Privacy policy

1. General information & controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

René Braun | Blitzmoon
Andresenstraße 12
24113 Kiel
Germany
Email: office@blitzmoon.com

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. This privacy policy applies to the online offering at blitzmoon.com and to all associated subdomains, in particular the analytics portal at analytics.blitzmoon.com.

2. Data collection & hosting

Server log files

Our hosting provider Rockinghoster automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are: browser type, operating system, referrer URL, host name of the accessing computer, time of the server request and the IP address. The basis is Art. 6(1)(f) GDPR (legitimate interest in technically error-free operation and optimisation).

Hosting location & data backup

This website is hosted in Germany. We have concluded a data processing agreement (DPA) with the provider to ensure the protection of your data. To ensure system availability and as part of disaster recovery measures, encrypted backup copies are stored on primary servers in the EU and on fallback servers in non-EU countries.

3. Cookies & audience measurement

Our website uses cookies. These are small text files that your web browser stores on your device. We use technically necessary cookies as well as analytics cookies.

In-house analytics tool (self-hosted)

For the statistical evaluation of visits we use an analytics tool that runs on one of the agency's own servers in Germany (analytics.blitzmoon.com). Unlike many other analytics services, no data is transmitted to third-party providers or external servers. The data is processed on the basis of your express consent pursuant to Art. 6(1)(a) GDPR.

The data collected (e.g. shortened IP addresses, pages viewed, browser used) serves exclusively to optimise our offering. IP addresses are anonymised immediately upon collection, so that no conclusions can be drawn about individual persons. You can withdraw your consent at any time via our consent banner.

4. Contact form, email & live chat

If you send us enquiries via the contact form, by email or through our integrated WordPress live chat, your details are stored by us for the purpose of processing the enquiry and in case of follow-up questions.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR).

Note on the live chat: our chat application is installed locally and does not communicate with external third-party servers.

5. Plugins & tools

Google Web Fonts (local)

For the uniform display of fonts we use web fonts that are provided locally on our server. No data is exchanged with Google servers.

6. Your rights (data subject rights)

Within the framework of the applicable statutory provisions, you have the following rights at any time:

• Access (Art. 15 GDPR): the right to information about your stored data.
• Rectification (Art. 16 GDPR): correction of inaccurate data.
• Erasure (Art. 17 GDPR): the "right to be forgotten".
• Restriction (Art. 18 GDPR): blocking of data processing.
• Data portability (Art. 20 GDPR): receiving your data in a machine-readable format.
• Objection (Art. 21 GDPR): objection to processing based on legitimate interests.

7. Data security, third-country transfer & right to lodge a complaint

We use SSL or TLS encryption to protect the transmission of confidential content. You can recognise this by the "https://" in the address line and the lock symbol in your browser.

Where data is processed on backup servers outside the European Union or the European Economic Area (EEA), this is done exclusively in encrypted form (AES-256) and on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR. Where there is no adequacy decision by the EU Commission for the third country concerned, we secure the data transfer by concluding EU standard contractual clauses (SCC) and by additional technical security measures.

In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority (for Schleswig-Holstein: Unabhängiges Landeszentrum für Datenschutz – ULD).