Privacy policy

Controller

This privacy policy applies to the website www.streamline-your-business.com.

Providing the website

This website is delivered through Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit it, Cloudflare processes your IP address and the other details your browser sends with every request in order to deliver the pages and to protect the website against attacks and abuse. Cloudflare acts as our processor (Art. 28 GDPR). A transfer to the USA is based on Cloudflare, Inc.’s certification under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).

If you open the address without “www”, a server that we operate at Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, as our processor, forwards you to the address with “www”. It processes your IP address and the request only for this forwarding and does not store them.

The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

Audience measurement with Umami

To understand which pages are visited how often, we use Umami, an open-source audience measurement software. Umami does not run at an analytics provider but on a server that we operate ourselves; the provider of this server is Hostinger International Ltd. (address above) as our processor (Art. 28 GDPR).

Recorded are the page visited and its title, the page you came from (without its search parameters), the browser, operating system and device type, derived from the identifier your browser sends with every request, and the country, region and city, derived from your IP address. The measuring program reads no further details from your device, such as screen size or language setting, and stores nothing there. The IP address itself is not stored; to be able to count returning visits, a hash value that changes every month is formed from it and your browser’s identifier. No profile of you is created. The recorded data is deleted after 25 months so that we can compare periods with the previous year; after that, only aggregated monthly figures without reference to individual visits remain. The legal basis is our legitimate interest in designing the website according to demand (Art. 6(1)(f) GDPR).

Contact by email or phone

When you contact us by email or phone, we process your details in order to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request aims at a contract or its preparation, and otherwise our legitimate interest in answering requests (Art. 6(1)(f) GDPR).

Emails to the address above are processed by Google Workspace, a service of Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, as our processor (Art. 28 GDPR). Google engages Google LLC, USA, as a further processor for this; a transfer to the USA is based on its certification under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).

We keep your message until your request has been handled; beyond that only where commercial and tax retention obligations (§ 257 HGB, § 147 AO) require it, for their duration.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). An informal message to the email address above is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin, Germany.

Obligation to provide data, automated decisions

You are not obliged to provide us with personal data; without the connection data described under “Providing the website”, however, the website cannot be delivered. There is no automated decision-making, including profiling (Art. 22 GDPR).