Skip to content
Contact

Privacy policy

This policy covers the website semacentric.de.

Controller

The controller within the meaning of Art. 4(7) GDPR is:

Ugur Aydogan (Semacentric), Berckhusenstraße 25, 30625 Hannover, Deutschland, e-mail: kontakt@semacentric.de

Hosting

The website runs on a server I rent from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Falkenstein (Germany). Hetzner processes the data on my behalf (Art. 28 GDPR); hosting involves no transfer to a country outside the EU.

Visiting the website

To deliver a page, the server processes your IP address, the address you requested, the date and time and the details of your browser. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure and working delivery of the website. No access log with these details is stored.

The website sets no cookies, uses no analytics or advertising services and loads no content from third-party servers. The fonts are delivered with the website; no data is sent to font providers.

Contact form

When you write to me through the contact form, I process your name, your e-mail address, your message and the language of the page to answer your request. The legal basis is Art. 6(1)(b) GDPR when your request concerns or prepares a contract with me, otherwise Art. 6(1)(f) GDPR; my legitimate interest is answering requests.

The message reaches me by e-mail. For that I use the sending service Resend of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, as a processor (Art. 28 GDPR). The transfer to the USA rests on the adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), under which Resend is certified.

To protect against automated mass messages, I check every message before it is sent (Art. 6(1)(f) GDPR; legitimate interest: protection against spam and abuse):

  • The server limits how many messages it accepts from one IP address within a short time. For that it keeps your IP address in memory for at most ten minutes, without storing it.
  • The form contains a field invisible to people and a signed timestamp token. They tell me programs that fill in forms automatically, without giving data to anyone else.
  • I check that the domain of your e-mail address can receive e-mail (a Domain Name System lookup) and does not belong to a provider of throwaway addresses.

I delete your request once it is settled. If it concerns a contract, I keep it as long as commercial and tax law require (section 257 German Commercial Code, section 147 German Fiscal Code).

Links to other websites

The website links to other services, such as kontexto.de, GitHub and LinkedIn. Only when you follow a link does that provider process data about you, under its own responsibility.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). Write to me at the e-mail address above.

Right to object: Where I process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your residence, your place of work or the alleged infringement.

Obligation to provide data, automated decisions

You are not obliged to give me any data. Without name, e-mail address and message I cannot answer a request sent through the form. No automated decision-making, including profiling (Art. 22 GDPR), takes place.