Privacy Policy
1. Introduction
The protection of your personal data is our highest priority. This Privacy Policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “Data”) in connection with our online offering. This includes the associated website, functions, and content, as well as external online presences, such as social media profiles (hereinafter collectively referred to as “Online Offering”). Your personal data is treated confidentially and strictly in accordance with statutory data protection regulations and the provisions of this Privacy Policy.
General Information
This Privacy Policy provides a comprehensive overview of what happens to your personal data when you visit this website. Personal data comprises all information that can be used to personally identify you.
Data Controller
Data processing on this website is carried out by the website operator. The contact details can be found in the “Data Controller” section of this Privacy Policy.
Collection of Your Data
Personal data is collected, on the one hand, when you actively provide it to us, e.g., by filling out a contact form. Other data is collected automatically or after your consent by our IT systems when you visit the website. This primarily involves technical data (e.g., internet browser, operating system, or time of page access). This data collection takes place automatically as soon as you enter the website.
Use of Your Data
Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior to optimize our offering and adapt it to your needs.
Data Transfer to Third Parties
As part of our business operations, it may be necessary to transfer personal data to external parties. This transfer only takes place under specific conditions: if the disclosure is necessary for the fulfillment of a contract, if there is a legal obligation (e.g., to tax authorities), if there is a legitimate interest pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using external service providers for data processing, the disclosure of personal data takes place exclusively on the basis of a valid data processing agreement pursuant to Art. 28 GDPR.
Revocation of Consent to Data Processing
Certain data processing operations are only possible with your explicit consent. You can revoke this consent at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Object to Specific Data Processing and Direct Marketing (Art. 21 GDPR)
If your personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (Objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. Upon your objection, your personal data will no longer be used for these marketing purposes (Objection pursuant to Art. 21(2) GDPR).
Right to Object to Specific Data Processing and Direct Marketing (Art. 21 GDPR)
If your personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (Objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. Upon your objection, your personal data will no longer be used for these marketing purposes (Objection pursuant to Art. 21(2) GDPR).
2. Data Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Eric Hubbes
Address: König Str 23, 53115 Bonn, Germany
Website: www.erichubbes.com
Email: erichubbes@gmail.com
Phone: +49 172 3168638
3. Data Processors
We cooperate with various processors who process data on our behalf. These service providers are contractually obligated to treat the data confidentially and to use it exclusively within the scope of the respective service.
4. Definitions
This Privacy Policy primarily uses terms defined in the General Data Protection Regulation (GDPR), such as Personal Data, Processing, Controller, Processor, and Consent (see Art. 4 GDPR).
5. Hosting
This website is hosted on the servers of an external service provider to ensure a reliable and secure online offering. The data processing by the hosting provider is based on Art. 6(1)(f) GDPR (legitimate interest in providing a stable and secure website).
The hosting provider is:
STRATO AG
Otto-Ostrowski-Straße 7, 10249 Berlin, Germany
For details, please refer to the STRATO privacy policy: https://www.strato.de/datenschutz/
6. Legal Basis for Data Processing
Depending on the purpose, your data is processed based on:
Consent: Art. 6(1)(a) GDPR.
Contract Fulfillment / Pre-contractual Measures: Art. 6(1)(b) GDPR.
Legal Obligations: Art. 6(1)(c) GDPR.
Legitimate Interests: Art. 6(1)(f) GDPR.
7. Data Transfer to Unsafe Third Countries (e.g., USA)
If tools from companies based in privacy-unsafe third countries (e.g., USA) are used on this website, your data may be transferred to and processed there. A data transfer to the USA is legally permissible if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or possesses appropriate additional guarantees.
8. Storage Duration
Unless a more specific storage period is specified in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g., tax or commercial retention periods).
9. Security Measures & SSL/TLS Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL or TLS) via HTTPS. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
10. Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes: IP address, date and time of the request, referrer URL, browser type and version, and operating system. The legal basis for this is Art. 6(1)(f) GDPR.
11. Cookies & Borlabs Cookie Consent Banner
This website uses cookies. Cookies are small text files stored on your device. We use both session cookies (which are deleted when you close your browser) and persistent cookies to optimize usability and analyze website usage.
We use a consent management tool (Borlabs Cookie) to obtain legally compliant consent for the use of cookies and tracking technologies. The provider is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. Borlabs sets a technically necessary cookie to save your cookie preferences. The legal basis is Art. 6(1)(f) GDPR and Art. 6(1)(a) GDPR (if consent was requested).
12. Contact Form & Email Inquiries
If you send us inquiries via the contact form or email, your details, including the contact details you provided, will be stored for the purpose of processing the inquiry and in the event of follow-up questions. The processing is based on Art. 6(1)(b) GDPR (contractual/pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in processing requests).
13. Analytics and Tracking Tools
We use analytics and tracking tools to ensure the continuous optimization of this website. Data processing only occurs if you have given your explicit consent via our Cookie Banner (Art. 6(1)(a) GDPR). You can revoke this consent at any time.
Google Analytics, Google Ads, Google Conversion Tracking, Google Tag Manager: Provided by Google Ireland Limited. Data may be transferred to Google servers in the USA. Google is certified under the EU-US DPF.
Facebook & Instagram Plugins: Provided by Meta Platforms Ireland Limited. Data may be transferred to the USA. Meta is certified under the EU-US DPF.
14. Shipping, Delivery, and Payment
If goods are shipped to customers, we collect and process additional personal data necessary for the shipment (e.g., name, delivery address). The legal basis is Art. 6(1)(b) GDPR (fulfillment of a contract). Data is passed on to shipping service providers only to the extent necessary for delivery.
Payment Services: You have the option to pay for your purchases via the following methods: Advance payment via bank transfer or PayPal.
15. Google Fonts
This website uses Google Fonts for the uniform display of fonts. To ensure the protection of your data, the Google Fonts are hosted locally on our own server. No connection is established to Google’s servers, and your IP address is not transmitted to Google.