Privacy
Policy
Introduction
This privacy policy explains how we collect, use, and protect your personal data when you use our website. We are committed to safeguarding your privacy and ensuring that your personal information is processed in compliance with data protection laws. This policy provides transparency on what data we collect, how we use it, and the security measures in place to protect it. Additionally, it outlines your rights in relation to your personal data, including how you can access, update, or request the deletion of your information. By using our website, you consent to the collection and use of your personal data as described in this policy.
Responsible person
Șerban Elian Neghea
Im Brühl 38, 75443 Ötisheim
Contact information
Phone: +49 152 0154 7791
Email: [email protected]
General Information on Data Processing
With this declaration, we fulfill our legal obligation to provide information and inform you about the storage of data, the type of data, its purpose, and our identity. We also inform you about the initial transfer and the type of data transmitted. Data processing on this website is carried out by Șerban Elian Neghea. If you have questions about data protection or wish to exercise rights or claims regarding your personal data, please email us at: [email protected]
This privacy policy explains how we collect, use, and protect your personal data when you use our website. It also details your rights regarding your data and how you can exercise them. Data processing on this website is carried out by Șerban Elian Neghea. Contact details can be found in the imprint of this website.
Scope of Processing of Personal Data
We generally only collect and use our users' personal data, such as your name, email address, IP address, etc., to the extent that this is necessary to provide a functional website and our content and services. The collection and use of our users' personal data generally only occurs with the user's consent. An exception applies in cases where prior consent cannot be obtained for actual reasons, and the processing of the data is permitted by law.
Legal Basis for the Processing of Personal Data
WWhere we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. In cases where processing is necessary for the performance of a contract to which the data subject is a party, or for pre-contractual measures, Article 6(1)(b) applies. Similarly, if processing is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) serves as the legal basis.
If processing personal data is required to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR is the applicable legal basis. In cases where processing is necessary for legitimate interests pursued by our company or a third party, and where these interests do not override the fundamental rights and freedoms of the data subject, Article 6(1)(f) provides the legal foundation.
Data Deletion and Storage Period
The personal data of the data subject will be deleted or blocked as soon as the purpose for which they were stored no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.
Inquiry by Email, Telephone, or Fax
Description and Scope of Data Processing
If you contact us by email, telephone, or fax, we will store and process your request, including any personal data such as your name, contact details, and the content of your inquiry, solely for the purpose of addressing and processing your request. We will not share this data with third parties without your consent. The data you send to us will remain stored until you request its deletion, revoke your consent to its storage, or when the data is no longer necessary for its intended purpose (such as after the request has been processed). However, mandatory legal provisions, particularly statutory retention periods, remain unaffected, and we will store the data for as long as required by law.
Contact by Email
If you contact us using the provided email address, we will save the personal data transmitted along with the email. This data is used exclusively for processing and responding to your inquiry. We will not share this data with any third parties in this context. Your data will only be used to facilitate communication and to process the inquiry you have submitted.
Contact by Phone
If you reach out to us by telephone, we will collect and process your personal data to assist you with your request in the best possible way. If you do not consent to the processing of your personal data during the call, please notify us at the beginning of the conversation, and we will respect your wishes. This will allow us to either proceed without using your data or, depending on the case, discontinue the conversation.
Contact via Contact Form
Description of Processing
We offer a contact form on our website that enables you to easily get in touch with us. When using the form, you will be required to provide your name, email address, and a message. Once you click the "Send" button, the information you provide will be securely transmitted to us using SSL encryption. The form can only be submitted if you have checked the box to confirm that you have read and accepted our privacy policy.
In addition to the information you submit, the following data is automatically stored when the form is sent: your IP address, the date and time of access, and the personal details entered in the form (e.g., first name, last name, email, and message). You can alternatively contact us directly via email if you prefer not to use the form, and we will process the personal data contained in the email for the purpose of responding to your inquiry. This data will not be passed on to third parties, and it will only be used to process the inquiry and for correspondence purposes.
Purpose of Processing
The data you submit via the contact form or email will be used solely to process and respond to your inquiry. Our goal is to provide a convenient and efficient way for you to reach us and to ensure that we handle your request promptly and accurately.
Legal Basis for Processing
The processing of your personal data is based on our legitimate interest in responding to and processing your request, in accordance with Art. 6 (1) (f) of the EU General Data Protection Regulation (GDPR). If your inquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) of the GDPR.
Storage Period
We will delete your personal data as soon as it is no longer required for the purpose for which it was collected. Typically, this will happen once our communication has concluded and the matter raised in your inquiry has been fully resolved. If statutory retention periods exist, we will retain the data for the duration of those periods, after which the data will be deleted without delay once the retention period has expired.
Legal Basis for Data Processing
Consent
If you have provided us with explicit consent to process your personal data (e.g., by submitting your information through a form or other methods), we process your data based on Art. 6 (1) (a) of the General Data Protection Regulation (GDPR). This consent is always voluntary, and you can withdraw it at any time.
Legitimate Interests
If you contact us via email or other direct means, we may process your personal data based on our legitimate interest to respond to your inquiry, as outlined in Art. 6 (1) (f) of the GDPR. Our legitimate interest lies in ensuring that we handle your request and provide appropriate support or information.
Contractual Necessity
If your communication with us is aimed at entering into a contract or related to an existing contract, the processing of your data is necessary to fulfill the terms of the agreement, based on Art. 6 (1) (b) of the GDPR. This includes processing for purposes like providing services, delivering goods, or managing contractual obligations.
Purpose of Data Processing
The personal data you enter in the contact form or send via email is processed exclusively for the purpose of responding to and handling your inquiry. This is necessary for ensuring that we can provide an efficient communication channel and offer you the appropriate assistance. Additionally, data collected during the submission process helps prevent misuse of the contact form and ensures the security of our IT systems.
Duration of Storage
Your data will be deleted once it is no longer required for the purpose it was originally collected. This is usually the case when the communication has concluded, and the issue raised in your inquiry has been fully clarified. If statutory retention periods prevent immediate deletion, the data will be retained until the end of the retention period, after which it will be deleted.
Possibility of Objection and Removal
You have the right to withdraw your consent to the processing of your personal data at any time. If you contact us via email, you may object to the storage or further processing of your personal data at any time. In such a case, the conversation cannot continue, and all personal data that was stored during the course of contact will be deleted promptly.
In addition, you may object to the processing of your personal data based on our legitimate interests as outlined in Art. 6 (1) (f) of the GDPR. If you object, we will stop processing your data unless there are compelling legitimate grounds for continuing to process the data that override your rights and interests.
Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or disclosure. These measures include using encryption protocols like SSL/TLS for secure data transmission and limiting access to authorized personnel only.
SSL or TLS Encryption
This website uses SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption to ensure the security of your data during transmission, particularly for confidential content such as orders or inquiries you send to us. You can recognize an encrypted connection by the "https://" prefix in the browser address bar and the lock symbol displayed in the browser's address line. When SSL or TLS encryption is activated, the data you send to us is protected and cannot be read by third parties during transmission. We support a minimum version of TLS 1.0, which is compatible with supported browsers up to the latest version.
Hosting
Our websites are hosted by an external service provider located in Düsseldorf, Germany. The personal data collected on our websites is stored on the hosting provider's servers. This may include IP addresses, contact requests, meta and communication data, contact details, names, website accesses, and other data generated via the website.
Data Collection on Our Website
Provision of the Website and Creation of Log Files
When you visit our website, the browser on your device automatically sends information to our website's server. This information is temporarily stored in a log file. The following data is recorded without your intervention and stored until it is automatically deleted:
- IP address of the requesting computer;
- Date and time of access;
- Name and URL of the retrieved file;
- Website from which access is made (referrer URL);
- Browser used and, if applicable, the operating system of your computer, and the name of your access provider.
Purpose of Data Processing
The above data is processed for the following purposes:
- Ensuring a smooth connection to the website;
- Ensuring comfortable use of our website;
- Evaluation of system security and stability;
- To check for errors encountered during navigation;
- To optimize the website for specific countries where visitors come from;
- For further administrative purposes.
Legal Basis for Data Processing
The legal basis for the data processing is Art. 6 Paragraph 1 Clause 1 Letter f of the GDPR. Our legitimate interest arises from the purposes for which the data is collected, as listed above. Under no circumstances do we use the data collected to draw conclusions about your personal identity.
Data Sharing with Third Parties
We do not share your personal data with third parties unless we have obtained your consent or are required to do so by law. In cases where third-party service providers are involved in the processing of your personal data (e.g., for payment processing, email communication), we ensure that these parties comply with the data protection laws and handle your personal data securely.
Additional Information
Links to Other Websites
Our website may contain links to third-party websites that are not operated by us. Once you click on these links and are redirected to a third-party site, we no longer have control over the processing of any personal data that may be transferred to that site. This includes data such as your IP address or the URL from which you were referred.
The behavior and practices of these third parties are beyond our control. As such, we cannot be held responsible for their data processing activities. We strongly recommend that you review the privacy policies of any external websites you visit.
Data Processing & Transfers to the United States
Some third-party services used on this website process data in the United States, while others may or may not transfer data outside the EU, depending on their infrastructure and policies. We use tools and services from providers based in the U.S. or other third countries that do not always guarantee a level of data protection equivalent to EU regulations. When these tools are active, your personal data may be transferred to and processed in these countries.
Please note that the United States does not provide the same legal protections for personal data as the EU's GDPR. U.S. companies may be required to provide personal data to security authorities without allowing affected individuals to challenge this legally. As a result, U.S. government agencies (e.g., intelligence services) may access, analyze, and store your data for surveillance purposes. We have no influence over these processing activities.
Where possible, we ensure that these providers implement safeguards (such as Standard Contractual Clauses) to align with EU data protection requirements. However, by using this website, you acknowledge that some data processing may involve international transfers, including to the U.S.
Third-Party Services Disclosure
This website relies on third-party services for hosting, security, content delivery, email management, and other functionalities. These services may collect and process certain data to operate efficiently. While some providers explicitly process data in the United States, others may or may not transfer data outside the EU, depending on their infrastructure and policies. Below is an overview of the services used and their respective privacy policies.
Hosting & Domain Management
The website is hosted on a self-managed cloud-based server provided by Contabo, which ensures server deployment, maintenance, and security. Contabo also ensures that server infrastructure is secure, reliable, and scalable for high performance. Hostinger handles domain registration, DNS management, and email hosting to ensure the website remains accessible with efficient name resolution and email capabilities.
For more details, see the https://contabo.com/en/legal/privacy/ and the https://www.hostinger.com/legal/privacy-policy/.
Content Delivery & Security
Cloudflare is used to enhance website performance through its CDN (Content Delivery Network) and to protect against DDoS attacks. It also provides SSL/TLS encryption to ensure secure communication between visitors and the website. Cloudflare helps deliver content faster to global visitors and enhances the website's security by blocking malicious traffic.
For more details, see the https://cloudflare.com/privacypolicy/.
Cookie Consent & Compliance
CookieBot is used to manage cookie consent and ensure the website complies with GDPR and other privacy regulations. CookieBot automatically detects cookies on the site and displays the required consent banner to visitors. This tool ensures that users have control over their privacy preferences regarding cookies.
For more details, see the https://www.cookiebot.com/en/privacy-policy/.
Form Handling & User Input
Forms on this website are processed through Formspree and Formcarry, which securely collect and forward submitted data. Formspree is used for handling form submissions with data being explicitly transferred to the U.S., while Formcarry handles form submissions with data processing locations that may vary depending on the user's location. Both services provide secure transmission and storage of form data.
For more details, see the https://formspree.io/legal/privacy-policy/ and the https://formcarry.com/legal/privacy-policy/.
Google Services (Maps & Fonts)
Google Maps is integrated into the website to provide interactive location-based features such as address lookup and location visualization. Additionally, Google Fonts is used to ensure consistent typography across different browsers by loading fonts from Google's servers. Google processes data from these services in multiple locations, including the U.S.
For more details, see the https://cloud.google.com/maps-platform/terms/ and the https://policies.google.com/privacy.
3D Content & Visual Enhancements
Spline is used to create and embed interactive 3D models and animations, enhancing the user experience by providing visually engaging content. The location of data processing by Spline depends on its infrastructure and data storage practices, which may vary.
For more details, see the https://spline.design/privacy/.
Content Management & Optimization
This website runs on WordPress, a content management system (CMS) that facilitates content creation, editing, and publishing. Several plugins enhance the functionality of WordPress, ensuring better performance, email deliverability, and caching:
Advanced Custom Fields
Manages custom fields for content creation, allowing easy customization of templates and user interfaces. This tool provides flexibility to design unique content types, making it easier for developers to manage complex content structures and for users to interact with the site.
For more details, see the https://wpengine.com/legal/privacy/.
Super Page Cache
Optimizes caching and improves page load times by utilizing Cloudflare's CDN, ensuring better performance for end users. The tool automatically adjusts image sizes and formats based on the visitor's device, further enhancing loading speed and reducing server load.
For more details, see the https://optimole.com/privacy-policy/.
WP Mail SMTP
Reconfigures WordPress mail settings to improve email deliverability, ensuring important emails (such as contact form submissions) reach their intended recipients. By using a trusted SMTP provider, it prevents emails from being marked as spam and guarantees delivery reliability.
For more details, see the https://wpmailsmtp.com/privacy-policy/.
Really Simple SSL
Ensures the website is configured properly to use HTTPS, securing user data during communication with the site. The plugin automatically redirects all traffic to the secure version of the site, making sure that sensitive information is encrypted during transmission.
For more details, see the https://really-simple-ssl.com/legal/privacy-statement/.
Admin Menu Editor
Customizes the WordPress admin interface for improved usability, making it easier for administrators to navigate the site's backend. It allows for a more streamlined admin panel by enabling users to hide, rearrange, or add custom menu items.
For more details, see the https://wordpress.org/about/privacy/.
Your Rights Under GDPR
If your personal data is processed, you are a data subject under the General Data Protection Regulation (GDPR), and the following rights apply:
Right to Information
You can request confirmation from the data controller about whether your personal data is being processed. If so, you may request details on:
- The purposes of processing
- The categories of data being processed
- The recipients or categories of recipients
- The planned retention period or criteria for storage duration
- The existence of rights to rectification, erasure, restriction, and objection
- The right to lodge a complaint with a supervisory authority
- Information on the origin of the data, if not provided by you
- Existence of automated decision-making, including profiling, and meaningful information on the logic involved
Additionally, you have the right to request information about whether your personal data is transferred to a third country or an international organization, and about the suitable safeguards in place regarding such transfers.
Right to Rectification
You have the right to request the correction of inaccurate personal data or the completion of incomplete personal data we hold about you. Under Article 16 of the GDPR, we are required to rectify such data without undue delay. To exercise this right, please contact us using the details provided in the "Responsible Person" section. Upon receiving your request, we will assess the information and make the necessary amendments, or inform you of the reasons for any refusal.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data in the following circumstances:
- Accuracy of Data Disputed: If you contest the accuracy of the personal data, the processing will be restricted while we verify the accuracy.
- Unlawful Processing: If the processing of your data is unlawful but you oppose the deletion of the data and request its restriction instead.
- No Longer Needed for Processing: If we no longer need the data for processing, but you require it for the establishment, exercise, or defense of legal claims.
- Objection to Processing: If you have objected to processing (as per your right to object) and are awaiting verification of whether our legitimate grounds override yours.
- Processing Based on Consent: If you withdraw consent on which the processing is based, and processing is necessary for compliance with a legal obligation.
- Verification of Legality: If you need the data to be restricted while the legality of processing is being verified.
This right is based on Article 18 of the GDPR. In these situations, we will limit the processing of your data to its storage and only for the purposes allowed by the GDPR. If the restriction is lifted, we will notify you before resuming any processing.
Right to Deletion ("Right to be Forgotten")
Under certain circumstances, you have the right to request the deletion of your personal data. This right allows you to request the deletion of your data from our systems in the following situations:
- Your data is no longer necessary for the purposes for which it was collected or processed. (Article 17(1)(a) GDPR)
- You withdraw consent on which the processing is based, and there is no other legal ground for the processing. (Article 17(1)(b) GDPR)
- You object to the processing, and there are no overriding legitimate grounds for the processing. (Article 17(1)(c) GDPR)
- Your personal data has been unlawfully processed. (Article 17(1)(d) GDPR)
- Your personal data has to be erased in order to comply with a legal obligation. (Article 17(1)(e) GDPR)
- The data was collected in relation to the offer of information society services to a child (Article 8(1) GDPR). (Article 17(1)(f) GDPR)
However, there are exceptions where the right to erasure does not apply. These include the following:
- Exercising the right of freedom of expression and information (Article 17(3)(a) GDPR).
- Complying with a legal obligation or task carried out in the public interest or in the exercise of official authority (Article 17(3)(b) GDPR).
- For public health purposes in the public interest (Article 9(2)(h), 9(2)(i) GDPR).
- Archiving in the public interest, scientific or historical research purposes, or statistical purposes (Article 17(3)(d) GDPR).
- Establishing, exercising, or defending legal claims (Article 17(3)(e) GDPR).
Once your request is submitted, we will evaluate whether your request is valid, and we will take appropriate steps to ensure compliance where required. We may need to inform third parties about your request if your data is processed by them as well.
Right to Notification of Changes
If you request rectification, deletion, or restriction of processing, the data controller must inform all recipients of your data about these changes unless this proves impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.
Right to Data Portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format. This applies when the processing is based on your consent or the necessity of performing a contract (Article 20(1) GDPR). You can also transmit this data to another data controller without hindrance from us, where technically feasible, and you may request direct transmission to another controller.
This right includes data actively provided by you (such as contact information, transaction data, etc.) and data generated by your use of our services, as long as the processing is automated. For example, data from your preferences or interactions with our website. It does not apply to data derived or inferred by us, such as our analysis or profiling of your behavior.
While we strive to ensure compatibility, data portability may be limited if it affects the rights and freedoms of others or if processing is based on legal obligations or tasks performed in the public interest (Article 20(3) GDPR). You should be aware that certain data may not be portable in some circumstances, such as where the technical requirements prevent such transfers.
If you have any questions or need assistance in transferring your data, please contact us at any time.
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This includes processing based on legitimate interests or the performance of a task in the public interest or in the exercise of official authority (Article 21(1) GDPR). In such cases, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.
If your personal data is being processed for direct marketing purposes, you have the right to object at any time, and we will cease processing for these purposes (Article 21(2) GDPR).
In cases where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3) GDPR).
If you wish to exercise your right to object, please contact us. If you object to processing based on legitimate interests or public tasks, we will carefully assess your request. If you object to processing for direct marketing, we will stop processing immediately.
However, if the objection is deemed to be unjustified, we will inform you of our reasons for continuing the processing.
Right to Withdraw Consent
You can withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the legality of processing carried out prior to the withdrawal.
Right to Complain
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes upon the GDPR (Article 77). You can file a complaint with the data protection authority in the EU member state where you live, work, or where the alleged infringement occurred.
For Germany, the supervisory authority is the Federal Commissioner for Data Protection and Freedom of Information (BfDI). You can contact the BfDI via their website: https://www.bfdi.bund.de.
For Romania, the supervisory authority is the National Authority for the Supervision of Personal Data Processing (ANSPDCP). You can file a complaint via their website: https://www.dataprotection.ro.
For any other country, please contact the relevant data protection authority within your country of residence. You may find the relevant authority by visiting https://edpb.europa.eu/about-edpb/board/members_en, which provides a list of all EU supervisory authorities.
Legal References:
- Article 77 of the GDPR (Right to lodge a complaint with a supervisory authority)
- Article 80 of the GDPR (Right to representation of a data subject)
Last updated: March 2025