Privacy policy

BYF-Webdesign

Protecting your personal data is a priority for us. This page informs you in detail about the collection, processing and use of your data on this website, as well as your rights.

1. Data protection at a glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

Who is responsible for data collection?

Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Data controller” of this privacy policy.

How do we collect your data?

Your data is collected partly when you provide it to us, for example via a contact or booking form. Other data is collected automatically by our IT systems when you visit the website — mainly technical data such as the browser, operating system or time of page access.

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data is used to respond to your enquiries and to prepare or perform contracts.

What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data, as well as to request its rectification or erasure. Consent given may be withdrawn at any time for the future. You also have the right to complain to the competent supervisory authority.

Analytics tools and third-party tools

This website uses no analytics programs, tracking tools or cookies. Your browsing behaviour is not evaluated.

2. Hosting

This website is hosted by Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias, Geneva, Switzerland. Personal data collected on this website (in particular IP addresses, contact enquiries, meta and communication data) is stored on the host's servers in Switzerland. Hosting serves the purpose of contract performance (Art. 6(1)(b) GDPR) and our legitimate interest in a secure, fast and efficient provision (Art. 6(1)(f) GDPR). No data is transferred to third countries.

Data processing agreement

Processing by the host takes place on the basis of Infomaniak's data processing agreement (DPA), which ensures that our visitors' personal data is processed only according to our instructions and in compliance with the GDPR.

3. General information and mandatory information

We take the protection of your personal data very seriously and treat it confidentially in accordance with the statutory data protection regulations. Please note that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Data controller

The controller responsible for data processing on this website is: BYF-Webdesign — Mathis Hélan, Strietwaldstrasse 83, 63741 Aschaffenburg, Germany. Email: kontakt@byf-webdesign.com; phone: +49 155 67897976. The controller is the natural person who determines the purposes and means of processing personal data.

Retention period

Unless a more specific retention period is stated in this privacy policy, your personal data remains with us until the purpose for the data processing ceases. If you request erasure or withdraw consent, your data will be deleted unless legally permissible reasons for retention apply (e.g. tax or commercial retention periods).

Legal bases for data processing

Where you have consented, we process your personal data on the basis of Art. 6(1)(a) GDPR. Where your data is required for the performance of a contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. To fulfil a legal obligation we process under Art. 6(1)(c) GDPR; processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The following paragraphs state the relevant legal basis in each case.

Recipients of personal data

Personal data is only transferred to external parties where this is necessary to provide the website or perform a contract, where we are legally obliged to do so, or where a legitimate interest applies under Art. 6(1)(f) GDPR.

Withdrawing your consent

Many data processing operations are only possible with your express consent. You may withdraw consent already given at any time; the lawfulness of processing carried out before the withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS OR THE PROCESSING SERVES THE ASSERTION OF LEGAL CLAIMS. YOU MAY OBJECT AT ANY TIME TO PROCESSING FOR DIRECT MARKETING PURPOSES (ART. 21(2) GDPR).

Right to lodge a complaint with the supervisory authority

In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged violation. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, or to have it transferred to another controller where technically feasible.

Access, rectification and erasure

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing, and where applicable a right to rectification or erasure of this data.

Restriction of processing

You have the right, under certain conditions, to request restriction of processing — for example if you contest the accuracy of the data, if the processing is unlawful, if we no longer need the data but you need it to assert legal claims, or if you have objected (Art. 21 GDPR).

SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. An encrypted connection can be recognised by the padlock symbol and “https://” in your browser's address bar; transmitted data cannot then be read by third parties.

4. Data collection on this website — Server log files

The provider of the pages automatically collects and stores information in server log files: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR.

Contact form

When you send us enquiries via the contact form, your details from the form, including contact data, are stored for processing. We do not share this data without your consent. Processing takes place, depending on context, under Art. 6(1)(b) GDPR (contract preparation) or our legitimate interest in effective handling of enquiries (Art. 6(1)(f) GDPR).

Appointment requests

Data entered in the booking form (chosen date, time and details about your project) is used exclusively to prepare and conduct the appointment (Art. 6(1)(b) GDPR).

If you subscribe to our updates, we use your email address exclusively to send our information. Processing is based on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Cookies

This website does not use cookies.

5. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements. The version published on this page applies.