Privacy Policy

Last updated: 04.10.2025

This Privacy Policy explains how Timon Walz / Real Relationship („we“, „us“, „our“) collects and processes personal data when you visit www.real-relationship.com. By accessing our site, you acknowledge this notice. Where required by law, we will request your consent via our cookie/consent banner before using non‑essential cookies or similar technologies.

1. Controller & Contact

Controller: Timon Walz
Registered address: Von-der-Recke-Straße 74, 44809 Bochum, Germany
Email: realrelationshiptw@gmail.com

2. What data we process, for what purposes, and legal bases (GDPR Art. 6)

We process:

• Access data (server logs: IP address*, date/time, referrer URL, user‑agent) to deliver the website, ensure security, and prevent abuse. Our analytics tools do not store IP addresses (see Section 6). Legal basis: Art. 6(1)(f) GDPR (legitimate interests: operation & security).
• Consent records from the consent banner to document your preferences. Legal basis: Art. 6(1)(c) GDPR (legal obligation under EU/German law) and Art. 6(1)(f) GDPR.
• Analytics & experience data (events, pages viewed, device type) only after consent. Legal basis: Art. 6(1)(a) GDPR (consent).
• Contact data you provide (e.g., email, message) to answer inquiries. Legal basis: Art. 6(1)(b) GDPR (pre‑contractual steps) and/or Art. 6(1)(f) GDPR.
• Newsletter data (if offered) for email marketing after opt‑in. Legal basis: Art. 6(1)(a) GDPR.

3. Cookies and similar technologies (TTDSG/TDDDG)

We use essential cookies required for the site to function. Analytics and Hotjar cookies or similar technologies are non‑essential and load only with your prior consent via our consent banner. You can change or withdraw consent at any time via the banner’s “Cookie settings”.

4. Recipients & processors

We only share data with service providers bound by data‑processing agreements:

• Hosting/Infrastructure: IONOS, servers located in europe / germany.
• Google Analytics 4 (GA4): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processor). See Section 6.
• Hotjar: Hotjar Ltd., Malta (processor). See Section 7. Further recipients appear only where legally required (e.g., authorities) or with your consent.

5. International data transfers

Where providers transfer data outside the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and/or participation in the EU‑U.S. Data Privacy Framework (if applicable), plus supplementary measures. Details are available from each provider’s documentation (see Sections 6–7) and upon request.

6. Google Analytics 4 (GA4)

We use GA4 for statistical analysis and to improve our content—only with your consent. Key privacy points:

• GA4 does not log or store IP addresses for EU users and routes EU traffic to EU domains/servers.
• User‑level data retention is configurable (currently 14 months); aggregated reports may be kept longer.
• You can revoke consent at any time via the cookie banner. Additionally, Google provides a browser add‑on to opt out of Analytics across websites.
• Data controller/processor: Google Ireland Ltd. processes on our behalf; Google LLC may be sub‑processor for support/maintenance. More info: https://policies.google.com/privacy.

7. Hotjar (behavior analytics)

With your consent, we use Hotjar (heatmaps, session replays, surveys) to understand usage and improve UX. Hotjar is configured to suppress keystrokes and sensitive fields. Hotjar honors Do‑Not‑Track (DNT) and offers an opt‑out page.
Provider: Hotjar Ltd., Malta, acting as our processor under Hotjar’s DPA.
Data collected: device/usage events, truncated IP (no full IP stored), approximate location (country), device/browser info, and interactions.
Retention: We keep Hotjar data only as long as needed for analysis (typically 365 days) unless legal retention requires longer.
Opt‑out: Use our cookie settings or visit Hotjar’s opt‑out page.

8. How long we keep data

We store personal data only as long as necessary for the purposes set out above or as required by law. Typical periods:
• Server logs: Maximum 8 weeks based on IONOS Manual Documentation
• Consent logs: 2 years
• Analytics (GA4): 14 months user‑level data (per current GA settings)
• Hotjar: 365 days in general
• Contact requests: 12 months after closure

9. Your rights (EEA/UK)

You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with a supervisory authority. For EEA residents, you can find your authority via the European Data Protection Board.
To exercise your rights, contact us at realrelationshiptw@gmail.com. We will respond within one month as required by law.

10. Children’s data

Our services are not directed to children under 16. We do not knowingly process children’s personal data. If you believe a child has provided us data, contact us to delete it.

11. Security

We implement appropriate technical and organizational measures to protect personal data (encryption in transit, access controls, least‑privilege, regular reviews). No method of transmission or storage is 100% secure.

12. Changes to this notice

We may update this Privacy Policy. The latest version is always available on this page. Material changes will be indicated and, where required, we will ask for consent again.

14. Contact

For any privacy questions or to exercise your rights, please contact:
Email: realrelationshiptw@gmail.com
Postal address: Von-der-Recke-Straße 74, 44809 Bochum, Germany