Privacy policy
This is a translation for your convenience. The German version is legally binding.
1. The key points
This website sets no cookies, stores nothing in your browser and uses no analytics or tracking services. It does not embed content from other providers. The fonts are hosted on the same server as the website, so no request goes to Google or any other font provider.
I only process personal data when you visit the website (technically necessary server log files at the hosting provider) and when you write to me via the form or by email.
2. Controller
Sebastian MareckLoo'sche Heide 48
47551 Bedburg-Hau
Germany
Email: kontakt@sebastian-mareck.com
3. Hosting and server log files
The website is hosted by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. The server is located in Frankfurt am Main, the backups are stored in France, both within the EU.
Each time the website is accessed, the server automatically records technical data in log files. This includes in particular the date and time, your IP address, the page or file requested, information about your browser and device, the country, the amount of data transferred and the response time. I need this data to deliver the website, keep it secure and find errors. The legal basis is my legitimate interest in a secure and working website (Art. 6(1)(f) GDPR). The log files are deleted as soon as they are no longer needed for these purposes.
Hostinger processes this data on my behalf. The basis is the data processing agreement under Art. 28 GDPR, which is part of Hostinger's terms of service. Hostinger uses further service providers for this, including providers based outside the EU. For transfers to countries without an adequacy decision by the EU Commission, this agreement applies the EU Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
4. Contact form
The form does not send anything to my server. When you click “Send request”, your email program opens with a prepared message to kontakt@sebastian-mareck.com. It contains the information you entered: name, email address, company or line of work, company size and your message, and optionally your phone number and how you heard about me. I only receive this information once you send that email yourself. From then on, the same applies as for an email (section 5).
The purpose is to answer your request and prepare a possible call. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or steps prior to a contract, otherwise my legitimate interest in answering requests (Art. 6(1)(f) GDPR). The optional information helps me prepare and understand how people find me (Art. 6(1)(f) GDPR).
5. Contact by email
When you send me an email, I process your email address, your name if given, and the content of your message in order to reply. The legal bases are the same as for the contact form (section 4).
The mailbox kontakt@sebastian-mareck.com is also hosted by Hostinger. The basis is the same data processing agreement (section 3). I do not forward your messages to other email providers.
6. Storage period
I delete your request once it has been dealt with, unless statutory retention obligations apply. If your request leads to an assignment, the statutory retention periods apply, for example under commercial and tax law.
7. Link to LinkedIn
The website contains a simple link to my LinkedIn profile. No data is transferred to LinkedIn when you visit the website. Only when you click the link does LinkedIn's page open, and LinkedIn's privacy policy applies.
8. Encryption
The website is delivered over an encrypted connection (TLS). You can tell by the “https://” in your browser's address bar.
9. Your rights
You have the right to access the data I process about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). Just write to me at kontakt@sebastian-mareck.com.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestr. 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
Right to object under Art. 21 GDPR
Where I process data on the basis of my legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation. I will then stop processing the data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
10. Obligation to provide data and automated decisions
You are not obliged to give me any data. Without your contact details, however, I cannot answer your request. There is no automated decision-making or profiling.