Privacy policy
1. Controller
Controller for data processing on this website under the GDPR:
Nicolas Huck · Huck Media
Schlesierweg 19, 77880 Sasbach, Germany
Email: nicolas@huck-media.de
Phone: +49 176 43906380
No data protection officer has been appointed (not legally required for this business).
2. Hosting
This website is hosted with a hosting provider in Germany (Alfahosting). Access data (see server log files) may be processed. Processing is based on a data processing agreement / hosting contract (Art. 6(1)(f) GDPR – legitimate interest in secure, efficient website delivery; where applicable Art. 6(1)(b)).
3. Server log files
When you visit the website, information is automatically stored in server log files, in particular:
- IP address
- Date and time of the request
- requested URL / file
- referrer URL
- browser and operating system information
- amount of data transferred and status code
Legal basis: Art. 6(1)(f) GDPR (security, stability, abuse detection). Retention: usually a few days to weeks according to the hoster’s settings, then deletion or anonymisation, unless longer retention is required to investigate attacks.
4. Cookies, localStorage and technically necessary storage (TDDDG / GDPR)
We do not use tracking, marketing or analytics cookies. Only technically necessary browser storage is used:
hm_cookie_consent – stores that the cookie notice was acknowledged
hm_theme / hm_theme_mode – light/dark display preference
hm_cart_v1 – locally stored service selection in the cart (on your device only)
- where applicable
sessionStorage entries for quote preview / contact prefill (current session only)
Legal basis: Art. 6(1)(f) GDPR and/or Section 25(2) TDDDG (strictly necessary). You can delete these entries in your browser settings at any time.
5. Contact and referral forms, quote PDF
On the contact page you can send enquiries and referrals. We process the details you enter (e.g. name, email, company, phone, message, and where applicable details of a referred person). For cart-based enquiries, a non-binding quote PDF may be transmitted as an attachment.
If you open the contact page via a referral link (e.g. kontakt.html?ref=CODE), the referral code contained in the address is taken over into the form and processed with your enquiry in order to assign the referral to the referring person and settle any commission (Art. 6(1)(b) and (f) GDPR). No cookies or similar browser storage are used for this.
Purpose: handling and answering your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual) and/or (f) (legitimate interest in communication); where you tick an explicit consent checkbox, also Art. 6(1)(a) GDPR.
Data is emailed to us (referrals and enquiries with a referral code are additionally stored in our protected client area) and not sold to unrelated third parties without a legal basis. Retention: until the request is completed and thereafter according to statutory retention duties (e.g. commercial/tax law), otherwise deletion.
6. Correspondence (email / WhatsApp)
If you contact us by email or WhatsApp, the data you send is stored to process your message. Note: WhatsApp is a Meta Platforms service; Meta/WhatsApp privacy terms also apply. For confidential matters we recommend email.
7. Third-party fonts and scripts
The font (Lato) is stored locally on our server and delivered from there. Visiting the website does not establish a connection to Google Fonts or any other font provider; no data is transmitted to Google.
Exception: the login page and the protected client area may currently still load fonts via Google Fonts (Google Ireland Ltd. / Google LLC, fonts.googleapis.com / fonts.gstatic.com); your IP address may be transmitted to Google. Legal basis: Art. 6(1)(f) GDPR (consistent, performant presentation).
For generating quote PDFs in the browser, the html2pdf.js library may be loaded from a CDN (cdnjs.cloudflare.com / Cloudflare). A connection to the CDN (including IP address) may occur — only if you use the quote PDF feature.
8. External links / social media
Links to WhatsApp, Facebook, Instagram, X, LinkedIn, Threads and similar are simple links without embedded social plugins in the browser. When you click them, the providers’ privacy policies apply. We do not receive automatic usage analytics from this.
Additionally, the homepage may show a preview of Huck Media’s latest own Instagram post. Our server fetches it via the Instagram API (Meta) using an access token, caches image and short caption under /data/, and serves them from our site — without an Instagram script or social plugin in your browser. Purpose: current portfolio/self-promotion. Legal basis: Art. 6(1)(f) GDPR. The token is stored server-side only and is not publicly readable.
9. Analytics / tracking
No analytics or tracking service (in particular no Google Analytics) is currently active. No advertising usage profiles are created.
10. Your rights
Subject to the statutory requirements, you have rights to:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
- withdraw consents with effect for the future (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a supervisory authority, in particular the authority for Baden-Württemberg:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI),
Lautenschlagerstraße 20, 70173 Stuttgart,
www.baden-wuerttemberg.datenschutz.de.
11. Updates
Last updated: September 2026. We will revise this notice when our services, technology or the law change.