Privacy policy

1. Privacy at a glance

General information

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

2. Data collection on this website

Who is responsible for data collection?

Data processing on this website is carried out by the website operator:

Paul Spengler – Webdesign Dorsten
Edith-Stein-Ring 12
46284 Dorsten
Germany
Email: info@webdesign-dorsten.com
Phone: +49 1577 128 2110

How do we collect your data?

Some data is collected when you provide it to us, for example data you enter into a contact form.

Other data is collected automatically or, after your consent, by our IT systems when you visit the website. This is mainly technical data (e.g. browser, operating system or time of the page view).

What do we use your data for?

Some data is collected to ensure the website is provided without errors. Other data may be used to analyse your user behaviour.

Legal bases for processing

We process personal data on the following legal bases under Art. 6 GDPR:

• Art. 6(1)(b) GDPR – to perform a contract or take pre-contractual steps (e.g. handling enquiries)
• Art. 6(1)(f) GDPR – based on legitimate interests (e.g. server log files, IT security)
• Art. 6(1)(a) GDPR – based on your consent (e.g. non-essential cookies)

3. Hosting

We host the content of our website with Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. Vercel records the following data in log files (stored for a maximum of 30 days):

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

A data processing agreement under Art. 28 GDPR is in place with Vercel. Vercel processes data exclusively on our instructions. More information: vercel.com/legal/privacy-policy.

4. Google Fonts

This website uses fonts from Google Fonts. They are embedded locally via the Next.js framework: the font files are downloaded during the build and served exclusively from our own server (Vercel). No connection to Google servers is made when you view a page, so no personal data is transmitted to Google.

5. External links & social media

This website contains a link to our LinkedIn profile (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). When you click the link, you leave our website. LinkedIn then processes your data in accordance with its own privacy policy.

We have no influence on this external service. No data is transmitted to LinkedIn automatically – the link is only opened when you actively click it. The legal basis is our legitimate interest in presenting our professional network (Art. 6(1)(f) GDPR).

6. Google Analytics

Description and scope of processing

This website uses Google Analytics 4 (GA4), a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to evaluate user behaviour on our website and to compile statistical reports on website activity. The information generated about your use of this website is usually transferred to and stored on a Google server in the USA.

Data collected

Google Analytics 4 processes the following data, among others:

• IP address (processed only briefly and not stored)
• Pages viewed and time spent
• Browser type and operating system
• Country of origin / approximate location
• Referrer URL (previously visited website)
• Device type (desktop, mobile, tablet)
• Usage behaviour and interactions on the website
• Clicks on phone and email links and form submissions (as events, without the content you entered)

IP addresses

Google Analytics 4 does not log or store IP addresses. Google uses the IP address only briefly, for example to derive the approximate location, and then discards it. The additional IP anonymisation setting is enabled.

Legal basis and consent

Google Analytics is used exclusively on the basis of your explicit consent under Art. 6(1)(a) GDPR. Google Analytics is only activated after you agree via our cookie banner. You can withdraw your consent at any time with effect for the future by opening the cookie settings on our website again.

Data transfer to the USA

Google processes data in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023), which ensures an adequate level of data protection. Google also uses standard contractual clauses (SCC) under Art. 46(2) GDPR.

Data processing agreement

We have concluded a data processing agreement with Google under Art. 28 GDPR. Google processes the data on our behalf and exclusively on our instructions.

Objection and deactivation

You can prevent collection by Google Analytics in the following ways:

• Withdrawing your consent via the cookie settings on this website
• Installing the browser add-on to deactivate Google Analytics: tools.google.com/dlpage/gaoptout
• Deactivating personalised advertising in your Google account at myaccount.google.com

More information on privacy at Google: policies.google.com/privacy and support.google.com/analytics/answer/6004245.

6a. Google Ads conversion tracking

If you reach this website via a Google ad and submit an enquiry, we may measure this with Google Ads conversion tracking (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google may set a cookie on your device and learns that you sent an enquiry after clicking the ad. We only receive statistical reports, no information about individual people.

The tracking is only loaded after your consent via the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw your consent at any time via the "Cookie settings" link in the footer. The Consent Mode signals for analytics and advertising purposes apply (ad_storage, ad_user_data, ad_personalization, analytics_storage).

7. Cookies

Our website uses cookies. Cookies are small text files stored on your device. Some of these cookies are technically necessary, others help us improve this website. More information can be found on our cookie page (German).

Language preference: When you choose a language via the DE / EN switch, or when you are forwarded to the English version based on your browser's language setting, the cookie "NEXT_LOCALE" stores the selected language for up to 12 months. It contains no personal data apart from the language code and is only used to show you the site in your language (Art. 6(1)(f) GDPR, § 25(2) no. 2 TDDDG).

8. Contact and enquiry forms

If you send us an enquiry via one of our forms (e.g. contact form, demo request or price calculator), we process the details from the form – name, email address, phone number if provided and your message – to handle the enquiry and for any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Storage: Your enquiry is stored in a database at our service provider Neon (Neon, Inc., USA). Notification: So that we can handle your enquiry promptly, it is forwarded to us by email via the Resend service (Resend, Inc., USA). The details from the form are transmitted to Resend in the process.

A data processing agreement under Art. 28 GDPR is in place with both service providers. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or standard contractual clauses under Art. 46(2) GDPR.

Spam protection: Our forms contain spam protection without cookies and without third parties (a field invisible to visitors and a time check). To limit abusive requests, your IP address is processed briefly in the server's memory and not stored permanently (Art. 6(1)(f) GDPR).

9. Storage period

• Contact enquiries: until they have been fully handled, usually up to 3 years
• Server log files (Vercel): max. 30 days
• Google Analytics cookies: up to 2 years (with consent); analytics data is deleted automatically after 14 months
• Language preference cookie: up to 12 months
• Tax-relevant documents (invoices etc.): 10 years under § 147 AO

10. Your rights

Under the GDPR you have the following rights towards us:

• Access to the data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• The right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR): Landesbeauftragte für Datenschutz und Informationsfreiheit NRW (LDI NRW), www.ldi.nrw.de

11. Contact

If you have questions about data protection, you can reach us at info@webdesign-dorsten.com or by phone at +49 1577 128 2110.