1. Data Controller

Christian Drapatz, Kämpenstraße 42, 45147 Essen, Germany

Email: support (at) onetwoapps . com

2. Hosting (IONOS) and Server Log Files

This website is hosted by IONOS. When you access the website, the web server automatically processes data in so-called server log files. This typically includes your IP address, date/time, the requested page/file, referrer URL, browser/operating system, and status codes.

Purpose: Secure operation of the website, defense against attacks, and troubleshooting.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

Retention period: [e.g., 7 days / according to IONOS configuration], after which the data is deleted or anonymized.

An agreement on data processing on behalf (DPA) pursuant to Art. 28 GDPR can be concluded with IONOS.

3. Cookies and Language Selection (Polylang)

We use Polylang for the language versions of this website. Polylang typically sets a cookie named pll_language to store the last selected language (default retention: 1 year; configurable).

Purpose: Displaying the selected language / usability.

Legal basis: Art. 6(1)(f) GDPR. (Depending on the specific implementation, § 25 TDDDG may also apply; we only use cookies that are required for the website’s functionality, or we obtain prior consent where necessary.)

4. Google Fonts

We use fonts (“Google Fonts”) to ensure a consistent appearance.

• If Google Fonts are embedded locally: The fonts are stored on our server. No connection to Google servers is established.

• If Google Fonts are loaded from Google servers: When the website is accessed, a connection to Google is established and, among other things, the IP address and technical data may be transmitted. In this case, we load the fonts only after consent. Background: External loading has been subject to legal scrutiny in Germany.

5. YouTube Videos

This website may embed YouTube videos (provider: Google Ireland Limited). Where possible, we use a two-click solution: first, only a preview is shown; the video is loaded only after you actively click, and data may then be transmitted to YouTube. Two-click approaches are a common privacy-friendly practice, including on public-sector websites.

When the video is loaded, personal data (e.g., IP address, device information, and the page visited) may be processed. If you are logged in to Google/YouTube, the usage may be associated with your account.

Legal basis: Consent where required (Art. 6(1)(a) GDPR) and § 25 TDDDG. You can withdraw your consent at any time via [consent tool/link “Cookie Settings”].

6. Contact Form

If you contact us via a contact form, we process the data you provide (e.g., name, email address, message) in order to respond to your request.

Purpose: Handling and responding to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract / performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in communication).

Retention period: [e.g., 6 months], unless statutory retention obligations require longer storage.

7. Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object. You also have the right to lodge a complaint with a data protection supervisory authority.

8. Last Updated

Last updated: 01/01/2026

Legal Notice