DEVOSWEBPrivacy policy
Controller
Devrim Yilmaz, Sachsenstr. 2, 90599 Dietenhofen, Germany, email: info@devosweb.de
What this site does and does not do
This site sets no cookies for advertising or analytics and embeds no services from Google, Meta or other ad networks. Fonts, images and videos are served from my own server. For audience measurement I use my own counter without cookies (see “Visitor statistics without cookies”).
Hosting and server logs
The site runs on a server in Germany. When you visit, technically necessary data is written to log files: IP address, date and time, page requested, browser type and the referring site. This serves secure operation and defence against attacks (Art. 6 (1) (f) GDPR) and is deleted after 14 days at the latest. The recipient is my hosting provider Realtox Media, which provides the server in Germany.
Cloudflare
To protect against attacks and deliver the site faster, it is served through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the IP address and technical connection data. The legal basis is my legitimate interest in secure and fast operation (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. Cloudflare privacy policy: www.cloudflare.com/privacypolicy
Contact form and email
If you write to me via the form or by email, I process your name, business, contact details and message to answer your request (Art. 6 (1) (b) GDPR, for general questions (f)). Providing the data is voluntary, but without it I cannot reply. Requests via the form are stored on my server. My email mailbox, which receives emails to me and notifications about new requests, is hosted by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. The EU Commission has recognised Switzerland as providing an adequate level of data protection. Requests on the server are deleted automatically after 90 days, emails once they are no longer needed. If an order results, I keep the necessary records for the statutory periods (for example § 147 AO).
Free website check
When you use the website check, my server loads the address you enter once and analyses the home page. The address and the result are not stored. As with every request, the server logs described above are created. The legal basis is your request for the check (Art. 6 (1) (b) GDPR).
The site contains a link to WhatsApp. Only when you click it are you forwarded to WhatsApp, a service of WhatsApp Ireland Limited (Meta). No data is sent to WhatsApp before that. If you message me there, WhatsApp processes your phone number and message under its own terms. I only use the message to answer your request (Art. 6 (1) (b) GDPR, for general questions (f)). Providing the data is voluntary, but without it I cannot reply. WhatsApp privacy notice: www.whatsapp.com/legal/privacy-policy-eea
Visitor statistics without cookies
To see how the website is used, my server counts visits while delivering the pages. It only uses information your browser sends with every page request anyway: the requested address, the previously visited page (referrer), the browser identifier (user agent) and the IP address. No script runs in your browser for this, no cookies are set and nothing is stored on or read from your device.
The following is stored: the pages viewed, the time of the visit, entry and exit page, the number of pages viewed, the domain of the page you came from (for example google.de) and whether a phone or a computer was used.
So that several page views can be recognised as one visit, the server creates a checksum from the IP address and browser identifier together with a random value that is generated anew every day. The IP address itself is not stored. The random value is deleted after one day. After that, the checksum can no longer be linked to anyone, and you are not recognised on another day.
The legal basis is my legitimate interest in designing the website according to demand (Art. 6 (1) (f) GDPR). If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is counted. The data is deleted after about 13 months.
Settings stored in your browser
Your choice of light or dark design and, if active, your cookie selection are stored only in your browser (localStorage) and are never sent to me.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Write to info@devosweb.de.
Right to object
Where I process data based on my legitimate interest (Art. 6 (1) (f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
You may also lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de
There is no automated decision-making or profiling.