Privacy policy

Still to complete and checkThis is a template under the GDPR and the Spanish LOPDGDD. Everything in yellow needs filling in, and the hosting section must match what Hostinger actually does. Have it checked before going live — this is not legal advice.

Controller

René Krössel, address, email. Full details in the legal notice.

What happens when you visit this site

When you open this site, my hosting provider automatically stores access data: IP address, date and time, page requested, browser and operating system. This is technically necessary to deliver the site and run it securely. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in a working website. The host is Hostinger International Ltd., Lithuania — check against your actual contract.

Fonts

This site loads fonts from Google Fonts, which transmits your IP address to Google. Hosting the fonts locally is more privacy-friendly — say the word and I'll switch it, and this section can go.

Contact form

If you use the form, your details are sent to me and stored to handle your enquiry. Transmission runs via Web3Forms (Softkit Technologies) — adjust if you use a different service. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and your consent under (a). I delete the data as soon as it is no longer needed and no retention obligation applies.

If you message me on WhatsApp, the privacy policy of WhatsApp Ireland Ltd. applies. Your phone number and the content of your message are processed there. I use WhatsApp only to communicate with you and do not pass your number on.

Cookies and consent

On your first visit a banner asks whether you allow cookies for statistics and marketing. You can accept all, reject all or choose individually — all three routes are equal. Without your yes, no statistics or marketing cookie is set. Your decision is stored locally in your browser (technically necessary, Art. 6(1)(f) GDPR) so the banner doesn't reappear on every visit. You can change it at any time via “Cookie settings” at the bottom of the page.

Statistics (only with consent)

If you agree, I use Google Analytics 4 (Google Ireland Ltd.) to see how many people visit the site, where they come from and which sections they read. IP addresses are truncated. Google may transfer data to the USA on the basis of the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6(1)(a) GDPR. Remove as long as no Analytics ID is entered.

Marketing (only with consent)

If you agree, a Meta pixel (Meta Platforms Ireland Ltd.) may measure whether an ad on Instagram or Facebook led to an enquiry. No pixel is currently in use. Remove as long as no pixel ID is entered.

Where enquiries come from

If you arrive via a link with a campaign tag (so-called UTM parameters), your browser remembers for the duration of your visit where you came from. This is transmitted to me only if you submit the contact form — then I can see which route your enquiry came through. No cookie is set and nobody but me receives this information. The legal basis is my legitimate interest in knowing which advertising works (Art. 6(1)(f) GDPR).

Your rights

You have the right to access, rectification, erasure, restriction of processing, objection and data portability. You can withdraw any consent you have given at any time with effect for the future. Just get in touch.

You can lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos, or with the supervisory authority where you live.

Last updated

enter the date the site goes live