…Privacy Policy…
1) Introduction and contact details of the controller
1.1 I am pleased that you are visiting my website and thank you for your interest. Below, I inform you about how your personal data is handled when using my website. Personal data refers to all data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Robert Seemann, Jülicher Str. 9a, 90425 Nuremberg, Germany, email: robert@robshots.dev.
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2) Data collection when visiting my website
2.1 When you use my website for informational purposes only, i.e. if you do not register or otherwise provide information to me, I only collect data that your browser transmits to the server (so-called “server log files”). When you access my website, the following data is collected, which is technically necessary to display the website to you:
- Website visited
- Date and time of access
- Amount of data transferred (in bytes)
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address (if applicable, in anonymised form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of my legitimate interest in improving the stability and functionality of my website.
The data is not passed on or used in any other way. However, I reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. enquiries sent to me), this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.
3) Hosting & content delivery network
For hosting my website and displaying its content, I use a provider whose services are performed exclusively on servers located within the European Union, either directly or through selected subcontractors.
All data collected on my website is processed on these servers.
I have concluded a data processing agreement with the provider, which ensures the protection of my website visitors’ data and prohibits unauthorised disclosure to third parties.
4) Cookies
In order to make visiting my website more attractive and to enable certain functions, I use cookies. These are small text files that are stored on your device.
Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow page settings to be saved (“persistent cookies”).
In the latter case, you can find the storage duration in your browser’s cookie settings overview.
If personal data is also processed through individual cookies used by me, processing is carried out in accordance with Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(a) GDPR in the case of consent given, or Art. 6(1)(f) GDPR to safeguard my legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective visit.
You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general.
Please note that if cookies are not accepted, the functionality of my website may be limited.
5) Contact
When contacting me (e.g. via contact form or email), personal data is collected.
Which data is collected when using a contact form can be seen from the respective form.
This data is stored and used exclusively for the purpose of responding to your enquiry or contacting you and for the associated technical administration.
The legal basis for processing this data is my legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR.
If your contact aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.
Your data will be deleted once your enquiry has been conclusively processed, provided that no statutory retention obligations conflict with this.
6) Rights of the data subject
6.1 Applicable data protection law grants you the following rights with regard to the processing of your personal data:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to notification pursuant to Art. 19 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR
- Right to lodge a complaint pursuant to Art. 77 GDPR
6.2 Right to object
If I process your personal data on the basis of a balancing of interests due to my overriding legitimate interest, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
If you exercise your right to object, I will cease processing the data concerned.
Further processing may remain reserved if I can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or if processing serves the establishment, exercise or defence of legal claims.
If your personal data is processed by me for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes.
If you exercise your right to object, I will stop processing the affected personal data for direct marketing purposes.
7) Duration of storage of personal data
The duration of storage of personal data is determined by the respective legal basis, the processing purpose and, where applicable, statutory retention periods (e.g. commercial or tax retention obligations).
If personal data is processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, the data will be stored until you withdraw your consent.
If statutory retention periods apply to data processed on the basis of Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention period has expired, provided it is no longer required for contract fulfilment or initiation and no legitimate interest in further storage exists.
If personal data is processed on the basis of Art. 6(1)(f) GDPR, it will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless compelling legitimate grounds for processing can be demonstrated.
If personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, it will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise stated in this privacy policy, stored personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.
