Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

2. General information about data processing

Scope of processing personal data

We generally process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users takes place regularly only with the user's consent.

Legal basis for processing

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis. When processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis.

Insofar as processing of personal data is necessary to protect a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

Data deletion and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also occur if this has been provided for by the European or national legislator. The data will also be blocked or deleted when a storage period prescribed by the aforementioned regulations expires.

3. Provision of the website and creation of log files

Each time our website is accessed, our hosting provider automatically collects data and information from the accessing computer system. The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The user's IP address (anonymized)
• Date and time of access
• Websites from which the user's system accesses our website

The data is stored in the log files of our hosting provider (Netlify). Storage of this data together with other personal data of the user does not take place.

4. Hosting — Netlify

Our website is hosted by Netlify. Provider is Netlify Inc., 44 Montgomery Street, Suite 300, San Francisco, California 94104, USA. Netlify collects technical information such as IP address, date/time of the request, browser type, and similar with each access to our site.

The use of Netlify is based on our legitimate interest in the most reliable and fast display of our website possible (Art. 6 para. 1 lit. f GDPR). Netlify is certified under the EU-US Data Privacy Framework.

For more information, please see Netlify's privacy policy: https://www.netlify.com/privacy/

5. Contact form — Web3Forms

If you send us inquiries via the contact form, your details from the inquiry form (name, email address, optional shop URL, message) will be stored for the purpose of processing the inquiry and in case of follow-up questions.

For the technical processing of the form submission, we use the service Web3Forms. The data submitted via the contact form is forwarded by Web3Forms to our email address. Permanent storage of the data at Web3Forms does not take place.

The legal basis for processing is our legitimate interest in efficiently processing inquiries (Art. 6 para. 1 lit. f GDPR) as well as — insofar as an inquiry aims at concluding a contract — Art. 6 para. 1 lit. b GDPR.

For more information, please see Web3Forms' privacy policy: https://web3forms.com/privacy

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies.

6. Fonts — Self-hosted

This website uses the font "Plus Jakarta Sans" for the uniform display of text. The font files are stored locally on our own server and are loaded directly from there. No connection to external servers (such as Google) is made. No data is transmitted to third parties.

7. Cookies

This website does not use any cookies. No tracking cookies, analytics cookies, or any other cookies are stored on your device. A cookie consent banner is therefore not required.

8. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and the following rights are granted to you against the controller:

• Right to information (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to revoke the data protection consent declaration (Art. 7 para. 3 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Competent supervisory authority

9. Contact for data protection questions

If you have any questions about this privacy policy or the processing of your data, please contact us at any time via email at team@herzogundnickel.de.