Last updated: [DATE]
The short version: we collect as little as we can, we don’t track you, and we use what you send us only to reply. The German version is the legally binding one.
Who is responsible
The controller under the GDPR is [FULL NAME], WebOra, [STREET AND NUMBER], [POSTCODE AND CITY], Germany. Email: Webora.y.m@gmail.com. Full details are in the legal notice.
Visiting this website
When you open a page, your browser sends technical data to our hosting provider so the page can be delivered: IP address, date and time, the page requested, browser and operating system. This is stored in server logs for security and to keep the site running, then deleted. Legal basis: our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR).
Hosting provider: [HOSTING PROVIDER, ADDRESS, LOG RETENTION PERIOD].
Cookies and tracking
We don’t use cookies, analytics or advertising trackers. Your browser’s session storage keeps one small note, whether you have already seen the opening animation during this visit, and its local storage remembers the language you chose. Neither ever leaves your device.
When you contact us
If you write to us using the contact form, by email or on Instagram, we use the details you send (name, email address, company, your message and what you need) only to answer your inquiry and, if we work together, to prepare and carry out the project. Legal basis: steps prior to a contract and the contract itself (Art. 6 (1) (b) GDPR), and your consent where you give it (Art. 6 (1) (a) GDPR).
When you send the contact form, your details travel encrypted to our hosting provider, Netlify, which checks the message for spam automatically, stores it and forwards it to our email inbox. Only we can see it, in a password-protected area. If the form can’t be sent, Gmail opens with your message filled in instead, and you decide whether to send it.
We keep inquiries for as long as needed to handle them. If no project follows, we delete them after [RETENTION PERIOD], unless the law requires us to keep them longer.
Who receives your data
We don’t sell your data or share it for advertising. It is processed only by the services needed to reply and run the site:
- Email: Google (Gmail), Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
- Instagram direct messages: Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. Their own privacy policy applies to messages sent there.
- Hosting: [HOSTING PROVIDER].
Some of these providers may process data outside the EU. Where they do, transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework) or standard contractual clauses.
Links to other sites
Links to Instagram and other sites only take you there when you click them. Nothing is loaded from those services before you do.
Your rights
You can ask us at any time for access to your data, and to correct, delete or restrict it, to receive it in a portable format, or to object to its processing (Art. 15–21 GDPR). You can withdraw consent at any time, with effect for the future. Just email Webora.y.m@gmail.com.
You also have the right to complain to a data protection supervisory authority, for example the one in the German state where we are based: [STATE DATA PROTECTION AUTHORITY].
Changes
We update this notice when the site changes, for example when a new service is added. The date at the top shows the latest version.