Privacy
Controller
The controller under the GDPR is Albert Lackmann (rohweiss), address as given in the imprint, email: info (at) rohweiss.de.
Overview
We process personal data only as far as it is needed to run this website and to handle your enquiries. This website sets no cookies, uses no analytics, tracking or advertising services and loads no fonts, scripts or images from third-party servers.
Hosting
This website is hosted by ALL-INKL.COM (Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany). A data processing agreement under Art. 28 GDPR exists with the host.
Server log files
When you open the website, the host processes technically necessary data in server log files, for example the IP address, date and time, the page requested, the browser type and the operating system. This serves the secure and stable operation of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). According to its own information, the host deletes these log files after seven days at the latest.
Contact form: purpose and legal basis
When you write to us through the contact form, we process your name, your email address and your message, and, if you provide them, your phone number, company and topic, for partner enquiries your field and portfolio address, as well as the language of the page. The purpose is to handle your enquiry and reply to you. The legal basis is your consent under Art. 6 (1) (a) GDPR, which you give by ticking the box in the form, and, where a contract or its preparation is concerned, Art. 6 (1) (b) GDPR. You can withdraw your consent at any time with effect for the future. The message is delivered by email to the rohweiss mailbox at the host. It is not passed on to any further third parties.
Contact form: retention
We keep your enquiry until it has been dealt with and then delete it after six months at the latest. Statutory retention obligations, for example for an order, remain unaffected.
Protection against abuse
The form contains a hidden field and a timing check that detect automated submissions. We also limit the number of messages per sender and hour. For this we store a hash of your IP address with a secret addition, not the address itself, and the times of the latest requests. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in protection against abuse). These counting data are deleted automatically after 24 hours.
The footer of the page contains a link to our Instagram profile. It is an ordinary link: no Instagram content is embedded, and no data is transmitted to Instagram merely by opening our page. You only leave our website when you click the link. The provider's privacy notices then apply.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time. Please contact the controller named above.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for our seat is the Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Data Protection and Transparency Commissioner), Maternistraße 17, 01067 Dresden, Germany.
Date
Last updated: 12 October 2026.