Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

How do we collect your data?

Your data is collected partly by you providing it to us, for example by entering data into a contact form.

Other data is automatically collected by our IT systems when you visit the website, either automatically or after your consent. These are mainly technical data (e.g., internet browser, operating system, or time of page access). This data collection occurs automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to request restriction of the processing of your personal data under certain circumstances. Additionally, you have the right to lodge a complaint with the competent supervisory authority.

For these and other questions about data protection, you can contact us at any time using the address provided in the imprint.

Analysis Tools and Third-Party Tools

When visiting this website, your surfing behavior can be statistically analyzed, primarily using so-called analysis programs.

Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting and Content Delivery Network (CDN)

Cloudflare

This website is delivered via Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare operates a global content delivery network (CDN): the content of this website is stored on Cloudflare servers and delivered from the data center closest to you.

When you visit this website, Cloudflare processes technically necessary data, in particular your IP address, the date and time of the request, the requested address, browser type and operating system. This data is required to deliver the website and to protect it against attacks and abuse. We do not analyze this data ourselves.

Cloudflare is used on the basis of Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in providing our website securely, quickly and reliably.

Data transfers to the USA are based on the EU-US Data Privacy Framework (DPF), under which Cloudflare is certified. In addition, Cloudflare has agreed to the EU Commission’s standard contractual clauses. Details: https://www.cloudflare.com/privacypolicy/.

Data processing agreement

We have concluded a data processing agreement with Cloudflare. It ensures that Cloudflare processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Fonts

The fonts used on this website are stored locally on our server. No connection to third-party servers (e.g. Google Fonts) is made when you visit the website.

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission on the internet (e.g., communication by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the Responsible Entity

The responsible entity for data processing on this website is:

devrocketz.com | Development and Creativity Agency
Owner: Tobias Siedersleben
Im Mediapark 5
50670 Cologne

Phone: +49 221 290 52 660
Email: hello@devrocketz.com

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Many data processing operations are only possible with your explicit consent. You can revoke a previously given consent at any time. The legality of data processing carried out until the revocation remains unaffected by the revocation.

IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE SPECIFIC LEGAL BASIS ON WHICH PROCESSING IS BASED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR IF THE PROCESSING IS FOR THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21 PARA. 2 GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, especially in the member state of their habitual residence, place of work, or place of the alleged infringement. This right to complain exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract in a commonly used, machine-readable format, either to yourself or to a third party. If you request the direct transfer of data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as site operators, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and by the lock icon in your browser’s address bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, and Correction

Under the applicable legal provisions, you have the right at any time to receive free information about your stored personal data, their origin, recipients, and the purpose of data processing and, if applicable, the right to correct or delete this data. For this and other questions regarding personal data, you can contact us at any time at the address provided in the imprint.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address provided in the imprint. The right to restrict processing exists in the following cases:

If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data but you require it for the assertion, exercise, or defense of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection under Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data may only be processed—with the exception of their storage—with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for important public interests of the European Union or a member state.

4. Data Collection on This Website

Cookies and Local Storage

This website only uses cookies and similar technologies if they are technically necessary or if you have given your consent.

Technically necessary (legal basis: Section 25 (2) No. 2 TDDDG and Art. 6 Para. 1 lit. f GDPR):

The cookie cc_cookie stores your choice in the cookie banner so that we do not have to ask you again on every page. It is deleted after 6 months.
If you close the notice about the other language version of this website, this is noted in your browser’s local storage. No personal data is stored.

With your consent (legal basis: Section 25 (1) TDDDG and Art. 6 Para. 1 lit. a GDPR):

Google Analytics cookies (_ga, _ga_*), see section 5.

You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of every page. If you withdraw it, the analytics cookies are deleted. You can also set your browser to allow cookies only in individual cases, to reject them in general or to delete them automatically when you close the browser.

Contact Form

If you send us a message via the contact form or the feedback form, we process the data you enter (email address and message, optionally also first and last name and subject), together with the page from which you sent the form, the language and the time of the request.

The data is transmitted in encrypted form to a server function at Cloudflare (see section 2). It forwards the data to our automation system n8n, which we operate ourselves on a server of Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, located in Germany. n8n sends your inquiry as an email to our mailbox hello@devrocketz.com, which is also provided by Hostinger. The form data is not stored on the website itself. We have concluded a data processing agreement with Hostinger.

The processing is based on Art. 6 Para. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries sent to us (Art. 6 Para. 1 lit. f GDPR).

Your inquiry remains with us until you ask us to delete it or the purpose for storing the data no longer applies (e.g. after your inquiry has been fully processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Spam Protection with Cloudflare Turnstile

To protect our forms against automated access (spam, bots), we use Cloudflare Turnstile. The provider is Cloudflare, Inc. (see section 2).

Turnstile is only loaded when you click into a form field. It then uses technical characteristics of your browser and your request (e.g. IP address, browser and device information, interaction characteristics) to check whether the input comes from a human. For this purpose, a connection to challenges.cloudflare.com is established. Turnstile does not set cookies for advertising or analytics purposes. The check usually runs invisibly; only if Cloudflare is unsure will you be shown a short task.

The use is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in protecting our forms against abuse. Access to your device is permitted under Section 25 (2) No. 2 TDDDG, as it is necessary for sending the form you requested. Data transfers to the USA are based on the EU-US Data Privacy Framework. More information: https://www.cloudflare.com/turnstile-privacy-policy/.

Inquiries via Email, Telephone, or WhatsApp

If you contact us via email, telephone, or WhatsApp, your inquiry, including all personal data arising from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

For contact via WhatsApp, the privacy policy of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, also applies: https://www.whatsapp.com/legal/privacy-policy-eea. The WhatsApp buttons on this website are plain links; data is only transmitted when you click one of them.

The processing of this data is based on Art. 6 Para. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries sent to us (Art. 6 Para. 1 lit. f GDPR).

The data you send us via contact inquiries remains with us until you ask us to delete it or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

5. Analytics and Maps

Google Tag Manager and Google Analytics 4

With your consent, we use Google Analytics 4 to understand how visitors use our website and to improve it. Google Analytics is integrated via Google Tag Manager. The provider of both services is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool we use to manage tracking codes on the website. It does not create user profiles or set cookies itself, but it connects to Google servers and transmits your IP address.

Google Analytics collects information about your use of the website, e.g. pages visited, time spent, approximate location, device, browser and the source of the visit. For this purpose, cookies (_ga, _ga_*, stored for up to 2 years) are stored on your device. Google Analytics 4 does not store IP addresses. The information collected is usually transferred to Google servers and may also be processed in the USA.

Both services are only loaded once you agree to the “Statistics” category in the cookie banner. Until then, this website does not connect to Google. The legal basis is your consent (Art. 6 Para. 1 lit. a GDPR and Section 25 (1) TDDDG). You can withdraw your consent at any time via “Cookie settings” at the bottom of the page.

Data transfers to the USA are based on the EU-US Data Privacy Framework, under which Google is certified. We have concluded a data processing agreement with Google. More information: https://policies.google.com/privacy?hl=en and https://support.google.com/analytics/answer/6004245?hl=en.

Google Maps

On our contact page, you can display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is only loaded when you click “Load map”. Only then is a connection to Google servers established; in particular, your IP address and the page you are visiting are transmitted to Google, and Google may set cookies. Without your click, no data is transmitted to Google Maps.

The legal basis is your consent given by clicking “Load map” (Art. 6 Para. 1 lit. a GDPR and Section 25 (1) TDDDG). The consent applies only to the current page view. Data transfers to the USA are based on the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy?hl=en.

This website links to our profiles on LinkedIn and Instagram and to our clients’ websites. These are plain links, not embedded plugins. Data is only transmitted to the respective provider when you click a link; the privacy policy of that provider then applies.