Privacy Policy

Controller

Lutz Eckelmann (brand „Web Creativo")

Address

Partida Les Barqueres S/N
43365 Alforja, Tarragona
Spain

Phone

+34 690 770 674

E-mail

lutz.eckelmann@web-creativo.es

The controller within the meaning of the General Data Protection Regulation (GDPR) is the person named above. A data protection officer has not been appointed, as the legal requirements for this are not met.

We process personal data only to the extent necessary to provide a functional website together with our content and services, or where you have given your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract / pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest).

Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations prevent deletion.

This website is hosted by an external service provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Data centre location: Nuremberg, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

When you access the website, the server automatically collects information transmitted by your browser (server log files): IP address, date and time of access, page/file requested, volume of data transferred, notification of successful retrieval, browser type and version, operating system and referrer URL. This data is used for the technical provision, stability and security of the website. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. The log files are deleted after seven days, unless they are needed longer to investigate a security incident.

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the „https://" in your browser's address bar.

Technically necessary cookies required to operate the website (e.g. to store your cookie choice) are set on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and the applicable ePrivacy rules.

Non-essential cookies and services (e.g. analytics, marketing, external media) are only loaded after your explicit consent (Art. 6(1)(a) GDPR). Your choice is stored; „Reject" is just as easy to reach as „Accept". You can withdraw your consent at any time with effect for the future via the cookie settings.

If you contact us via the contact form, by e-mail or by phone, we process the data you provide (e.g. name, e-mail address, company, message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at concluding or performing a contract, otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Messages received via the contact form are sent technically through an external e-mail delivery provider (SMTP relay): Variomedia AG, Berlin, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place.

We store enquiry data until your enquiry has been conclusively dealt with and no statutory retention obligations prevent deletion.

Fonts are loaded locally from our server (self-hosted). No connection to Google Fonts or other third-party servers is made; your IP address is not transmitted to third parties for this purpose.

We currently do not use any third-party web analytics or tracking services.

Recipients of personal data are exclusively the service providers required to provide the website, with each of whom a data processing agreement pursuant to Art. 28 GDPR is in place: the hosting provider (section „Hosting and server log files") and the e-mail delivery provider (section „Contacting us"). No further disclosure to third parties takes place unless we are legally obliged to do so.

You have the right to:

• access to the data processed about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
• withdraw any consent given, with effect for the future (Art. 7(3) GDPR).

To exercise these rights, an informal message to the contact details under „Controller" is sufficient.

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority at the controller's place of establishment is in particular competent:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es

You may also contact the data protection supervisory authority of your habitual residence or place of work.

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

This privacy policy is currently valid. As the website develops or due to changed legal or regulatory requirements, it may become necessary to amend it.