Privacy Policy

Information about the processing of your data according to the General Data Protection Regulation (GDPR)

Personal data is collected for every website (see below, I.2., Data processed for website provision and log file creation).

I. Information about the processing of your data according to Art. 13 GDPR

1. Responsible Party and Data Protection Officer

Responsible for this website is:

Liam Hess Alter Heeresweg 11 Königswinter, 53639 Germany liam.s.d.hess@gmail.com

You can reach the data protection officer by email at:

liam.s.d.hess@gmail.com

or via the address:

Alter Heeresweg 11 Königswinter, 53639 Germany

2. Data processed for website provision and log file creation

a. Which data is processed for which purpose?

Every time content on the website is accessed, data is temporarily stored that may allow identification. The following data is collected:

• Date and time of access
• IP address
• Hostname of the accessing computer
• Website from which the website was accessed
• Websites accessed via the website
• Visited page on our website
• Message whether the retrieval was successful
• Amount of data transferred
• Information about browser type and version used
• Operating system

The temporary storage of data is necessary for the operation of a website visit to enable delivery of the website. Further storage in log files is carried out to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies in these purposes.

b. On what legal basis is this data processed?

The data is processed on the basis of Art. 6 para. 1 letter f GDPR.

c. Are there other recipients of personal data besides the responsible party?

The website is hosted at Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. The host receives the above-mentioned data as a processor.

d. How long is the data stored?

The data is deleted as soon as it is no longer required to achieve the purpose of its collection. When providing the website, this is the case when the respective session has ended. The log files are kept accessible directly and exclusively for administrators for [maximum 24 hours]. After that, they are only indirectly available through the reconstruction of backup tapes and are permanently deleted after [maximum four weeks].

3. Rights of Data Subjects

a. Right to information

You can request information according to Art. 15 GDPR about your personal data that we process.

b. Right to object

You have a right to object for special reasons (see under point II).

c. Right to rectification

If the information concerning you is not (no longer) accurate, you can request a correction according to Art. 16 GDPR. If your data is incomplete, you can request completion.

d. Right to deletion

You can request the deletion of your personal data according to Art. 17 GDPR.

e. Right to restriction of processing

You have the right according to Art. 18 GDPR to request a restriction of the processing of your personal data.

f. Right to complaint

If you believe that the processing of your personal data violates data protection law, you have the right according to Art. 77 para. 1 GDPR to file a complaint with a data protection supervisory authority of your choice. This also includes the data protection supervisory authority responsible for the responsible party: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.

g. Right to data portability

In the event that the requirements of Art. 20 para. 1 GDPR are met, you have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data for website provision and storage of log files are mandatory for the operation of the website. They are therefore not based on consent according to Art. 6 para. 1 letter a GDPR or on a contract according to Art. 6 para. 1 letter b GDPR, but are justified according to Art. 6 para. 1 letter f GDPR. The requirements of Art. 20 para. 1 GDPR are therefore not met in this respect.

3. Email addresses for service notifications

a. Which data is processed for which purpose?

We collect email addresses from users who join our waitlist to notify them when our localization service goes live. The following data is collected:

• Email address
• Timestamp of registration
• IP address (automatically collected)
• Browser information (automatically collected)

The email addresses are used exclusively to inform users about the launch of our service and important service-related updates. We do not use these email addresses for marketing purposes beyond the initial service launch notification.

b. On what legal basis is this data processed?

The data is processed on the basis of Art. 6 para. 1 letter a GDPR (consent). Users voluntarily provide their email address with the explicit purpose of being notified about service availability.

c. Where is the data stored?

Email addresses are stored securely on Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992. Supabase acts as our data processor and is bound by strict data protection agreements.

d. How long is the data stored?

Email addresses are stored until the user unsubscribes from our waitlist or until 24 months after the service launch, whichever comes first. Users can request deletion of their email address at any time.

e. Your rights regarding email data

You have the right to withdraw your consent at any time, request deletion of your email address, or request information about the data we store about you. Contact us at liam.s.d.hess@gmail.com to exercise these rights.

II. Right to object according to Art. 21 para. 1 GDPR

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data carried out on the basis of Article 6 para. 1 letter f GDPR. The responsible party will then no longer process the personal data unless he can demonstrate compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. The collection of data for website provision and storage of log files are mandatory for the operation of the website.