Privacy

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

This is a static website without user accounts, comments or analytics. Specifically:

• No cookies are set.
• There is no audience measurement and no tracking.
• No content is loaded from third-party servers, no Google Fonts, no CDN, no embedded videos or maps. The Inter typeface is served from this site.
• The only data transmitted is what you enter into the contact form and send yourself, see section 5.

Because no cookies are set and no third-party services are embedded, there is no consent banner either.

The website runs on a virtual server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; the server is located in Nuremberg. Domain and name servers are with ALL-INKL.COM, Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with both providers.

The web server of this site keeps no access log. The server log files usually kept, with IP address, time, file retrieved, volume of data, browser, operating system and referrer, are not written here and therefore neither stored nor evaluated.

Technical messages from the web server and the services, such as dropped connections or errors, go into the system journal of the server. They occur on an incident basis, contain no continuous record of visitors and are overwritten by size, in practice within a few weeks. The legal basis is Art. 6 (1) (f) GDPR, the legitimate interest lies in the technically error-free and secure operation.

Independently of this, Hetzner as the operator of the infrastructure processes connection data for its own operation and for defending against attacks. The Hetzner privacy policy applies to that.

When you switch the language or the colour scheme in the header, the site remembers that choice in your browser's local storage (localStorage):

• sm-cv-lang, the chosen language (de or en)
• sm-cv-theme, the chosen colour scheme (light or dark)

These entries contain no personal data, are not transmitted to the server and are not evaluated. They serve solely to keep a setting you chose explicitly; storing them is strictly necessary for that purpose within the meaning of section 25 (2) no. 2 TDDDG. You can delete the entries at any time in your browser settings. Without them the site follows your system's language and colour scheme again.

What data is processed

• name and email address (required)
• organisation and subject (optional)
• your message
• your consents, the time of receipt, the language of the page and the version of the consent text, as the record required by Art. 7 (1) GDPR

Providing the data is voluntary. Without a name, an email address and a message I cannot handle the enquiry. Your IP address is not stored.

Purpose and legal basis

The data is used solely to handle your enquiry and any follow-up questions. The legal basis is your consent under Art. 6 (1) (a) GDPR, which you give explicitly in the form. Where the enquiry relates to entering into or performing a contract, Art. 6 (1) (b) GDPR applies in addition. The data is not passed on for advertising and not evaluated for profiling.

Where the data goes

Sending the form does two things: the entries are stored in a database on the server and forwarded by email to info@seemarke.com. Delivery runs through Microsoft 365. The recipients are therefore Hetzner Online GmbH as the operator of the server and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, each as a processor under Art. 28 GDPR.

Microsoft processes the data within Europe. Access by group companies in third countries, in particular in the United States, is not ruled out. The basis for that is the Microsoft data protection addendum and the standard contractual clauses it contains, pursuant to Art. 46 (2) (c) GDPR.

How long it is stored

Without the second, optional consent the data is deleted once the enquiry has been dealt with, at the latest after six months. With the second consent the data stays stored for follow-up questions and possible later collaboration until you withdraw it, but no longer than 24 months. Statutory retention periods, for example under commercial or tax law, remain unaffected.

Withdrawal

You can withdraw your consents at any time, informally and with effect for the future, for example by email to the address above. The lawfulness of the processing carried out until then is unaffected. After withdrawal the data is deleted unless a statutory retention obligation applies.

Protection against misuse

The form contains a field that is invisible to you and detects automated submissions, and it limits the number of messages per sender. For that limit the IP address is held only as a non-reversible hash in memory and discarded when the service restarts. Transmission is encrypted.

Contact by email or phone

If you contact me directly by email or phone, your details are likewise processed in order to handle the enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to entering into or performing a contract, otherwise Art. 6 (1) (f) GDPR based on the legitimate interest in answering it.

This website uses TLS encryption. You can recognise an encrypted connection by the browser address bar starting with https://.

You have the following rights in relation to the controller:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An informal message to the address above is enough to exercise these rights.

Irrespective of the above, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for the controller is Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Schloss Schwerin, Lennéstraße 1, 19053 Schwerin, Germany, phone +49 385 59494-0, info@datenschutz-mv.de.

This privacy policy will be adjusted whenever the website or the legal requirements change. The version available here applies in each case.