Last updated: 7 November 2026
We take the protection of your personal data seriously. This Privacy Policy explains which personal data we process when you visit f1fixation.com, why we do it and which rights you have under the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
1. Who is responsible
The controller responsible for data processing on this website is the person named in our Legal Notice (Impressum). You can reach us at any time via the contact details given there with questions about data protection.
2. Overview and legal bases
We only process personal data where the law allows it. The relevant legal bases are:
- Art. 6(1)(a) GDPR – your consent (e.g. for embedded YouTube videos). Where consent concerns storing or accessing information on your device, the legal basis is also § 25(1) TDDDG.
- Art. 6(1)(b) GDPR – performance of a contract or pre-contractual steps.
- Art. 6(1)(c) GDPR – compliance with a legal obligation.
- Art. 6(1)(f) GDPR – our legitimate interests, e.g. operating a secure, stable and fast website. Storage or access on your device that is strictly necessary to provide this website is based on § 25(2) no. 2 TDDDG.
We do not use your data for automated decision-making or profiling within the meaning of Art. 22 GDPR. We currently do not use analytics or tracking tools, advertising networks or a newsletter. If this changes, we will update this policy first.
3. Hosting and server log files
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the site, the server automatically records information that your browser transmits, in particular:
- IP address
- date and time of the request
- page or file requested and amount of data transferred
- referrer URL (the page you came from)
- browser type and version, operating system
This data is needed to deliver the website, to keep it secure and to detect and fix errors (legitimate interest, Art. 6(1)(f) GDPR). Log files are deleted or anonymised after a short period in line with our hosting provider’s standard retention. STRATO processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. More information: STRATO privacy policy.
4. SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by „https://“ and the lock icon in your browser’s address bar.
5. Cookies and consent management
We use cookies and similar technologies. Strictly necessary cookies are set on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. All other cookies and external content are only loaded after you have given your consent in our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).
To manage consent we use the WordPress plugin Complianz (Complianz B.V., Netherlands). It runs on our own server; your choice is saved in a cookie on your device so we don’t have to ask again on every page. You can change or withdraw your consent at any time with effect for the future via „Manage consent“ at the bottom of every page. Details on every cookie we use are in our Cookie Policy.
6. Comments
If you leave a comment, we store your comment, the name you give, your email address, an optional website, the time of the comment and your IP address. The email address is not published. We store this data to display your comment, to be able to contact you if necessary and to be able to defend ourselves against illegal content (Art. 6(1)(f) GDPR). Comments and the related data stay stored until you ask us to delete them or the comment is removed; the IP address is deleted at the latest after a short retention period unless it is needed to clarify an abuse case.
To protect against spam we use the plugin Antispam Bee. The check runs entirely on our own server; no data is sent to external services.
If you tick the box to save your details, WordPress stores your name, email address and website in cookies on your device so you don’t have to enter them again (Art. 6(1)(a) GDPR, § 25(1) TDDDG). We do not use Gravatar profile images.
7. Website security (Wordfence)
To protect this website against attacks, we use the security plugin Wordfence by Defiant, Inc., USA. Wordfence includes a firewall and login protection. To do this, it processes data about requests to the website, in particular IP address, user agent, requested URL and time. IP addresses may be checked against threat data maintained by Defiant, which can involve a transfer to the USA. This transfer is based on the EU Standard Contractual Clauses agreed with Defiant. The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR). More information: Wordfence privacy policy.
8. Performance and image optimisation
To make pages load faster we use a caching plugin (W3 Total Cache) that stores ready-made copies of our pages on our own server, and a plugin that converts and compresses our images on our own server (Converter for Media). No personal data of visitors is passed to third parties by these plugins (Art. 6(1)(f) GDPR).
9. Search engine optimisation (Rank Math)
We use the plugin Rank Math SEO to manage page titles, descriptions and structured data. It works on our own server and does not track visitors or pass visitor data to third parties.
10. Backups
To prevent data loss we make regular backups of the website with the plugin UpdraftPlus (Art. 6(1)(f) GDPR). Backups may contain personal data such as comments. They are stored on our hosting server and kept only as long as needed for this purpose. If we store backups with an external storage provider, we will name it here.
11. Embedded YouTube videos
We embed videos from our YouTube channel. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). We use YouTube’s privacy-enhanced mode. Embedded videos are only loaded after you have consented to them; until then you see a placeholder.
When a video is loaded, a connection to Google’s servers is established. Google receives information such as your IP address, the page you are visiting and device data, and may store information on your device. If you are logged in to your Google account, Google can link this to your profile. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time via „Manage consent“. More information: Google privacy policy.
12. Links to YouTube and social media
Our website contains plain links to our YouTube channel and other social media profiles. No data is transmitted to these platforms until you click a link. After that, the privacy policy of the respective platform applies.
13. Fonts
This website uses fonts installed on your device or hosted on our own server. No connection to external font services (such as Google Fonts) is made.
14. Contacting us by email
If you contact us by email, we process your email address, your message and any other information you provide in order to answer your request (Art. 6(1)(b) or (f) GDPR). We delete this data once it is no longer needed, unless statutory retention obligations apply.
15. Storage period
Unless a more specific period is stated in this policy, we keep personal data only for as long as needed for the purpose for which it was collected, or as long as required by law.
16. Your rights
You have the right to:
- access your personal data (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
Right to lodge a complaint (Art. 77 GDPR): You have the right to complain to a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
17. Changes to this policy
We update this Privacy Policy whenever our website or the law changes. The current version is always available on this page.