bebonsai

Privacy policy

As of 23 October 2026. This is a courtesy translation; the German version is legally binding.

Protecting your personal data matters to me. Here you can find out which data is processed when you visit this website, for what purpose and on which legal basis, and what rights you have. I deliberately keep data processing lean: this website sets no cookies, loads no fonts or scripts from third parties and runs on my own server in the EU.

Controller

Benjamin Schey Hofstelle 10 75050 Gemmingen Germany

Email: bebonsai@pm.me

I have not appointed a data protection officer, as there is no legal obligation to do so.

Hosting

This website and the content management system (Directus, at cms.bebonsai.de) run on my own server at Contabo GmbH, Munich, in a data centre in the EU. A data processing agreement with Contabo is in place (Art. 28 GDPR).

To deliver a page to you, the server briefly processes your IP address and the technical details your browser sends (e.g. browser type, operating system, page requested). I only use this data to deliver the website. The server does not keep access logs (log files) with IP addresses. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in providing the website securely and reliably.

Fonts and images

Fonts, images and all other files of this website are loaded from my own server (bebonsai.de or cms.bebonsai.de). There is no connection to third-party servers such as Google Fonts.

Cookies and local storage

This website sets no cookies and stores nothing in your browser's local storage. The statistics (Umami, see below) also work without cookies. The language follows from the address (English under /en); filters such as in the species finder only apply while the page is open.

Audience measurement with Umami

To see which guides are read, I use Umami, a privacy-friendly analytics software. Umami runs on my own server (analyse.frysch.studio, also hosted by Contabo GmbH in the EU). The data is not passed on to anyone.

Umami sets no cookies and creates no user profiles. It records: the page visited, the page you came from, browser, operating system, device type, country and clicks on advertising links. Your IP address is not stored. Umami only uses it together with a few browser features to create an anonymous value that changes regularly, so visits can be counted without recognising you. If your browser sends "Do Not Track", you are not recorded at all.

The legal basis is my legitimate interest in improving the website and knowing the reach of its content (Art. 6(1)(f) GDPR). I delete the statistics data after 14 months at the latest.

I take part in the Amazon Associates Programme (Amazon Europe Core S.à r.l., Luxembourg). Advertising links to Amazon are marked with an asterisk (*) or as "advertising link". This website does not load any scripts, images or widgets from Amazon for this. As long as you don't click, Amazon learns nothing about your visit.

Only when you click an advertising link are you taken to Amazon. The link contains my partner ID so that Amazon can attribute a purchase to me. From then on, Amazon is responsible for processing your data, including any cookies Amazon sets. More in Amazon's privacy notice. I only receive aggregated figures on clicks and sales from Amazon, no information about you.

My statistics (Umami, see above) also count that an advertising link was clicked, without any reference to you.

The legal basis is my legitimate interest in funding the website through commissions (Art. 6(1)(f) GDPR).

Contact by email

If you send me an email, I process your details (email address, possibly your name and the content of the message) in order to reply. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest lies in answering your message. I delete your message once it has been dealt with, at the latest after 12 months without further contact.

My mailbox is hosted by Proton AG, Geneva (Switzerland). Switzerland is covered by an adequacy decision of the European Commission, so its level of data protection is comparable to the EU.

This website contains links to other websites. These are simple links: only when you click one are you taken to the respective site, and its operator receives data from you. The privacy policy of the respective provider applies there.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.

Your rights

You have the following rights regarding your personal data:

  • access to the stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An informal message to me is enough to exercise your rights.

Right to object under Art. 21 GDPR

If I process your data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you may object at any time on grounds relating to your particular situation. I will then no longer process your data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR. The authority responsible for me is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg Lautenschlagerstraße 20 70173 Stuttgart, Germany Website: baden-wuerttemberg.datenschutz.de

Obligation to provide data and automated decisions

You are under no legal or contractual obligation to provide me with personal data. No automated decision-making, including profiling under Art. 22 GDPR, takes place.

Changes to this privacy policy

I update this privacy policy when the website, the services used or the legal situation change, for example when analytics (Umami) is added. The version published here applies; the date above shows the current status.