Rheinstack Intro call

Privacy policy

Last updated: [[TODO: Datum der letzten Prüfung]]

This is a translation for convenience. Only the German version is legally binding. [[TODO: Rechtliche Prüfung der Datenschutzerklärung]]

In short

  • This website sets no cookies and uses neither local storage nor session storage.
  • There are no analytics or tracking services, no advertising, no social media plugins and no embedded third-party content.
  • Fonts, scripts, images and video are served from this website's own server. When you visit, no data is passed to other providers apart from the host.
  • There is no contact form. You can get in touch by email.

Controller

David Sättler
[[TODO: Anschrift wie im Impressum]]
Email: hallo@rheinstack.de

No data protection officer has been appointed, as there is no legal obligation to do so. [[TODO: rechtlich bestätigen]]

Hosting

This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When you visit the website, Cloudflare processes technically necessary data to deliver the pages and protect them against attacks. This includes in particular the IP address, date and time of access, the requested address, the browser type (user agent) and the amount of data transferred. This data may be stored in server logs.

The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is the secure and stable delivery of the website.

A data processing agreement under Art. 28 GDPR (Data Processing Addendum) is in place with Cloudflare. [[TODO: DPA im Cloudflare-Dashboard abschließen bzw. akzeptieren und hier bestätigen]] Data may be transferred to the USA. This is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, in which Cloudflare participates, and additionally on the EU Standard Contractual Clauses. [[TODO: Zertifizierung von Cloudflare unter dataprivacyframework.gov prüfen]]

Retention period: [[TODO: Speicherdauer der Logs laut Cloudflare angeben]]

No cookies, no tracking, nothing stored on your device

This website does not store or read any information on your device (§ 25 TDDDG). No cookies are set and neither local storage nor session storage is used. That is why there is no cookie banner. [[TODO: Im Cloudflare-Dashboard sicherstellen, dass Bot Fight Mode und Web Analytics aus sind, damit Cloudflare keine Cookies setzt]]

The source picker in the "Approach" section runs only in your browser. Your selection is neither stored nor transmitted.

Contact by email

If you email me, I process your email address, your name if you provide it, and the content of your message. I use this data only to answer your enquiry.

The legal basis is Art. 6 (1) (b) GDPR if your enquiry aims at a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).

I delete your message once it has been dealt with and no statutory retention obligations apply. I keep business correspondence for up to six or ten years under § 257 HGB and § 147 AO.

Email provider: [[TODO: Name und Sitz des E-Mail-Anbieters, Vertrag zur Auftragsverarbeitung bestätigen]]

Appointment booking via an external provider

For booking appointments I link to an external booking service. The booking page is not embedded in this website. You only leave this website when you follow the link. From then on, the provider processes your data under its own responsibility or as my processor. [[TODO: Rolle des Anbieters klären, Auftragsverarbeitungsvertrag abschließen, Sitz und Datenschutzhinweise des Anbieters verlinken]]

Your rights

Under the GDPR you have the following rights:

  • Access to the data stored about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

How to make a request

Write to datenschutz@rheinstack.de. I will answer your request without undue delay and within one month at the latest (Art. 12 (3) GDPR). To protect your data, I may ask you to prove your identity.

Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
[[TODO: Anschrift und Website der LDI NRW vor Veröffentlichung prüfen]]

Minors

This website is aimed at businesses. I do not knowingly collect data from persons under 16.

No automated decision-making

I do not use automated decision-making or profiling under Art. 22 GDPR.

Changes

I update this policy when the website or the legal situation changes.