1. Controller

Drago Herrera, Rummelsburger Straße 37, 10315 Berlin, Germany

Email: dravvt.culture467@passfwd.com

2. Hosting, server log files and file delivery

This website is hosted by DigitalOcean, LLC (101 6th Avenue, New York, NY 10013, USA) on a server in Frankfurt am Main. On every page view the server automatically stores technical data in log files: IP address, date and time, page visited, referring page (referrer), browser and operating system. This is necessary to provide the website securely and reliably (Art. 6(1)(f) GDPR). The log files are deleted automatically after a short time. Images and audio files are delivered through DigitalOcean’s content delivery network (Spaces). A data processing agreement under Art. 28 GDPR is in place with DigitalOcean; transfers to the USA are covered by the EU-US Data Privacy Framework.

3. Cookies and local storage

Without consent we only store what is necessary for the website to work (Section 25(2) No. 2 TDDDG):

• Language choice (cookie “NEXT_LOCALE”, 1 year)
• Colour scheme and text size (in the browser, “localStorage”)
• Your decision about Google Analytics (in the browser, “localStorage”)
• Access to the protected CV (cookie “cv-auth”, 24 hours)

4. Google Analytics (only with your consent)

With your consent we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us how the website is used: pages visited, time on page, device and browser, approximate location and clicks on contact buttons. For this the cookies “_ga” and “_ga_<ID>” are set (stored for up to 2 years). Google Analytics 4 does not store full IP addresses. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without consent, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

5. Contact form and email

If you write to us via the contact form or by email, we process your name, email address and message to answer your request (Art. 6(1)(b) GDPR for enquiries about an order, otherwise point (f)). Messages are sent via Resend (Resend, Inc., USA) and the mailbox is hosted by Namecheap (Namecheap, Inc., USA). Your data is deleted once the request has been dealt with, unless there are statutory retention obligations.

6. Links to WhatsApp, Instagram and other services

This website contains links to WhatsApp, Instagram, GitHub and other services. No data is sent to these providers until you click a link; from then on their privacy policy applies.

7. Embedded YouTube videos

Some blog articles contain YouTube videos (Google Ireland Limited) in privacy-enhanced mode (youtube-nocookie.com). When the video loads, a connection to Google’s servers is made and your IP address is transmitted; YouTube only sets cookies once you play the video (Art. 6(1)(f) GDPR).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw consent at any time (Art. 7(3)). To do so, write to the email address above. You can also lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.