Privacy policy

Provider and person responsible

Markus Väth
Oldenburger Strasse 4
90425 Nuremberg
Germany

E-mail address of the provider: office@markusvaeth.com

Types of data collected

Among the types of Personal Data that this Application collects, by itself or through third parties, there are Usage Data; Cookies; first name; last name; email address; various types of Data.

Full details on each type of Personal Data processed are provided in the dedicated sections of this privacy policy or selectively through explanatory texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, providing all Data requested by this Application is mandatory.
If the User refuses to provide the Data, this Application may not be able to provide its services to the User.
In cases where this Application specifically states that the provision of Personal Data is optional, Users are free to choose not to provide this Data without any consequences for the availability or functionality of the Service.
Users who are unclear about which Personal Data is mandatory may contact the Owner.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy.

Users are responsible for all personal data of third parties that is obtained, published or shared through this application.

Type and place of data processing

The Owner processes Users’ Personal Data in an orderly manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction.
Data processing is carried out using computers or IT-based systems, according to organizational procedures and practices strictly related to the purposes indicated.
In addition to the Data Controller, other subjects may operate this Application and therefore have access to the Data, either internally (HR, sales, marketing, legal department, system administrators) or externally (such as providers of technical services, delivery companies, hosting providers, IT companies or communication agencies), appointed, if necessary, as Data Processors by the Data Controller.
An up-to-date list of these parties can be requested from the provider at any time.

The data is processed at the provider’s branch office and at all other locations where the offices involved in the data processing are located.

Depending on the user’s location, data transfers may involve transferring the user’s data to a country other than their own.
To find out more about the place of processing of the transferred data, users can consult the section with detailed information on the processing of personal data.

Unless otherwise specified in this document, Personal Data will be processed and stored for as long as required by the purpose for which it was collected and may be stored for a longer period of time if necessary due to a legal obligation to be fulfilled or based on the User’s consent.

Purposes of the processing

Personal data about the user is collected so that the provider can provide the service and also comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of users or third parties), detect malicious or fraudulent activity.
In addition, data is collected for the following purposes: Displaying content from external platforms, Interaction with external social networks and platforms, Contacting the User, Data transfer outside the EU, Interaction with data collection platforms and other third parties, Creating and running this Application, Analytics and Traffic optimization and distribution.

Users can find more detailed information on these processing purposes and the personal data used for each purpose in the “Detailed information on the processing of personal data” section of this document.

Detailed information on the processing of personal data

Personal data is collected for the following purposes when using the following services:

Key components with which this application is created and executed directly by the provider using the software listed below.

WordPress (self-hosted) (this application)

This application is created and executed by the provider via a CMS software (Content Management System) called WordPress.

Processed personal data: E-mail.

With the services listed in this section, the provider can monitor and analyze data traffic and track the behavior of users.

WordPress Stats (Aut O’Mattic A8C Ireland Ltd.)

WordPress Stats is an analytics service provided by Aut O’Mattic A8C Ireland Ltd.

Processed personal data: Usage Data; Tracker.

Place of processing: Ireland – Privacy Policy.

This type of service allows users to view and interact with content hosted on external platforms directly from this Application.
This type of service may still collect web traffic data for the pages on which the service is installed, even if users do not use it.

Google Fonts (Google Ireland Limited)

Google Fonts is a font visualization service provided by Google Ireland Limited that allows this application to incorporate content of this kind on its pages.

Processed personal data: Usage Data; various types of Data as specified in the privacy policy of the Service.

Place of processing: Ireland – Privacy Policy.

YouTube video widget (Google Ireland Limited)

YouTube is a video content visualization service provided by Google Ireland Limited that allows this application to incorporate content of this kind on its pages.

Processed personal data: Cookie; Usage data.

Place of processing: Ireland – Privacy Policy.

Adobe Fonts (Adobe Systems Incorporated)

Adobe Fonts is a font visualization service provided by Adobe Systems Incorporated that allows this application to incorporate content of this kind on its pages.

Processed personal data: Usage Data; various types of Data as specified in the privacy policy of the Service.

Processing location: United States – Privacy Policy.

The provider may only transfer personal data collected within the EU to third countries (i.e. countries that are not part of the EU) in accordance with a specific legal basis.
Such data transfer is based on one of the legal bases described below.
The user can ask the provider which legal basis applies to which service.

Data transfer from the EU and/or Switzerland to the USA acc.
Privacy Shield (this application)

If this is the legal basis, the transfer of personal data from the EU or Switzerland to the USA takes place in accordance with the EU – USA or Switzerland – USA Privacy Shield (also known as the Privacy Shield).
In particular, personal data is transferred to recipients that self-certify under the Privacy Shield Framework and thus ensure an adequate level of protection for this transferred data.
Such third-party services are listed in the relevant sections of this document.
Those services that have joined the Privacy Shield can be filtered out by checking the respective privacy policies and possibly also the official Privacy Shield list.
Privacy Shield also guarantees users certain rights, which are explained in their most up-to-date form on the website of the US Department of Commerce.
Personal data can only be transferred from the EU or Switzerland to the USA to recipients who are not or no longer part of Privacy Shield if there is a valid legal basis for this.
To find out more about such a legal basis, the user can contact the provider.

Processed personal data: various types of data.

This type of service allows Users to interact with data collection platforms or other third parties directly from the pages that contain this Application for the purpose of storing and reusing data.
If such a service is installed, it may collect browsing and usage data on the pages where it is installed, even when Users are not actively using the service.

MailerLite Widget (UAB “Mailerlite”)

The MailerLite widget is a service that allows you to interact with the MailerLite e-mail and messaging service from UAB “Mailerlite”.

Processed personal data: E-mail.

Place of processing: Lithuania – Privacy Policy.

This type of service allows interaction with social networks or other external platforms directly from this Application.
Interactions and information collected through this Application are always subject to the User’s privacy settings for each social network.
This type of service may still collect web traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out of the respective services to ensure that the data processed through this Application is not reconnected to the User’s profile.

Button and social widgets for Linkedin (LinkedIn Corporation)

The LinkedIn button and social widgets are services for interacting with the LinkedIn social network provided by LinkedIn Corporation.

Processed personal data: Cookie; Usage data.

Processing location: United States – Privacy Policy.

Contact form (this application)

By filling out the contact form with their data, users authorize this application to use their information to respond to requests for information, offers or other requests indicated in the header of the form.

Processed personal data: E-mail; last name; first name.

This type of service allows this Application to distribute its content through servers located in different countries and to optimize its performance.
The Personal Data processed depends on the characteristics and type of execution of the services whose function is to filter the communications made through this Application and the User’s browser.
Given the widespread nature of this system, it is difficult to determine the locations to which content containing Users’ Personal Data is sent.

Bunny CDN (BunnyWay d.o.o.)

Bunny CDN is a service provided by BunnyWay d.o.o. for the optimization and distribution of data traffic.

Processed personal data: Usage data.

Processing location: Slovenia – Privacy Policy.

This application uses trackers.
Further information can be found in the cookie policy.

The provider may only process users’ personal data if one of the following points applies:

  • Users have given their consent for one or more specific purposes.
  • the data collection is necessary for the fulfillment of a contract with the user and/or for pre-contractual measures;
  • the processing is necessary for compliance with a legal obligation to which the provider is subject;
  • the processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider;
  • processing is necessary for the purposes of the legitimate interests pursued by the provider or by a third party.

In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.

Unless otherwise specified in this document, Personal Data will be processed and stored for as long as required by the purpose for which it was collected and may be stored for a longer period of time if necessary due to a legal obligation to be fulfilled or based on the User’s consent.

Therefore:

  • Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been completely fulfilled.
  • Personal data collected to protect the legitimate interests of the provider will be retained for as long as necessary to fulfill these purposes.
    Users can obtain more information about the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.

Furthermore, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked.
Furthermore, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.

After the retention period has expired, personal data will be deleted.
Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be asserted after the retention period has expired.

The rights of users under the General Data Protection Regulation (GDPR)

Users may exercise certain rights in relation to their data processed by the provider.

In particular, users have the right to do the following to the extent permitted by law:

  • Revoke your consent at any time. If the user has previously consented to the processing of personal data, they can withdraw their consent at any time.
  • object to the processing of their data. The user has the right to object to the processing of their data if the processing is carried out on a legal basis other than consent.
  • receive information about their data. The user has the right to know whether the data is being processed by the provider, to receive information about individual aspects of the processing and to receive a copy of the data.
  • Have it checked and corrected. The user has the right to check the accuracy of his/her data and to request that it be updated or corrected.
  • request the restriction of the processing of their data. Users have the right to restrict the processing of their data.
    In this case, the provider will not process the data for any purpose other than storage.
  • request the deletion or other removal of personal data. Users have the right to demand that the provider delete their data.
  • receive your data and have it transferred to another controller. The user has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance.
  • Submit a complaint. Users have the right to lodge a complaint with the competent supervisory authority.

Users also have the right to be informed of the legal basis for the transfer of data abroad or to an international organization governed by international law or established by two or more countries, such as the UN, and of the security measures taken by the provider to protect their data.

If personal data are processed in the public interest, in the exercise of an official authority vested in the provider or to protect the legitimate interests of the provider, the user may object to this processing by providing a justification relating to his or her particular situation.

Users are informed that they can object to the processing of their personal data for direct marketing purposes at any time free of charge and without giving reasons.
If the user objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Users can find out whether the provider processes personal data for direct marketing purposes in the relevant sections of this document.

All requests to exercise user rights may be addressed to the Owner using the contact details provided in this document.
These requests can be made free of charge and will be answered by the Owner as soon as possible, at the latest within one month, providing Users with the information required by law.
Any rectification or erasure of personal data or restriction of processing shall be communicated by the Provider to all recipients to whom personal data have been disclosed, if any.
Unless this proves impossible or involves a disproportionate effort.
The provider shall inform the user of these recipients if the user so requests.

Further information for users in Switzerland

This section applies to users in Switzerland and replaces all other possibly deviating or contradictory information in the privacy policy for these users.

Further details on the categories of data processed, the purposes of processing, the categories of recipients of the personal data, if any, the retention period and other information on personal data can be found in the section “Detailed information on the processing of personal data” in this document.

Users’ rights under the Swiss Federal Act on Data Protection

Users may exercise certain rights in relation to their data in accordance with the law, including the following:

  • Right of access to personal data;
  • the right to object to the processing of their personal data (which also allows users to request the restriction of the processing of personal data, the deletion or destruction of personal data and the prohibition of the disclosure of certain personal data to third parties);
  • the right to receive their personal data and to transmit it to another controller (data portability);
  • the right to request the rectification of inaccurate personal data.

How to exercise these rights

All requests to exercise user rights may be addressed to the Owner using the contact details provided in this document.
Such requests are free of charge and will be answered by the Owner as soon as possible, providing users with the information required by law.

Further information on the collection and processing of data

The User’s personal data may be processed by the Provider for the purposes of legal enforcement within or in preparation of legal proceedings arising from the improper use of this Application or the associated services.
The User declares that he is aware that the Provider may be required by the authorities to disclose personal data.

In addition to the information contained in this privacy policy, this Application may provide the User with additional contextual information concerning particular Services or the collection and processing of Personal Data upon request.

This Application and third-party services may collect files for operation and maintenance purposes that record the interaction taking place via this Application (system logs) or use other Personal Data (e.g. IP address) for this purpose.

Further information on the collection or processing of personal data can be requested from the provider at any time using the contact details provided.

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or – as far as technically and legally feasible – sending a notice to Users via any contact information available to the Owner.
Users are therefore advised to visit this page regularly and in particular to check the date of the last change indicated at the bottom of the page.

If changes affect the use of data based on the user’s consent, the provider will – if necessary – obtain new consent.

Personal data (or data)

Any information that directly or in combination with other information identifies or can be used to identify a natural person.

Usage data

Information that this application (or third-party services that this application uses) collects automatically, such as: the IP addresses or domain names of the computers of users who use this application, the URI addresses (Uniform Resource Identifier), the time of the request, the method used to send the request to the server, the size of the response file received, the numerical code indicating the status of the server response (successful result, error, etc.), the country of origin, the functions of the browser and operating system used by the user, the various time details per request (e.g. how much time was spent on each page of the application) and information on the path followed within the application.This information includes the country of origin, the functions of the browser and operating system used by the user, the various time details per request (e.g. how much time was spent on each page of the application) and details of the path followed within an application, in particular the sequence of pages visited, as well as other information about the device’s operating system and/or the user’s IT environment.

Users

The person using this application who, unless otherwise specified, is the same as the data subject.

Affected party

The natural person to whom the personal data relates.

Processor (or processor)

Natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller as described in this privacy policy.

Responsible party (or provider, sometimes also owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Application.
Unless otherwise specified, the controller is the natural or legal person through which this Application is offered.

This application

The hardware or software tool with which the user’s personal data is collected and processed.

Service

The service offered by this application as described in the relevant T&Cs (if any) and on this website/application.

European Union (or EU)

Unless otherwise stated, all references in this document to the European Union refer to all current Member States of the European Union and the European Economic Area (EEA).

Cookie

Cookies are trackers that consist of a small data record stored in the user’s browser.

Tracker

The term tracker refers to any technology – e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags or fingerprinting – that can be used to track users, e.g. by enabling access to or storage of information on the user device.


Legal notice

This privacy policy has been drawn up on the basis of the provisions of various legislations.

This privacy policy applies exclusively to this application, unless otherwise stated in this document.