Privacy policy
Last updated: 11 October 2026
Controller and contact
The controller for this website is Thomas Holenz. For privacy questions or to exercise your rights, use the contact details below.
Thomas Holenz
Independent artist
Hoyeler Kirchring 17 49328 Melle Deutschland
Contact
Phone: 05226 / 7006424
Email: joe-thomas@web.de
Website delivery and security
When you visit the website, technical connection data, particularly your IP address, the requested address, time and browser information, are processed to deliver the page. Netcup hosts the application and Cloudflare delivers and protects it. Error and security logs support reliable operation and investigation of faults; application request logs are normally deleted after 14 days unless a specific incident requires longer retention. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating this website securely. These logs are separate from visitor statistics.
Service providers and international transfers
Anjunar (Patrick Bittner) operates this website on behalf of Thomas Holenz. Netcup provides hosting, Cloudflare provides content delivery and security, and Anjunar currently uses GMX for automated account and service emails. These providers receive only the data needed for their tasks. Cloudflare may process connection data outside the European Economic Area; according to Cloudflare, its data processing terms provide safeguards including EU standard contractual clauses for relevant transfers.
Cookies and browser storage
Requested features such as sign-in and security may use necessary cookies or similar storage. Necessary device access is based on Section 25(2) TDDDG; the associated processing is based on Article 6(1)(b) or (f) GDPR.
Contact and enquiries about artwork
If you contact us by email or telephone, we process the contact details you provide and the content of your enquiry to answer it and, where applicable, discuss an artwork or commission. Thomas Holenz and people authorised to handle your enquiry can access these data. Email service providers process data needed to deliver correspondence.
Processing to enter into or perform a contract is based on Article 6(1)(b) GDPR; other correspondence is based on Article 6(1)(f) GDPR and our interest in answering your enquiry. We delete enquiries once they are no longer needed. Statutory retention duties and documents needed to establish or defend legal claims may prevent earlier deletion.
User accounts
If you use an account, we process the account and profile data you provide and information needed for sign-in and account security. Public profile information is visible to other visitors. Account provision is based on Article 6(1)(b) GDPR; abuse prevention is based on Article 6(1)(f) GDPR. Account data are retained while you use the account and then deleted unless legal obligations or legitimate reasons require further retention. Do not publish confidential information in public profile fields.
External links, fonts and images
External links lead to separate websites. When you follow them, the respective provider's privacy notice applies. Fonts and images provided on this website are delivered through the website.
Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time for future processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. We do not make solely automated decisions with legal or similarly significant effects.
You may complain to a data protection supervisory authority, particularly the State Commissioner for Data Protection of Lower Saxony. To contact us about your data, use the contact details above.