Privacy Policy
Last updated: September 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
HERZBERGMEDIA, owner Jens Harald Herzberg
Habsburgerring 1
50674 Cologne, Germany
Phone: +49 221 259 0539
Email: info@herzbergmedia.com
2. General information
We process personal data only insofar as this is necessary to provide a functional website and our content, or where you have given your consent. This website is deliberately data-minimising: we use no cookies and no third-party analytics, advertising or social-media services. For audience measurement we use exclusively a cookie-free solution operated by ourselves on our own servers in Germany (see section 8).
3. Hosting
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The legal basis is our legitimate interest in the secure and efficient provision of our online offering (Art. 6 (1) (f) GDPR).
4. Server log files
When the website is accessed, the hosting provider automatically collects information in server log files that your browser transmits: the page/file requested, date and time, volume of data transferred, notification of successful retrieval, browser type and version, operating system, referrer URL and the (shortened or anonymised) IP address. This data is used solely for technical provision, security and stability. The legal basis is Art. 6 (1) (f) GDPR. Log files are deleted after a short period unless required to defend against attacks.
5. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.
6. Contact form and email contact
If you contact us via the contact form or by email, we process the data you provide — name, company (optional), email address and the content of your message — in order to handle your enquiry. Name, email and message are required for this; any further details are voluntary.
The legal basis is your consent (Art. 6 (1) (a) GDPR), the performance of pre-contractual measures (Art. 6 (1) (b) GDPR) and our legitimate interest in responding to your enquiry (Art. 6 (1) (f) GDPR). We store the data until your enquiry has been conclusively dealt with and then delete it, unless statutory retention obligations apply. You may withdraw any consent given at any time with effect for the future.
To prevent spam we use technical measures (including a hidden form field and a rate limit); no additional personal profiles are created in the process.
7. Email delivery (processor)
To send and receive the emails triggered by the contact form, we use the email service of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes the data on our behalf on servers in Germany (processing on behalf pursuant to Art. 28 GDPR).
8. Audience measurement, no cookies, local fonts
Audience measurement with Umami (self-hosted). In order to understand which content is used, we deploy the open-source software Umami. Umami runs on our own servers at Hetzner Online GmbH in Germany; the data collected does not leave our infrastructure and is not transmitted to any third party. No transfer to a third country takes place.
Only aggregated usage data is recorded: the page requested, the referring page, approximate origin at country level, device type, screen size, browser and operating system. No cookies are set and no information on your end device is accessed; consent pursuant to § 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act) is therefore not required (§ 25 (2) no. 2 TDDDG).
Your IP address is not stored. It is used only transiently, together with further details, to form an irreversible checksum that makes the visits of a single day distinguishable from one another. This checksum changes daily and cannot be traced back to you; cross-site or persistent recognition is thereby ruled out.
The legal basis is our legitimate interest in a data-minimising, statistical evaluation of website usage (Art. 6 (1) (f) GDPR). You may object to this processing at any time (Art. 21 GDPR, see section 10). No measurement takes place if you have activated the Do Not Track setting in your browser or use a content blocker.
Local fonts. The fonts used are served locally from our server; in particular, no connection is made to third-party servers (e.g. Google Fonts).
9. External links
Our website contains links to external services, such as the login application at app.virtualcampaign.dev and our YouTube channel. When you click these links you leave our website; we have no influence on the data processing that takes place there. The privacy policies of the respective providers apply.
10. Your rights
Within the statutory framework you have the right at any time to:
- access to the data stored about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- objection to processing (Art. 21 GDPR) and
- withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR).
To exercise your rights, an informal message to info@herzbergmedia.com is sufficient.
11. Right to lodge a complaint
Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.
12. Newsletter, download requests and ad-surface requests
Newsletter: If you subscribe to our newsletter, we process your e-mail address, the language you selected and the page from which you signed up. Sign-up uses a double opt-in: you receive an e-mail with a confirmation link, and your address is added to our mailing list only once you click it. The link is valid for seven days; without confirmation we store nothing. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe at any time – by e-mail to info@virtualcampaign.de or via the unsubscribe link in every issue; your address is then removed from the list. We keep the mailing list in a spreadsheet at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on the basis of the EU Standard Contractual Clauses; sending is handled by IONOS SE (section 7).
Download in the Creative Simulator: Testing the Creative Simulator on this website is possible without providing any data. If you want to download the result as a video or image file, we ask for your e-mail address and your company and record your consent that we may contact you about this test (Art. 6 (1) (a) GDPR). The file itself is created in your browser and is not transmitted to us. We delete the details once the contact is concluded, and at the latest after twelve months without a reply.
Ad-surface request (“Your ad surface as a simulator”): Through this form you send us your name, company, e-mail address, optionally a phone number, a description of your advertising surface and up to three photos. The photos are not stored on the web server; they are transmitted to us solely as e-mail attachments and used to build the simulation surface. The legal bases are your consent and the performance of pre-contractual measures (Art. 6 (1) (a) and (b) GDPR). On request we delete photos and details at any time.
The spam protection described in section 6 applies to all three forms.