Privacy Policy

Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection provisions is:

CamperaMedia Inh. Rahim Erbil
Wiesenstr. 12
61184 Karben
Germany
Email: [email protected]

1. What is personal data?

The concept of personal data is defined in the EU GDPR. This includes all information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR) – for example your name, address, telephone number, or IP address.

2. Web Hosting (ALL-INKL)

We host our website with the provider ALL-INKL.COM - Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter: ALL-INKL). To ensure compliance with data protection laws, we have concluded a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with ALL-INKL. When you visit our website, your data is processed on ALL-INKL's servers in Germany.

3. Scope of Data Collection

When you access our website, our hosting provider ALL-INKL automatically collects server log files (see Section 6). Beyond this, we only process data if you actively communicate it to us (e.g. by email or contact forms) or if you consent to the use of analytics tools (Google Analytics) via our cookie banner.

4. Legal Basis of Processing

The processing of your data is always carried out in accordance with the GDPR:

• Consent (Art. 6 (1) lit. a GDPR): For optional cookies (e.g. Google Analytics).
• Performance of a contract or pre-contractual measures (Art. 6 (1) lit. b GDPR): For processing project inquiries or booking meetings.
• Legal obligation (Art. 6 (1) lit. c GDPR): If we are legally required to store data.
• Legitimate interests (Art. 6 (1) lit. f GDPR): For the secure and error-free operation of our website (server log files).

5. Cookies & Cookie Management

Our website uses cookies. Cookies are text files stored on your device. We use a privacy-compliant first-party consent procedure. Your decision is saved in a local cookie named cm_cookie_consent on your browser, so that the banner does not reappear on every page visit.

Overview of Cookies Used:

• cm_cookie_consent: Local first-party cookie storing your consent status (value: 'all' or 'essential'). Lifetime: 1 year (365 days). Legal basis: Art. 6 (1) lit. c GDPR in conjunction with § 25 (2) No. 2 TDDDG (technically necessary).
• Google Analytics Cookies (only after consent): _ga (lifetime: 2 years, used to distinguish users), _gid (lifetime: 24 hours, used to distinguish users), _gat (lifetime: 1 minute, used to throttle request rate). Legal basis: Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG.

You can revoke or adjust your cookie consent at any time. Simply click on the link Privacy Settings in the footer of our website to reopen the consent banner.

6. Server Log Files

The hosting provider ALL-INKL automatically collects and stores the following information in server log files whenever you visit our website:

• Browser type and version used
• Operating system of the user
• Referrer URL (the previously visited page)
• Hostname of the accessing computer (anonymized IP address)
• Date and time of the server request

Processing this data is technically necessary to operate the website safely and reliably (legal basis: Art. 6 (1) lit. f GDPR). For security reasons, server log files are stored for a maximum of 7 days and then automatically deleted.

7. Contacting Us (Email & Forms)

If you contact us by email or via a contact form, the data you transmit (e.g. name, email address, message content) will be stored for the purpose of processing your inquiry. We delete this data as soon as your request has been finaly resolved, provided that no statutory commercial or tax retention obligations (e.g. 6 years for business letters, 10 years for tax records) prevent deletion. Legal basis: Art. 6 (1) lit. b or lit. f GDPR.

7.1 Contact via WhatsApp

If you contact us via WhatsApp, we process your phone number, name, and message content based on Art. 6 (1) lit. f GDPR (legitimate interest in efficient communication) or Art. 6 (1) lit. b GDPR. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (a subsidiary of Meta Platforms Inc., USA). Data transfers to Meta Platforms Inc. in the USA may occur. Meta is certified under the EU-U.S. Data Privacy Framework (DPF), and Standard Contractual Clauses (SCCs) are concluded. For details, see WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

8. Meeting Booking System (Cal.com)

For online booking of consultation slots, we use Cal.com, provided by Cal.com, Inc., 13895 Biscayne Blvd, Suite 105, North Miami, FL 33181, USA. When you book a slot, the details you enter (name, email, phone number, date/time, and description of your request) are transferred to and processed on Cal.com's servers. Processing is carried out for contract performance or pre-contractual measures (Art. 6 (1) lit. b GDPR). We have concluded a Data Processing Agreement (DPA) including EU Standard Contractual Clauses (SCCs) with Cal.com to secure the international transfer of data.

9. Google Analytics

If you grant your consent (Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG), we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). Google Analytics uses cookies to analyze website usage. The information generated by the cookie is typically transferred to and stored on Google LLC servers in the USA. We have enabled IP anonymization so that Google shortens your IP address within the EU prior to transfer.

Google processes this data on our behalf under a DPA (Art. 28 GDPR). Google LLC (USA) is certified under the EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses are concluded. Data is automatically deleted after 14 months. You can revoke your consent at any time by opening the Privacy Settings link in the footer and updating your choices, or by installing the Google Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout

10. YouTube with Enhanced Privacy

We embed videos from YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube's enhanced privacy mode (youtube-nocookie.com), which means Google only sets cookies and registers data (such as your IP address) when you click play. Data transfers to Google LLC in the USA may occur; Google LLC is DPF certified and Standard Contractual Clauses are in place. The legal basis for data transmission upon clicking the video is your consent (Art. 6 (1) lit. a GDPR).

11. Your Rights as a Data Subject (Art. 15-22 GDPR)

You can exercise your data subject rights at any time, free of charge, by emailing us at [email protected]. You have the following rights under the GDPR:

11.1 Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and to receive information about the purposes, categories, recipients, and planned storage duration of the data.

11.2 Right to Rectification (Art. 16 GDPR)

You have the right to obtain the rectification of inaccurate or completion of incomplete personal data stored by us without undue delay.

11.3 Right to Erasure (Art. 17 GDPR)

You have the right to request the deletion of your personal data stored by us, unless a statutory exception (such as legal retention requirements) applies.

11.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to restrict processing if you contest the accuracy of the data, the processing is unlawful, we no longer need the data but you require it for legal claims, or you have objected to processing pursuant to Art. 21 GDPR.

11.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you provided to us, in a structured, commonly used, and machine-readable format, or to demand transfer to another controller, provided the processing is based on consent or a contract.

11.6 Right to Object (Art. 21 GDPR)

If your data is processed based on legitimate interests (Art. 6 (1) lit. f GDPR), you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests. You may object to processing for direct marketing purposes at any time.

11.7 Right to Withdraw Consent

You have the right to withdraw your consent (e.g. for Google Analytics) at any time with effect for the future. The lawfulness of processing based on consent before its withdrawal remains unaffected.

11.8 Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection authority concerning the processing of your personal data by us, e.g., in the member state of your residence or where our business is located.

12. Data Security

We use SSL/TLS encryption for all data transfers on our website. Furthermore, we implement appropriate technical and organizational measures (TOMs) to secure your data against accidental manipulation, loss, destruction, or unauthorized access by third parties. Our security procedures are regularly reviewed and updated in line with technological progress.

For questions regarding data protection, please contact: [email protected]