, machine-readable format, or transferred to another controller, where technically feasible.
- Withdrawal of consent (Art. 7(3) GDPR): You can withdraw it at any time with effect for the future.
- Complaint to a supervisory authority (Art. 77 GDPR): You can lodge a complaint in particular in the Member State of your habitual residence, your place of work, or where the alleged infringement took place. The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Right to object (Art. 21 GDPR)
If processing is based on Art. 6(1)(e) or (f) GDPR, you can object at any time, on grounds relating to your particular situation, to the processing of your data. This also applies to profiling based on these provisions. I will then no longer process the data unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
If your data is processed for direct marketing, you can object at any time without giving reasons. This also applies to profiling insofar as it is related to direct marketing. After your objection, I will no longer use the data for direct marketing.
14. Changes to this policy
I will update this privacy policy when the website or the legal situation changes, for example when new services are added. The version published here at any given time applies. Last updated: October 2026.