Privacy

Controller and purpose

The controller is Holger Gierth at the German postal and email address below. We process information to deliver and secure the website, answer enquiries and, only with permission, measure selected use. You can read the guides without creating an account.

Hosting and contact

Cloudflare processes technical requests, including IP address and browser information, for delivery and security. The contact form uses Turnstile, a start time, an anti-spam field and an email-derived rate-limit key. We receive your email, optional name, topic and message. Hosting and email providers process these data to deliver the service. We do not forward contact messages to commercial providers as leads.

Cloudflare Email Routing forwards contact messages to our Gmail mailbox at Google. Google receives the message and delivery information needed to provide that service. The email-derived rate-limit identifier is used to restrict repeated submissions, not for advertising.

Optional Google Analytics

Statistics load only after you choose them. Advertising signals and ad personalisation remain disabled; configured page URLs omit query strings. We store your preference in this browser. Cookie settings lets you withdraw it, stop further collection and clear Analytics cookies. Global Privacy Control keeps statistics disabled. Withdrawal does not erase information already processed.

Legal bases and retention

For the German controller, the GDPR legal bases are legitimate interests in secure operation and answering general enquiries (Article 6(1)(f)), handling a contractual request where applicable (Article 6(1)(b)), and consent for optional analytics (Article 6(1)(a)). We retain messages for handling the matter and any applicable recordkeeping period, then delete them when no longer needed. No individual credit, benefit or care decision is automated here.

Providers and international processing

Cloudflare and Google may process information outside your country, including in the United States. Applicable transfer safeguards are required; provider privacy information is linked below. This edition has no active affiliate tracking links. Following an external link opens a service with its own privacy terms.

Your choices and rights

Contact the controller to request access, correction, deletion, restriction, portability or to object where applicable. Consent can be withdrawn without affecting prior lawful processing. We may need proportionate identity verification. You may complain to a competent data-protection authority, including LDI NRW. Canadian rights and applicable provincial rules depend on the circumstances; you can ask us to review a privacy concern without a site account.

You can raise a concern with the Office of the Privacy Commissioner of Canada or the relevant provincial privacy authority, as applicable. Their guidance explains how to identify the appropriate complaint route. Optional analytics remain off unless you choose them; declining them does not prevent access to our guides.

Data-minimising statistics settings — updated 14 September 2026

Our analytics configuration sends page addresses without query strings or fragments. For the previous page, it sends only the origin (protocol and host), not the path or search parameters. WOHNALIO does not load the analytics code on search or contact pages, personal assessment and cost-comparison tools, staged country editions or preview hosts. Our own form events do not contain messages, names or email addresses entered into a form.

A saved statistics opt-in is reused only when it matches the current technical consent version. Otherwise statistics stay disabled until you consent again. A saved refusal remains in effect. Changes are also recognised across open tabs of the same website. Necessary hosting connection data are separate from these statistics settings.