Privacy Policy

Controller

GOODARTSY, Mahyar Goudarzi, Schlossstrasse 251, 41238 Mönchengladbach, Germany

Email: contact@goodartsy.com

There is no statutory obligation to appoint a data protection officer.

Overview of processing

Categories of data: master data (e.g. name, company), contact data (email, phone), content data (project description), usage and meta/communication data (IP address, time of access).

Data subjects: prospective clients, business partners, website visitors.

Purposes: provision of the website, responding to enquiries, initiating and performing contracts, security and abuse prevention.

Legal bases

Art. 6 (1) (a) GDPR (consent, e.g. when submitting the contact form).

Art. 6 (1) (b) GDPR (pre-contractual measures and performance of a contract).

Art. 6 (1) (f) GDPR (legitimate interest in a secure and functional website).

Hosting and server log files

The website is delivered via the infrastructure of Lovable Labs Incorporated and its content delivery network (Cloudflare, Inc.). When pages are accessed, technically necessary access data is processed: IP address, date and time, file requested, volume of data transferred, referrer, browser type and operating system.

This data serves solely secure and stable operation and the prevention of attacks and is deleted or anonymised automatically after a short period. Legal basis: Art. 6 (1) (f) GDPR.

Data processing agreements pursuant to Art. 28 GDPR are in place with the providers used; EU Standard Contractual Clauses apply to transfers to third countries.

Cookies

This website uses no cookies for analytics, marketing or profiling purposes. Only technically necessary information required to deliver the site is processed. A cookie consent banner is therefore not required.

Contact form and email contact

Information submitted via the contact form (name, company, email address, optional phone number, requested service, budget range, project start, briefing link, project description and the page you submitted from) is processed solely to handle your enquiry and any follow-up questions.

Legal bases are Art. 6 (1) (a) and (b) GDPR. Transmission is TLS-encrypted.

The data is deleted once the enquiry has been fully handled, unless statutory retention obligations apply (in particular commercial and tax retention periods of up to ten years).

Consent given can be withdrawn at any time with effect for the future by emailing contact@goodartsy.com.

Email delivery via Resend

To deliver the internal notification and the confirmation email we use Resend (Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA).

The data entered in the form is transmitted to Resend and processed there for delivery. A data processing agreement is in place with Resend; transfers to the USA are based on the EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

Legal basis: Art. 6 (1) (a) and (b) GDPR.

Content and media via Sanity

Editorial content, images and videos on this website are managed in the Sanity content management system (Sanity AS, Norway, with infrastructure in the EU and the USA).

Media is either delivered from our own server or loaded directly from the Sanity CDN. In the case of direct requests, the device IP address may technically be transmitted to the CDN. Legal basis: Art. 6 (1) (f) GDPR (efficient and secure delivery of content).

Fonts

All fonts are served locally from our own server. There is no connection to Google Fonts or any other external font provider and no data is transmitted to third parties.

Google Search Console

A Google Search Console meta tag may be included in the source code to verify site ownership. No tracking takes place, no cookies are set and no usage data is transmitted to Google.

External links and social media profiles

Links to external profiles are plain hyperlinks. Data is only transmitted to the respective provider once you click such a link. No social media plugins are embedded.

Recipients and third-country transfers

Personal data is passed on only to the providers named above and only to the extent necessary to operate the website and handle enquiries. Data is never shared for advertising purposes.

Where data is transferred to third countries, this is based on EU Standard Contractual Clauses or an adequacy decision of the European Commission.

Retention

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. Data is then deleted or processing is restricted.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent at any time (Art. 7 (3)).

Right to object under Art. 21 GDPR: you may object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR.

You also have the right to lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Data security

The website is delivered exclusively via encrypted HTTPS/TLS. We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.

Updates

We update this privacy policy whenever changes to our processing require it. The version published here applies.