Privacy

Controller

Alessandro Gerola

Ablachstraße 7, 88605 Meßkirch, Germany

Email: info@buildframe.de

For data protection questions, an email to the same address is enough.

What this website does not do

No cookies. No analytics or audience measurement. No ad networks. No captcha. No embedded videos, maps or social buttons.

The fonts are served from the same server as the website. Simply reading a page therefore opens no connection to any third party.

Hosting and server logs

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA.

When a page is requested, Netlify processes technically necessary access data: IP address, time, requested address, volume of data transferred, referring address, and browser and operating system identifiers.

The purpose is delivering the page, server security and defence against attacks. The legal basis is our legitimate interest in secure operation, Art. 6(1)(f) GDPR.

A data processing agreement under Art. 28 GDPR is in place with Netlify; it forms part of their terms. The transfer to the USA is covered by Netlify, Inc.'s certification under the EU-U.S. Data Privacy Framework and by the European Commission's Standard Contractual Clauses.

Enquiry form

The form transmits exactly what you enter yourself: a description of your project, your email address and — where filled in — name, company, platform, project stage, preferred delivery route, timeframe, budget range and anything else you add. Only the description and the email address are required.

Submission runs through Netlify Forms; the data is stored there and forwarded to us. Netlify additionally records the IP address of the submission.

The sole purpose is answering your enquiry and preparing a possible contract. The legal basis is Art. 6(1)(b) GDPR for pre-contractual steps, and otherwise Art. 6(1)(f) GDPR.

No newsletter sign-up takes place, and no data is passed to third parties for advertising.

Spam filtering

The form contains a field invisible to humans. If it is filled in, the server discards the submission. No additional personal data arises from this.

In addition, Netlify checks every submission with the Akismet service operated by Automattic Inc., USA. The content of the submission and the IP address are transmitted to Akismet and examined for spam characteristics. Automattic is a subprocessor of Netlify.

The legal basis is our legitimate interest in keeping the form usable, Art. 6(1)(f) GDPR. The alternative would be a captcha — a hurdle for every human being, instead of a check in the background.

Retention

Contact and project enquiries that do not lead to an engagement are deleted at the latest six months after the correspondence has ended.

Where an enquiry does lead to an engagement, statutory retention periods apply to the corresponding business records. The enquiry itself is deleted after the period stated above regardless.

This deletion actually happens: it is carried out and logged on a regular basis, in the form management as well as in the email account.

Server logs at Netlify are deleted automatically after a short period and are not combined with other data.

Links to the App Store

This site links to listings on the Apple App Store. A link transmits data only once you click it; Apple's privacy policy then applies. Nothing is embedded that loads on its own.

Your rights

You have the right to access the data held about you (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21 GDPR).

An email to info@buildframe.de is enough. No form and no particular format is required.

You may also lodge a complaint with a supervisory authority. The competent one here is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.