Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation is:

Email

buisness@schlosser.agency

Phone

+49 174 4895145

[[If a data protection officer has been appointed, add name and contact details here. Under section 38 BDSG an appointment is generally required from 20 people permanently engaged in the automated processing of personal data.]]

2. Principles

We process personal data only to the extent necessary to provide a functioning website along with our content and services. Processing generally takes place only with your consent or where a legal basis permits it.

This website sets no cookies for analytics or marketing. There is no tracking, no profiling, and no transfer of data to advertising networks. A consent banner is therefore not required.

3. Hosting and delivery (Cloudflare)

This website is delivered via the infrastructure of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, and its European subsidiary. When you open the site, Cloudflare processes technical connection data on our behalf.

This includes in particular:

• the IP address of the requesting device
• date and time of access
• the address requested and the transfer status
• the volume of data transferred
• browser type, browser version and operating system
• the previously visited page (referrer), where transmitted

This data is technically necessary to deliver the site, ensure its stability and defend against attacks. The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in the secure and reliable provision of the service.

A data processing agreement under Article 28 GDPR is in place with Cloudflare. To the extent that data is transferred to the USA, the transfer is based on the European Commission’s standard contractual clauses under Article 46 (2) (c) GDPR and on Cloudflare’s certification under the EU-US Data Privacy Framework. We have configured delivery so that requests from Europe are processed primarily in European data centres.

For more information see Cloudflare’s privacy policy at cloudflare.com/privacypolicy.

4. Contact form and email

If you send us an enquiry via the contact form or by email, we process the details you provide in order to handle that enquiry.

Name, email address and your message are required. Company, budget range and the services you are interested in are optional.

The legal basis is your consent under Article 6 (1) (a) GDPR, which you give explicitly in the form. Where your enquiry is aimed at concluding or performing a contract, Article 6 (1) (b) GDPR applies in addition.

You may withdraw your consent at any time with effect for the future, an informal message to the address above is sufficient. The lawfulness of processing carried out before withdrawal remains unaffected.

The enquiry is stored in a Cloudflare database (Cloudflare D1, located in the European Union) and additionally delivered to us by email. For security reasons we store, alongside the enquiry, the time of receipt, a shortened form of the IP address and the result of the spam check.

We delete your enquiry once it has been dealt with conclusively and no statutory retention obligations stand in the way, and at the latest after 24 months. If the enquiry leads to a contractual relationship, the commercial and tax retention periods of six and ten years respectively apply.

5. Spam protection (Cloudflare Turnstile)

To protect the contact form against automated submissions we use Cloudflare Turnstile. Turnstile uses technical characteristics of the browser to assess whether the input comes from a human.

Technical data such as IP address, browser information and interaction patterns is transmitted to Cloudflare and evaluated there. According to Cloudflare, no cookies are set for advertising purposes and no personal profiles are built across websites.

The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest is in protecting our form from misuse and automated submission.

If you would rather not go through the check, you can reach us at any time directly by email or telephone using the contact details above.

6. Fonts and embedded content

All typefaces used on this website are served from our own server. There is no connection to third-party servers, in particular not to Google Fonts. No maps, videos, social network buttons or other third-party content are loaded.

7. Local storage in the browser

For the transition animation between two pages, the website stores a short-lived technical value in your browser’s session storage. It contains no personal data, is never transmitted to us, and expires when you close the tab. The legal basis for this technically necessary access is section 25 (2) no. 2 TDDDG.

8. Your rights

In relation to personal data concerning you, you have the following rights:

• right of access (Article 15 GDPR)
• right to rectification (Article 16 GDPR)
• right to erasure (Article 17 GDPR)
• right to restriction of processing (Article 18 GDPR)
• right to data portability (Article 20 GDPR)
• right to object to processing (Article 21 GDPR)
• right to withdraw consent given (Article 7 (3) GDPR)

Right to object: where we process data on the basis of legitimate interests under Article 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is the supervisory authority of the federal state in which we are established: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, baden-wuerttemberg.datenschutz.de.

9. Data security

This website is delivered exclusively over an encrypted TLS connection (indicated by the padlock in your browser’s address bar). Access to stored enquiries is limited to the people who need it in order to handle them.

10. Changes to this policy

We update this privacy policy whenever changes to our website or to the law make it necessary. The version available on this page applies.