In short: this website does not use any tracking, analytics, advertising or external services. Fonts and scripts are served from this server. Only the data technically necessary to operate the site and to answer your messages is processed.
Controller
Ben Frings
E-mail: contact@frings.net
Hosting
This website and the mail server run on servers of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. Data is processed exclusively in data centers within the EU.
Server log files
When you visit the site, the server automatically records: IP address, date and time, requested page, HTTP status, transferred data volume, referrer URL and browser identification (user agent). This is necessary to deliver the site securely and to detect and block attacks (e.g. automatic blocking of IP addresses after repeated failed attempts). Legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is the secure and stable operation of the site. The log files are rotated automatically and deleted after about five weeks. They are not merged with other data.
Cookies and local storage
Only technically necessary cookies are used; no consent is required for these (§ 25 (2) no. 2 TDDDG):
PHPSESSID– session for protecting the contact form against misuse (CSRF and spam protection); deleted when you close the browser.lang– your chosen language; stored for 1 year.theme– your chosen color scheme; stored for 1 year.
The XP desktop additionally stores icon positions, whether Karl is hidden and which cheats you have found in your browser's local storage. This data never leaves your device and can be deleted at any time in your browser settings.
Contact form and e-mail
If you send me a message via the contact form or by e-mail, I process your name, e-mail address and message in order to answer you. The message is delivered to me by e-mail via my own mail server (see Hosting). Legal basis is Art. 6 (1) (b) GDPR if your request relates to a (pre-)contractual matter, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering inquiries). I delete the data once your request has been dealt with, unless statutory retention obligations apply.
To protect against spam, the form uses a hidden honeypot field, a time check and a limit of three messages per 15 minutes per IP address; for this, a hash value of your IP address is stored temporarily for 15 minutes. Messages detected as spam are discarded; the IP address and e-mail address of such attempts end up in the server's error log.
Recipients and third countries
Your data is not passed on to third parties and not transferred to countries outside the EU.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6 (1) (f) GDPR (Art. 21). An e-mail to contact@frings.net is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority, for example the one in the federal state where you live.
Encryption
The site is delivered exclusively via HTTPS (TLS).
Last updated: October 2026