Privacy Policy

1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information on data processing

We process our users' personal data only to the extent necessary to provide a functional website along with our content and services. As a rule, processing takes place only with the user's consent or on the basis of a statutory permission (Art. 6 GDPR).

3. Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This primarily includes IP addresses, contact requests, meta and communication data, website access data, and other data generated through a website.

Provider:

The host is used for the purpose of fulfilling our contract with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering (Art. 6(1)(f) GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host.

Server log files

The provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request, and the IP address. This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and security of the website).

4. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

5. Contact form and email contact

If you send us inquiries via the contact form or by email, the details you provide (name, email address, and your message) will be stored by us for the purpose of processing the request and in case of follow-up questions.

This data is processed on the basis of your consent (Art. 6(1)(a) GDPR) and, where your inquiry is aimed at concluding a contract, on the basis of Art. 6(1)(b) GDPR. You may withdraw your consent at any time. We retain this data until your request has been fully handled, unless statutory retention periods require otherwise.

Form processing via Formspree

To technically process and deliver the messages submitted via the contact form, we use the service Formspree(Formspree, Inc., 2100 Geng Road, Suite 210, Palo Alto, CA 94303, USA). When you submit the form, the data you enter is transmitted to Formspree's servers and processed there in order to forward your message to us.

This may involve a transfer of personal data to the USA. The legal basis is your consent (Art. 6(1)(a) GDPR and, with regard to the third-country transfer, Art. 49(1)(a) GDPR). A data processing agreement is in place with Formspree, and the transfer is additionally based on the EU Standard Contractual Clauses. More information: Formspree's Privacy Policy.

6. Fonts (self-hosted)

This website uses the web fonts "Manrope" and "Space Grotesk" for a consistent display of typography. These are hosted locally on our own serverand bundled at build time. No connection to Google's servers or other third parties is established when the page loads, and no personal data (such as your IP address) is transferred to third parties for this purpose.

7. Cookies and local storage

This website does not use tracking cookies or third-party cookies. There is no analysis of your usage behavior and no marketing tracking.

We only store a single technically necessary entry in your browser's local storage to remember your chosen light/dark display theme. This preference stays on your device, is not personal data, is not transmitted to us or any third party, and therefore does not require consent (§ 25(2) TDDDG).

8. Storage period

Unless a more specific storage period has been stated, your personal data will remain with us until the purpose for processing it no longer applies (e.g., after your inquiry has been fully handled). Mandatory statutory retention periods (e.g., under commercial or tax law) remain unaffected.

9. Your rights as a data subject

Under the GDPR, you have in particular the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7(3) GDPR)

To exercise your rights, an informal message to jonathan@scrollworkmedia.com is sufficient.

10. Right to lodge a complaint with a supervisory authority

In the event of breaches of data protection law, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. A list of supervisory authorities is available at: bfdi.bund.de.