English

PRIVACY POLICY (GDPR)

1. Data Protection at a Glance

Protecting your personal data is important to me. I treat personal data confidentially and in accordance with the GDPR and this privacy policy.

2. Controller

Andrew Ryan – ajrwebdesign
Tennenbacher Str. 50a
79106 Freiburg im Breisgau
Germany
Email: andrew@ajrwebdesign.com

3. Data Collection on This Website

Contact Form

If you contact me via the contact form, the details you enter (name, email address, message) are stored in this website’s database and sent to me by email, so I can reply to your inquiry. Stored entries can only be seen by me as the site administrator.

This data is not shared with third parties and is used solely for responding to your request.

Legal basis: Art. 6 (1) (b) GDPR

To protect the form from spam, it also uses the following checks. No personal data is stored by these checks beyond what is described here:

  • a hidden field and a time check that automated programs typically fail;
  • a limit on how often the form can be sent from one connection. For this, a one-way (hashed) form of your IP address is kept for up to 10 minutes. The IP address itself is not stored.
  • Cloudflare Turnstile (see section 9).

Email delivery

Emails from this website, including contact form messages, are sent and received via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which acts as a processor under a data processing agreement.

Legal basis: Art. 6 (1) (b) and (f) GDPR

Server Log Files

The hosting provider automatically collects and stores information in server log files:

  • browser type and version
  • operating system
  • referrer URL
  • time of server request
  • IP address

This data is technically required to ensure the security and stability of the website.

Legal basis: Art. 6 (1) (f) GDPR

4. Hosting

Hosting (Guru)
This website is hosted by Guru. The hosting provider processes personal data such as IP addresses, server log files, and technical connection data to ensure the secure, stable, and efficient operation of the website.

Legal basis: Art. 6 (1) (f) GDPR

5. Cookies & Consent

This website uses cookies. A cookie consent tool is used to manage user consent.

Types of cookies:

  • strictly necessary cookies
  • analytics cookies (only with consent)

Legal basis: Art. 6 (1) (a) GDPR

6. Google Analytics

This website uses Google Analytics (Google Ireland Limited).

Data may include:

  • anonymised IP address
  • user behaviour
  • page views
  • device information

Processing only occurs after consent.

Legal basis: Art. 6 (1) (a) GDPR

7. Google Search Console

No personal data is directly processed. Only aggregated search data is used.

8. Typography & Local Fonts

This website uses locally hosted fonts to ensure consistent typography and improved performance. No connection to external font providers (such as Google Fonts) is made when loading fonts.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in consistent and optimised design)

9. Spam Protection & Security

Cloudflare Turnstile

The contact form is protected by Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether a form is being sent by a person or by an automated program, usually without you having to do anything.

Turnstile is only loaded once you start filling in the form. It is not loaded when you simply visit a page. When it runs, Cloudflare processes your IP address and technical information about your browser and device, and how you interact with the check. Turnstile does not use cookies for advertising or tracking.

Cloudflare is certified under the EU-U.S. Data Privacy Framework, which covers the transfer of this data to the USA. More information: https://www.cloudflare.com/privacypolicy/

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in protecting the website and my inbox from spam and abuse)

Login protection

Limit Login Attempts Reloaded is used to protect against brute-force attacks on the login page. IP addresses may be temporarily stored.

10. Performance & Caching

LiteSpeed Cache is used to improve website speed and performance.

11. Translations

Polylang is used for multilingual content. Cookies store language preferences.

12. Data Retention

  • Contact inquiries (stored form entries and the related emails): up to 12 months
  • Spam-protection limit (hashed IP address): up to 10 minutes
  • Server logs: up to 30 days
  • Analytics data: based on consent

13. Your Rights

You have the right to:

  • access (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction (Art. 18 GDPR)
  • objection (Art. 21 GDPR)
  • data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

14. Withdrawal of Consent

You can withdraw consent at any time via the cookie tool.

15. Data Security

Technical and organisational measures are used to protect your data.

16. Contact

Andrew Ryan
andrew@ajrwebdesign.com