This notice describes the inquiry functions of Web by Maier. The specific retention periods and additional contractual details of the hosting and email services are still being verified.
Save privacy notice as text1. Controller and contact
The controller for this website is Alexander Maier, operator of the Web by Maier project, Pater-Petrus-Straße 20, 83075 Bad Feilnbach, Germany. You can contact him about data protection at service@web-by-maier.com.
2. Visiting the website and hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit, the hosting infrastructure processes the connection data needed to deliver and secure the website, particularly your IP address and the requested address. Depending on the server configuration, further technical information may arise, such as the time, browser information, errors and status messages.
The purposes are to provide the website, identify faults and prevent abusive access. Article 6(1)(f) GDPR is the legal basis for the necessary processing. Our legitimate interest is an accessible and secure website.
3. Contact, package and project inquiries
You can send a general contact inquiry, an inquiry about a package, or a project inquiry in six steps. First name, last name and email address are required by these forms. Street address, postcode, city, mobile number, landline number and message are optional and may be left blank. You are not legally obliged to provide these details for an initial inquiry. The form cannot be submitted without the required fields; you can also contact us directly by email.
A project inquiry additionally transmits your selected answers about the project goal, scope, desired features, available content, starting point and timeline, together with any package preference. A package inquiry transmits the chosen package. The selected language and an inquiry reference are also included. The server uses the selections to prepare a summary and the relevant preliminary assessment or package description with price information.
We use these data to understand your inquiry, answer questions, prepare a quote and, where applicable, conduct the subsequent collaboration. If you are personally taking steps towards or performing a contract, the necessary processing is based on Article 6(1)(b) GDPR. For general messages, or if you act as a company contact, we process the necessary details under Article 6(1)(f) GDPR; our legitimate interest is appropriately handling business communications addressed to us.
The form acknowledgement records that the linked privacy notice and contractual terms were accessible to you and that you acknowledged them. The operator receives the acknowledgement status and the version of the information with the inquiry. This acknowledgement is not consent to advertising and does not turn the inquiry into a paid order.
4. Email delivery and acknowledgement
The server hands the inquiry to the hosting provider’s mail system. The operator message is addressed to service@web-by-maier.com. It contains the contact details and message you entered and, depending on the inquiry type, the validated selections, project summary or package description with its price. Your email address is used as the reply address for further correspondence.
After the mail system has accepted the operator message, the server also attempts to send an acknowledgement to the email address you supplied. This acknowledgement contains your own submitted contact details and message, the corresponding project or package summary, and a reference. Please check your email address before sending. The acknowledgement does not accept an order.
The designed emails contain fixed image files included in the message. Displaying them does not require a request to an external image address. These images are not used to measure opens; the application uses no tracking pixels for this purpose. The forms do not allow you to upload files.
Email contents are processed in the mail systems involved and in our correspondence. Your chosen email provider processes receipt under its own responsibility. Sending an email does not imply a guarantee of end-to-end encryption or actual delivery.
5. Temporary entries in your browser
Your entries are held in the memory of the open page while you use it. The application does not save form drafts permanently in browser storage. Closing or reloading the page discards this form state; this does not control any separate storage or autofill feature of your browser. Summaries that you copy or download remain wherever you save them.
If automatic sending is unavailable and you use the offered email draft, the draft is passed to your email program. You decide there whether to send it. Your email provider also processes the subsequent communication.
6. Necessary session cookie and abuse prevention
The inquiry service uses a session cookie named “wbm_inquiry”. It associates a form request with its security session and helps prevent abusive and repeated sending. The cookie is restricted to the inquiry endpoint, cannot be read by page scripts and is transmitted securely on this HTTPS website. It is a session cookie; the application does not give it a persistent expiry date. Actual session restoration also depends on your browser.
The form security token is valid for 30 minutes. The application keeps limited session data for this purpose. Server-side session cleanup also uses a 30-minute expiry and is triggered by later requests; deletion at exactly 30 minutes is therefore not guaranteed.
The application also keeps limited security records for hourly and daily counters and for recognizing repeated transmission attempts. IP addresses, email addresses and inquiry identifiers are replaced in these records by keyed hashes. These are pseudonymized data, not data guaranteed to be anonymous. The records also contain time windows, counters, delivery status and a protected fingerprint of the submitted content. Names, postal addresses, phone numbers, message text and questionnaire answers are not stored there in readable form. The application does not store inquiry contents in a database.
Records used to recognize repeat submissions expire after seven days. Expired records and counters are removed during later requests. There is no fixed cleanup routine running independently of subsequent requests.
The necessary processing of personal data for security is based on Article 6(1)(f) GDPR. Our legitimate interest is protecting the forms and mailboxes against automated abuse and accidental duplicate sending.
The necessary storage and reading of this cookie to provide the requested secure inquiry function is based on section 25(2), point 2, of the German TDDDG. The GDPR basis above concerns the subsequent processing of personal data.
7. Recipients and transfers
Alexander Maier reads the inquiry to handle it, and it is processed through ALL-INKL.COM’s hosting and email infrastructure. The acknowledgement is sent to the email address you supply. The forms do not transmit inquiry contents to an analytics, advertising, AI or external CAPTCHA service.
8. Retention of correspondence
We retain inquiries and replies for as long as necessary to handle them and, where applicable, the resulting collaboration. Once a matter is closed and further processing is unnecessary, the associated personal data are deleted unless legal retention duties or the necessary establishment, exercise or defence of legal claims require otherwise. Legally required retention is based on Article 6(1)(c) GDPR; necessary handling of legal claims is based on Article 6(1)(f) GDPR.
9. Language, local content and external links
The language is included in the page address; the application does not store a permanent browser preference for it. Fonts and website images are served by this website. No analytics or marketing scripts or external CAPTCHA services are embedded. If you follow an external link, for example to a displayed reference project, you visit the relevant provider’s website, where its privacy notice applies.
10. Project suggestions and automated decisions
The questionnaire uses defined rules to generate a preliminary assessment from your selections. This suggestion does not decide whether a contract is concluded, establish an entitlement or set a final price. A person carries out further assessment and prepares the individual quote. These forms do not make a solely automated decision producing legal or similarly significant effects.
11. Your rights
Subject to the legal conditions, you can request access to your personal data, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw it at any time for the future; the lawfulness of earlier processing is unaffected.
Right to object: Where data are processed on the basis of legitimate interests under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will then stop processing the relevant data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
For these requests, you can email service@web-by-maier.com. You also have the right to complain to a data protection supervisory authority, particularly in the place of your habitual residence, workplace or a suspected infringement.
The Bavarian State Office for Data Protection Supervision (BayLDA) supervises private businesses in Bavaria. Postal address: Postfach 1349, 91504 Ansbach, Germany. Visitor address: Promenade 18, 91522 Ansbach. Contact and complaints: https://www.lda.bayern.de/de/kontakt.html and https://www.lda.bayern.de/de/beschwerde.html.