Legal
Privacy policy
Draft. This text is a draft and has not been legally reviewed. It will be approved by a lawyer or data protection officer before publication.
Information on the processing of personal data under Article 13 GDPR.
1. Controller
Bits and Friends GmbH, Brebacher Weg 55, 12683 Berlin, Deutschland. Represented by: Matthias Barth (Geschäftsführer). Email: impressum@bitsandfriends.com (legal enquiries) or Zum Kontaktformular (enquiries via the form). Commercial register: Amtsgericht Lübeck, HRB 26202 HL. VAT identification number: DE335476969.
2. No cookies, no tracking
This website sets no cookies for analytics or advertising and loads no third-party content. Fonts and images are served from this server. No cookie banner is therefore required. Your chosen appearance (light or dark) is stored only locally in your browser and never leaves your device.
3. Server logs
When you access this website, the hosting server processes technically necessary data: shortened IP address, date and time, requested file, transferred volume, browser identifier. The legal basis is Article 6(1)(f) GDPR (secure, stable operation). Logs are deleted after [TODO: agree retention period with the host].
4. Contact form and email
If you use the contact form, I process the details you enter: name, email address, optionally company, phone number and topic, and your message. These details are transmitted to me by email only and are not stored in a database. The legal basis is Article 6(1)(b) GDPR (handling your enquiry) and Article 6(1)(f) GDPR (legitimate interest in responding).
The recipient is the mail server of Bits & Friends GmbH within the European Union. [TODO: review and name the data processing agreement with the mail server operator]. Messages are deleted once the correspondence is complete, at the latest after six months, unless statutory retention obligations apply.
5. Spam protection
To protect against automated submissions the form uses a field invisible to humans, a timing check and a limit on requests per IP address. The IP address is processed briefly in the memory of the form service and is not stored permanently. No third-party human-verification service is used.
6. Your rights
- Access to the data processed (Article 15 GDPR)
- Rectification of inaccurate data (Article 16 GDPR)
- Erasure (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Objection to processing (Article 21 GDPR)
- Complaint with a supervisory authority (Article 77 GDPR)
The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information. [TODO: confirm competence]
7. No automated decision-making
There is no automated decision-making and no profiling.
8. Version
[TODO: enter date of last review]