Privacy Policy – information on the processing of personal data under Art. 13 GDPR

The controller for data processing on this website is:

Multi Media Design Patrick Schmetzer

Adam-Foßhag-Straße 37
65428 Rüsselsheim am Main
Germany
Email: Mail@Patrickschmetzer.com

This website sets no cookies. For audience measurement it uses a service that works without cookies and without recognizing individual visitors — see “Audience measurement” for details. There is no registration and no newsletter. There are inquiry forms; how they work is described under “Inquiry forms”. Fonts are served locally from our own server; no connection to Google Fonts is made.

Third-party content — YouTube videos and the Google Maps map — is loaded only after you explicitly click. As long as you do not start a video and do not load a map, nothing is transmitted to third parties.

Personal data therefore arises only to the extent technically unavoidable when a website is requested — see server log files.

This website does not run on our own servers but with two external service providers. The data that arises technically when you visit is processed on their servers.

The pages are served by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The inquiry forms and the protected client area run separately from that, with Render Services, Inc., USA; the server used for them is located in Frankfurt am Main, Germany.

Both providers are used in the interest of secure, fast and reliable delivery of this site (Art. 6(1)(f) GDPR).

A data processing agreement pursuant to Art. 28 GDPR is in place with both. Each provider’s Data Processing Addendum forms part of its terms of service and applies without a separate signature.

Both companies are based in the United States. For transfers there, both are certified under the EU-US Data Privacy Framework; the European Commission’s Standard Contractual Clauses apply in addition.

When this website is accessed, the hosting providers automatically store information in server log files which your browser transmits:

• IP address of the requesting device
• date and time of access
• name and URL of the file retrieved
• volume of data transferred and notification of retrieval status
• referrer URL, where transmitted
• browser and operating system used

Processing serves the delivery of the page, system security and stability, and error analysis. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. This data is not merged with other sources and is not evaluated for marketing purposes. Log files are deleted automatically after the retention period configured at the providers.

To learn which pages of this website are visited, we use Vercel Web Analytics. The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA — the same company that serves the pages.

No cookies are set and no identifiers are stored on your device. No profile is built about you and your visit is not followed across websites. What is recorded is the page requested, the referring page, country, operating system and browser, and the device type — in a form that produces a total and not an individual visitor.

The purpose is the statistical evaluation of which content is in demand, in order to improve this site. The legal basis is our legitimate interest in a needs-based design of this website under Art. 6(1)(f) GDPR. Consent is not required because no information is stored on or read from your device (§ 25(1) TDDDG).

The same data processing agreement and the same EU-US Data Privacy Framework certification apply as described under “Hosting”.

What exactly is collected is described by the provider here: vercel.com/docs/analytics/privacy-policy

Some pages embed videos hosted on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

These videos are not loaded automatically. Initially you see only a preview image served from our own server. A connection to YouTube servers is established only once you start a video by clicking. YouTube then learns, among other things, your IP address and which page you visited; if you are simultaneously logged in to YouTube, the visit can be attributed to your account. Transfer to the USA cannot be ruled out.

The legal basis is the consent you give by clicking, pursuant to Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future by not starting further videos. Videos are embedded in extended data protection mode (“youtube-nocookie”), in which YouTube states that it stores information only once playback begins.

Details on how your data is handled can be found in Google’s privacy policy: policies.google.com/privacy

The contact page embeds a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This map is not loaded automatically either. In its place you first see a plain surface with a note and a button; the address beside it and the link to Google Maps work without any connection to Google. A connection to Google servers is established only once you load the map by clicking. Google then learns, among other things, your IP address and which page you visited; if you are simultaneously logged in to Google, the visit can be attributed to your account. Transfer to the USA cannot be ruled out.

The legal basis is the consent you give by clicking, pursuant to Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future by not loading further maps; the consent applies to that page view only and is not stored.

Details on how your data is handled can be found in Google’s privacy policy: policies.google.com/privacy

For security reasons this website uses TLS encryption. You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar.

This website has forms for contact, project, coaching and support inquiries. We process only what you enter yourself — depending on the form, your name, email address, telephone number, address, date, location and free text.

On submit, those details are transmitted to this website’s server and stored there, so that the inquiry is not lost. The server is located in Frankfurt am Main and is operated on our behalf by Render Services, Inc. No third-party form service is involved, and your entries are not passed on to third parties. We additionally send ourselves a notification that a new inquiry has arrived.

The processing serves solely to answer your inquiry. The legal basis is Art. 6(1)(b) GDPR where the inquiry relates to entering into a contract, otherwise our legitimate interest in responding under Art. 6(1)(f) GDPR.

Your IP address is not stored with the inquiry. To prevent the form being flooded automatically, only a salted check value of the IP address is kept, which does not allow the address to be reconstructed and is deleted after 24 hours.

We delete stored inquiries as soon as they are no longer required in order to respond and no statutory retention obligations prevent deletion. The protected area in which we read the inquiries sets a strictly necessary session cookie — it is set only after we ourselves sign in, never during your visit.

If you contact us, we process your sender details and the content of your message solely in order to deal with your inquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related inquiries, otherwise our legitimate interest in responding under Art. 6(1)(f) GDPR.

Contact via WhatsApp is additionally subject to the privacy policy of WhatsApp Ireland Limited. We have no influence over what data is processed there when the chat is established. If you wish to avoid this, you can equally reach us by email or telephone.

We delete this data as soon as it is no longer required for the purpose and no statutory retention obligations prevent deletion.

This website links to external third-party websites. Clicking such a link takes you off this website; we have no influence over the data processing carried out by the respective provider. Their privacy policy then applies.

You have the right at any time to:

• access to your processed data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)

An informal message to the email address above is sufficient to exercise them.

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden

We will amend this privacy policy as soon as data processing on this website changes — for example if audience measurement is added in future.

See also our Imprint.