1. Controller
The controller for data processing on this website is almost42 GmbH, Kleygarten 12, 59302 Oelde, Germany, email: hello@almost42.com. Further details are in the Impressum above.
Information pursuant to § 5 DDG
This page explains which personal data we process when you visit this website or contact us, for what purpose, and on which legal basis.
The controller for data processing on this website is almost42 GmbH, Kleygarten 12, 59302 Oelde, Germany, email: hello@almost42.com. Further details are in the Impressum above.
We process personal data under the GDPR, the German Federal Data Protection Act (BDSG) and, for access to your device, the German Telecommunications Digital Services Data Protection Act (TDDDG). Depending on the processing, we rely on:
• your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG) – for Google Analytics • the initiation or performance of a contract (Art. 6 (1) (b) GDPR) – for business enquiries • a legal obligation (Art. 6 (1) (c) GDPR) – for statutory retention duties • our legitimate interest (Art. 6 (1) (f) GDPR) – for delivering and securing the website, storing your language and cookie choice, and answering other enquiries
The legal basis that applies is stated with each processing activity. You are not obliged to provide us with any data. Without the connection data your browser transmits, however, the website cannot be displayed.
The website runs on servers operated by Amazon Web Services (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg) in the Frankfurt am Main region. AWS processes the data as our processor under the AWS data processing addendum pursuant to Art. 28 GDPR.
With every request, your browser necessarily transmits connection data: IP address, date and time, the requested address, referrer, and browser and operating system. We process this data only to deliver the page and to protect it against attacks (Art. 6 (1) (f) GDPR). We do not keep server log files that store this information permanently.
The following entries on your device are strictly necessary. They are set without consent (§ 25 (2) no. 2 TDDDG); the processing is based on Art. 6 (1) (f) GDPR:
• cookie “i18next”: selected language, deleted when you close the browser • local storage “i18nextLng”: selected language • local storage “a42-consent”: your Google Analytics choice and when you made it
The local storage entries stay in your browser until you delete them and are not transmitted to us.
The Google Analytics cookies (section 5) require consent. They are only set once you agree in the cookie notice. We provide this notice ourselves; no external consent service is used. You can change your choice at any time via the “Cookies” link in the footer of every page. If you withdraw your consent, we delete the Google Analytics cookies in your browser and stop the measurement.
With your consent, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) to understand how the website is used. The legal basis is your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). Google processes the data as our processor.
The script is only loaded from Google's servers once you consent. It then records in particular the pages visited, the time and duration of the visit, the referrer, device type, browser, operating system, language setting and screen resolution. To recognise returning visitors, Google sets the cookies “_ga” and “_ga_<ID>”, which contain a random identifier and are stored for up to two years. The measurement is therefore pseudonymous, not anonymous.
Your IP address is transmitted to Google so that Google can derive your approximate location (country, region, city). According to Google, Google Analytics 4 does not store IP addresses.
The analytics data is deleted automatically after 14 months. For transfers to the USA, see section 7.
If you email us, we process your email address, your name, the content of your message and when it was sent in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry aims at a contract, and otherwise Art. 6 (1) (f) GDPR.
Our emails are stored by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, acting as our processor. We only pass your message on to other recipients if this is necessary to handle your request or if we are legally obliged to do so.
Your data is only received by:
• Amazon Web Services EMEA SARL – hosting (section 3) • Google Ireland Limited – audience measurement, only with consent (section 5) • IONOS SE – email (section 6) • authorities and courts, where we are legally obliged
All three service providers are bound by our instructions as processors under Art. 28 GDPR.
IONOS processes the data in Germany. AWS hosts the website in Frankfurt. Because AWS belongs to a US group, access by Amazon Web Services, Inc. from the USA cannot be ruled out. With Google Analytics, data is also transferred to Google LLC in the USA. Both US companies are certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Art. 45 GDPR). In addition, the European Commission's standard contractual clauses apply (Art. 46 (2) (c) GDPR).
We store personal data only as long as necessary for the respective purpose. The specific periods for website data are given in sections 3 to 5.
We delete emails once your request has been dealt with conclusively. If a message concerns a business transaction, we keep it for as long as statutory periods require – usually six to ten years (§ 257 HGB, § 147 AO). If you withdraw consent or request erasure, we delete your data unless such a duty prevents this.
You have the right to:
• access the data processed (Art. 15 GDPR) • rectification of inaccurate data (Art. 16 GDPR) • erasure (Art. 17 GDPR) • restriction of processing (Art. 18 GDPR) • data portability (Art. 20 GDPR) • object to processing based on legitimate interests (Art. 21 GDPR) • withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)
An informal message to hello@almost42.com is sufficient.
You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the alleged infringement (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Last updated: October 2026