Privacy Policy

1. General Information and Principles of Data Processing

We are pleased to welcome you to our website. The protection of your privacy and your personal data when using our website is of paramount importance to us. Pursuant to Art. 4 No. 1 GDPR, personal data means any information relating to an identified or identifiable natural person. This includes, for example, your first and last name, your address, your telephone number, your email address, and your IP address. Data that cannot be linked to your person, such as through anonymisation, does not constitute personal data. Any processing (e.g. collection, storage, retrieval, consultation, use, transmission, erasure or destruction) pursuant to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be erased once the purpose of processing has been fulfilled and no statutory retention obligations remain. This page provides information on how your personal data is handled when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect certain personal data about you. We also explain the nature and scope of the respective data processing, the purpose and applicable legal basis, and the respective retention period. This Privacy Policy applies solely to this website and not to any third-party websites to which we may link via hyperlinks. We cannot assume responsibility for the confidential handling of your personal data on such third-party websites, as we have no influence over whether those parties comply with data protection regulations. Please refer directly to those websites for information on how your personal data is handled.

2. Responsible party

The party responsible for the processing of personal data on this website is (see Legal Notice):

Ashley VongWurmberger Straße 5971299 , WimsheimGermany

Telephone: +49 176 57793041Email: ashleyvong56@gmail.com

3. Provision and Use of the Website / Server Log Files

a) Nature and Scope of Data Processing

When you use this website without otherwise transmitting data to us, we collect technically necessary data via server log files that are automatically transmitted to our server, including:

  • IP address
  • Date and time of the request
  • Name and URL of the requested file
  • Website from which access was made (referrer URL)
  • Access status / HTTP status code
  • Browser type
  • Language and version of the browser software
  • Operating system

b) Purpose and Legal Basis

This processing is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website. The legal basis for this processing is Art. 6(1)(f) GDPR. The processing of the aforementioned data is required for the provision of a website and thus serves the legitimate interests of our organisation.

c) Retention Period

The aforementioned personal data will be erased as soon as it is no longer required for the display of the website. The collection of data for the provision of the website and its storage in log files is strictly necessary for the operation of the website. Accordingly, users have no right to object in this regard. Further retention may occur in individual cases where required by law.

4. Data Transfers

We will only transfer your personal data to third parties where:

a) You have given your express consent in accordance with Art. 6(1)(a) GDPR.

b) This is legally permissible and required pursuant to Art. 6(1)(b) GDPR for the performance of a contract with you or for the implementation of pre-contractual measures.

c) There is a legal obligation to transfer the data pursuant to Art. 6(1)(c) GDPR. We are legally required to transmit data to public authorities, such as tax authorities, social security institutions, health insurers, supervisory authorities, and law enforcement agencies.

d) The transfer is necessary pursuant to Art. 6(1)(f) GDPR for the purposes of safeguarding legitimate interests or for the establishment, exercise, or defence of legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.

e) We engage external service providers as processors pursuant to Art. 28 GDPR, who are contractually obligated to handle your data with due care. We engage such service providers in the following areas:

  • IT
  • Telecommunications
  • Web development and technical website maintenance

Where data is transferred to external recipients in third countries, i.e. outside the EU or EEA, we ensure that those recipients handle your personal data with the same standard of care as within the EU or EEA. We only transfer personal data to third countries where the European Commission has confirmed an adequate level of protection, or where we ensure appropriate handling of personal data through contractual arrangements or other suitable safeguards.

5. Contact via Email

a) Nature and Scope of Data Processing

You may contact us by email. In doing so, we collect only the email address of the account you use to contact us, as well as any personal data you voluntarily provide in the course of your enquiry.

b) Purpose and Legal Basis

The purpose of processing this data is to enable us to respond to your enquiry appropriately. The legal basis is Art. 6(1)(f) GDPR. There is a legitimate interest in processing the aforementioned personal data in order to handle your enquiry properly.

c) Retention Period

The retention period for the data described above depends on the nature of your enquiry. Your personal data will be routinely erased once the purpose of the communication has been fulfilled and retention is no longer required. This is the case, for example, when your data is no longer necessary for its original purposes, you have withdrawn your data protection consent, or the data has been processed unlawfully.

6. Tracking and Analytics Tools

Vercel Web Analytics

We use the analytics service Vercel Web Analytics provided by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA („Vercel“) . This privacy-friendly tool collects exclusively aggregated usage data, without the use of cookies and without creating personal profiles. The following information may be collected:

  • Referrer URL (the page from which a visitor arrived)
  • Time and duration of use
  • Device and browser information (e.g. screen size, language settings)

Full IP addresses are not stored; it is therefore not possible to identify individual users. Data is processed exclusively on servers within the EU. The purpose of processing is to analyse user behaviour on our website in order to continuously improve its content and usability. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the optimisation of our online offering. The collected data will be erased by us as soon as it is no longer required for the aforementioned purposes. For further information on data protection at Vercel Web Analytics, please visit:

https://vercel.com/legal/privacy-policy

7. Third-Party Providers

Our website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA („Vercel“) . Technical operations are carried out on Vercel's servers located in Frankfurt am Main, Germany. Each time our website is accessed, Vercel processes certain technical data required for the secure and efficient provision of the website, including in particular:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page accessed)
  • Access status / HTTP status code
  • Volume of data transferred
  • Website from which the request originates (referrer URL)
  • Browser type, operating system and its interface, as well as language and version of the browser software

This data is generally stored in log files and automatically deleted after a short period. It is not combined with other data sources. As Vercel is a US-based company, access to personal data from the United States cannot be entirely excluded. However, Vercel is certified under the EU–U.S. Data Privacy Framework (DPF), which establishes an adequate level of data protection for any such transfers to the United States pursuant to Art. 45 GDPR. For further information, please visit:

https://vercel.com/legal/privacy-policy

Lixify eGbR (Web Development and Technical Maintenance)

The technical development and maintenance of this website is carried out by Lixify eGbR, Mannheimer Straße 168, 55543 Bad Kreuznach, Germany („Lixify“,). In the course of providing technical support, Lixify may, on behalf of the data controller, gain access to personal data processed in connection with the operation of the website. Lixify processes such data exclusively in accordance with our instructions and not for its own purposes. The engagement of Lixify is governed by a data processing agreement (DPA) pursuant to Art. 28 GDPR. Lixify is obligated to implement appropriate technical and organisational measures to protect the data. Lixify does not transfer data to third countries. For further information on data processing by Lixify, please visit:

https://lixify.de/rechtliches/datenschutz

8. Data Security and Security Measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we implement extensive technical and organisational security measures, which are regularly reviewed and updated in line with technological developments. These measures include, among others, the use of recognised encryption methods (SSL or TLS). Please note, however, that data transmitted without encryption — such as via unencrypted email — may potentially be read by third parties. We have no control over this. It is the responsibility of each user to protect the data they provide against misuse through encryption or other appropriate means.

9. Amendments to this Privacy Policy

We reserve the right to update this policy as necessary at any time.

10. Your Rights

Below you will find an overview of your rights with respect to your personal data. Further details are set out in Articles 7, 15–22 and 77 GDPR. You may exercise these rights by contacting the data controller (see Section 2). Right to withdraw your data protection consent pursuant to Art. 7(3) sentence 1 GDPR a) Right of access pursuant to Art. 15 GDPR You have the right to request confirmation as to whether we are processing personal data concerning you. If so, you have the right to access that personal data and to receive further information, such as the purposes of processing, the categories of personal data concerned, the recipients, and the intended retention period or the criteria used to determine that period. b) Right to rectification and completion pursuant to Art. 16 GDPR You have the right to request the immediate rectification of inaccurate data. Taking into account the purposes of processing, you also have the right to request the completion of incomplete data. c) Right to erasure („right to be forgotten“) pursuant to Art. 17 GDPR You have the right to request erasure where processing is no longer necessary. d) Right to restriction of processing pursuant to Art. 18 GDPR You have the right to request restriction of processing, for example if you believe the personal data is inaccurate. e) Right to data portability pursuant to Art. 20 GDPR You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. f) Right to object pursuant to Art. 21 GDPR You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling insofar as it is related to such direct marketing. g) Automated individual decision-making including profiling pursuant to Art. 22 GDPR You have the right not to be subject to a decision based solely on automated processing — including profiling — except in the cases referred to in Art. 22 GDPR. No decision-making based solely on automated processing, including profiling, takes place. h) Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR You also have the right to lodge a complaint with a data protection supervisory authority at any time, for example if you consider that the processing of your personal data is not in compliance with data protection law.

Last updated: