Privacy Policy

1. Controller

The controller within the meaning of Article 4 (7) GDPR is:

Mark Bregenzer
Lärchenweg 6a
85540 Haar
Germany
+49 15226241408 · mark@bregenzer.eu
No data protection officer has been appointed, as the conditions of Article 37 GDPR in conjunction with section 38 of the German Federal Data Protection Act are not met. For any question about data protection, please use the contact details above.

2. Principles and legal bases

Personal data is any information relating to an identified or identifiable natural person. Such data is processed only where necessary to operate this website, to answer your enquiries, or to provide the services you have asked for.

Depending on the purpose, processing is based on one of the following legal grounds:

• Article 6 (1) (a) GDPR: your consent.

• Article 6 (1) (b) GDPR: steps prior to entering into a contract, or performance of a contract.

• Article 6 (1) (c) GDPR: compliance with legal obligations such as commercial and tax retention duties.

• Article 6 (1) (f) GDPR: legitimate interest in the secure and stable operation of this website.

3. Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes the resulting data as a processor under a contract pursuant to Article 28 GDPR and solely on my instructions.

Each page view causes technically necessary access data to be recorded in server log files:

• IP address of the requesting device

• date and time of access

• address requested and volume of data transferred

• notification of successful retrieval

• browser, browser version and operating system

• where applicable, the previously visited page

The legal basis is Article 6 (1) (f) GDPR. The legitimate interest lies in delivering the website, system security and defending against attacks. This data is not merged with other sources and is not evaluated for advertising purposes.

4. Contact form and email

If you write to me via the contact form or by email, the details you provide (name, email address and the content of your message) are processed solely to handle your enquiry and any follow-up questions. The details are transmitted to me by email and stored in my mailbox.

The legal basis is Article 6 (1) (b) GDPR where your enquiry is aimed at concluding a contract, and otherwise Article 6 (1) (f) GDPR together with the consent you give in the form under Article 6 (1) (a) GDPR.

Data is not passed on to third parties. You may withdraw your consent at any time with effect for the future, for example by an informal email. The lawfulness of processing carried out before withdrawal remains unaffected.

5. Cookies and analytics

This website sets no cookies for analytics, marketing or tracking purposes. There is no audience measurement, no profiling and no automated decision-making within the meaning of Article 22 GDPR. A consent banner is therefore not required.

6. Recipients and transfers to third countries

Personal data is disclosed only to service providers necessary to deliver this website, in particular the hosting provider and the email provider. All of them are bound as processors under Article 28 GDPR.

Where data is transferred to the USA, the transfer is based on the European Commission’s standard contractual clauses under Article 46 (2) (c) GDPR, or on an adequacy decision under Article 45 GDPR where the provider concerned is certified under one.

7. Retention periods

Server log files are deleted or anonymized after no more than 30 days. Enquiries sent through the contact form or by email are deleted once the matter has been concluded and no follow-up questions are expected, at the latest after two years. Commercial and tax retention periods of six and ten years respectively under section 257 of the German Commercial Code and section 147 of the German Fiscal Code remain unaffected; for that period processing is restricted.

8. Your rights

As a data subject you have the following rights:

• Access to the data processed about you (Article 15 GDPR).

• Rectification of inaccurate data and completion of incomplete data (Article 16 GDPR).

• Erasure, unless a statutory retention duty applies (Article 17 GDPR).

• Restriction of processing (Article 18 GDPR).

• Data portability in a structured, commonly used and machine-readable format (Article 20 GDPR).

• Withdrawal of consent with effect for the future (Article 7 (3) GDPR).

An informal message to mark@bregenzer.eu is enough. Handling your request is free of charge and normally takes place within one month.

9. Right to object under Article 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Article 6 (1) (f) GDPR. I will then no longer process the data unless I can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. Where data is processed for direct marketing, you may object at any time without giving reasons.

10. Right to lodge a complaint

Without prejudice to any other remedy, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority. The competent authority is:

Bavarian Data Protection Authority (BayLDA)
Promenade 27
91522 Ansbach
Germany

11. Security and changes

This website is delivered exclusively over a TLS-encrypted connection, so data transmitted between your browser and the server is protected against being read by third parties. In addition, appropriate technical and organizational measures under Article 32 GDPR are in place to protect your data against loss, destruction and unauthorized access.

This policy is updated when the services offered or the legal situation change. The version published here applies.