Privacy Policy

The controller responsible for processing personal data in connection with this website is:

When a website is accessed, technically necessary request data may be processed. This may include the IP address, date and time of access, the requested page or resource, the referring page if transmitted, response status, amount of data transferred, and browser, operating system or device information.

The public website is hosted through Cloudflare. As a hosting and infrastructure provider, Cloudflare may process request and traffic data in connection with technical delivery, performance and security functions. The applicable storage periods depend on the relevant hosting and security configuration; no fixed storage period is stated here.

OneOnceAll does not use advertising systems. Cloudflare Web Analytics is used as described separately below. The website has no forms, newsletter signup or its own backend data processing.

OneOnceAll uses Cloudflare Web Analytics, including for visits from the European Union, to obtain privacy-oriented aggregate statistics about website usage and technical performance. The service uses a browser-side RUM (Real User Monitoring) beacon that collects measurement data from browser performance interfaces and transmits it to Cloudflare for processing.

For this analytics measurement, the beacon does not use cookies, Local Storage, Session Storage or IndexedDB. OneOnceAll does not use Cloudflare Web Analytics to create individual visitor profiles or track individual visitors across websites. Its purpose is to understand aggregate website usage and technical performance.

Inter and Orbitron are delivered locally from the OneOnceAll website. Loading these fonts does not establish a connection to Google Fonts.

YouTube content on the Music page is not loaded automatically. Before activation, no YouTube player is embedded and no connection to YouTube or Google is established by the video element.

Only when a visitor actively selects “LOAD VIDEO” is a player from youtube-nocookie.com inserted. This transmits data to YouTube/Google and may cause further resources to be loaded. The data processed may include the IP address, browser and device information, information about the page and video accessed, and the time of the request.

After activation, YouTube may use its own technologies or storage mechanisms. The use of youtube-nocookie.com does not mean that the activated player is completely anonymous or free of tracking. Activation is voluntary, and the video does not need to be loaded to use the rest of the website.

Links to YouTube, X and Instagram are ordinary external links. As long as they are not selected, OneOnceAll does not load content from these platforms through the links. After a link is selected, the privacy practices of the respective external provider apply.

If a visitor voluntarily sends an email to contact@oneonceall.com, the information contained in that message is processed to handle and respond to the request.

Messages are generally retained only for as long as necessary to process the request, conduct any related follow-up communication, or comply with applicable legal retention obligations.

• Technically necessary processing for the secure and functional provision of the website is based on Article 6(1)(f) GDPR. The legitimate interest is the secure, reliable and technically effective operation of the website.
• The YouTube player is loaded only after the visitor has actively consented by selecting “LOAD VIDEO”. Where consent is required, the legal basis is Article 6(1)(a) GDPR.
• Email communication is processed under Article 6(1)(b) GDPR where it relates to contractual or pre-contractual matters, and otherwise under Article 6(1)(f) GDPR based on the legitimate interest in handling and responding to enquiries.

Depending on the interaction, relevant recipients or service-provider categories are:

• Cloudflare as the hosting and infrastructure provider and as the provider of Cloudflare Web Analytics;
• YouTube/Google only after the voluntary activation of a video; and
• email infrastructure providers to the extent necessary to deliver messages sent to contact@oneonceall.com.

When Cloudflare services are used, or after a visitor activates a YouTube video, processing of data outside the European Union or European Economic Area cannot be excluded. The specific processing locations and transfer arrangements depend on the provider and the services and configurations in use. The respective providers may use their own legal transfer mechanisms and safeguards for such processing.

Subject to the conditions of the GDPR, data subjects may have the right to:

• access their personal data;
• rectification of inaccurate data;
• erasure of personal data;
• restriction of processing;
• object to processing based on legitimate interests;
• data portability where applicable;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal; and
• lodge a complaint with a competent data protection supervisory authority.

Requests concerning these rights may be sent to contact@oneonceall.com.

Competent supervisory authority:
The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Wilhelmstraße 7
65185 Wiesbaden
Germany

OneOnceAll does not use automated decision-making or profiling on this website.

This privacy policy may be updated if the website, its hosting setup or the services used change. The version published on this page applies.