Privacy policy
The German version is the authoritative one. This translation is provided so that you can understand what happens to your data. In case of any discrepancy, the German privacy policy applies.
1. Controller
The controller for the data processing on this website is the small business under which MaskottchenCrew is operated:
Yes, It's Warm!
Owner: Alfonso Iannuzzelli
Düsseldorfer Straße 322
47053 Duisburg
Germany
Email: fonsbun6@gmail.com
2. General information on data processing
This website is built as a static site and designed around data minimisation. We use no cookies for tracking or marketing purposes, no web analytics tool such as Google Analytics, and no advertising networks. Personal data is processed only to the extent necessary for the technical operation of the site and for handling your enquiries.
3. Hosting, server log files and encryption
The website runs on a dedicated server provided in a data centre belonging to our hosting provider PawHost. In doing so the provider processes, on our behalf, the data required to operate the website. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
When the site is accessed, the server automatically records the following information in what are known as server log files:
- IP address of the requesting device
- date and time of access
- the file or URL requested
- volume of data transferred
- browser and operating system used
- referrer URL, i.e. the previously visited page
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in operating the website securely and free of technical faults. This data is not combined with other data sources and is deleted after a short period, as a rule within a few days, unless it is needed to investigate a security incident.
Encryption: for security reasons this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar switching from “http://” to “https://” and by the padlock symbol. With encryption active, the data you send us cannot be read by third parties.
4. Fonts
This website uses fonts stored locally on our own server and delivered from there. No data is transmitted to Google, for example via Google Fonts, or to any other third party; in particular, your IP address is not passed on when the fonts are loaded.
5. Contact form
You can send us an enquiry using the form on the contact page. The details you enter there are processed: name, organisation, email address, optionally the telephone number, the date, location and type of the event, the answers regarding costume and handler, and your free-text message.
Transmission is encrypted throughout and uses a POST request exclusively. At no point does any of the enquiry data appear in the browser address bar.
Transmission and delivery are handled by Formspree, Inc., 21750 Hardy Oak Blvd, Ste 104 #26968, San Antonio, Texas 78258, USA. On submission the details you entered are transferred to Formspree, processed there and delivered to us by email. A data processing agreement pursuant to Art. 28 GDPR is in place with Formspree[TODO: confirm once concluded in the Formspree account; add the date].
Transfer to a third country: the processing takes place in the USA. According to its own statements, Formspree bases the transfer on the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR. This means that your enquiry leaves the EU. Under US law, US authorities may access data held by US providers, and a level of protection fully equivalent to European standards cannot be guaranteed. If you would rather avoid this, write to us directly at the email address given above instead — the form is an offer, not a requirement.
The purpose of the processing is to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry is directed at a contract, and otherwise Art. 6(1)(f) GDPR. The data is deleted once the enquiry has been dealt with conclusively and no statutory retention periods apply. Retention period at Formspree:[TODO: check the retention setting in the Formspree account and enter it; delete submissions there regularly].
To protect against automated submissions, the form contains a field that is invisible to visitors. No additional personal data is collected in the process and no cookies are set. No CAPTCHA is used.
6. Contact by email
If you contact us by email, the data you provide — email address, name, the content of the message — is processed in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where a contract is being initiated or performed, and otherwise Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer required for that purpose and no statutory retention obligations apply.
7. External links
Our site links to external services with their own privacy policies, currently to our profile on Instagram. Clicking these links takes you off our website. The respective providers alone are responsible for the data processing on those external sites.
No content from these services is embedded in our site. So simply visiting our site transmits no data to these third parties.
8. Cookies and local storage
This website sets no cookies and stores nothing in your browser’s local storage. A consent banner is therefore not required.
9. Your rights
Under the GDPR you have, in particular, the following rights:
- access to the data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to the processing (Art. 21 GDPR)
Where processing is based on your consent, you may withdraw it at any time with effect for the future. An informal email to fonsbun6@gmail.com is enough to exercise your rights.
10. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the federal state of your habitual residence or of the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
11. Currency and changes
This privacy policy is currently valid. As the website develops or legal requirements change, it may become necessary to amend it.
Last updated: [TODO: enter the date on release]