Privacy notice
Updated 13 October 2026. This notice covers tommy-haacke.com and enquiries about my work.
Controller
Tommy Haacke
Motorstraße 32B
80809 München
Germany
E-Mail: hello@tommy-haacke.com
Phone: +49 176 66856790
Hosting and access logs
The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Technical connection data is processed to deliver the pages. IONOS states that it records requested pages, referrers, browser, operating system, device type, access time and an anonymised IP address. For this webhosting data, IONOS specifies eight weeks of retention and no transfer outside the EU.
The purpose is secure and reliable website operation, based on Article 6(1)(f) GDPR. IONOS processes the data as hosting provider. IONOS hosting information.
Website statistics
IONOS WebAnalytics is configured to support technical improvements to the portfolio. The website code does not embed an additional tracking pixel. IONOS describes access-log statistics without cookies and with immediately anonymised IP addresses. Where personal data is processed before anonymisation, the basis is Article 6(1)(f) GDPR. Statistics are not combined with contact enquiries. WebAnalytics information.
Contact form, email and phone
When you contact me, I process your name, email address and message to respond to the enquiry. The form sends these details over an encrypted connection to the webserver and then by email to hello@tommy-haacke.com. This address is configured as a forwarding address; hosting and email are handled through IONOS. No external form service is used and no copy of the message is stored in a website database.
For enquiries about a possible contract with you, the basis is Article 6(1)(b) GDPR. Other professional enquiries are handled under Article 6(1)(f) GDPR, based on my legitimate interest in professional communication. Providing details is voluntary; I need a contact method to reply.
Correspondence is retained while needed to handle the enquiry or maintain an ongoing business relationship. Legal retention duties and the necessary protection of legal claims may require longer retention; data is then deleted.
Form abuse prevention
To limit automated requests, the server processes a rotating pseudonymous identifier derived from the IP address, a timestamp and request counters. The identifier remains valid for up to one hour; expired records are overwritten on the next request. Names, email addresses and messages are not stored in this technical file. The basis is Article 6(1)(f) GDPR, to prevent abuse and overload. No external CAPTCHA is used.
Cookies and external content
The website code does not set visitor cookies or use browser storage. Fonts, images and scripts are served with the website. No social-media widgets are embedded. External links lead to services covered by their own privacy notices. Email links open your email application.
Your rights
Subject to the legal conditions, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on Article 6(1)(f) GDPR for reasons relating to your particular situation. Consent, where given, may be withdrawn for the future.
Please contact me at the address above. You may also complain to a data protection authority, particularly where you live or work. For my business in Bavaria, the relevant authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany. Contact BayLDA or make a complaint.
No automated decision-making with legal or similarly significant effects takes place.