Privacy Policy

Last updated: January 15, 2024

This privacy policy explains how we collect, use, and protect your personal data when you use this website.

1. Data Controller

Fenja Frings
Email: contact@fenja-frings.de

2. Data We Collect

2.1 Contact Form Data

When you submit the contact form, we collect the following information:

Name: To address you properly in our response
Email address: To respond to your inquiry
Subject: To understand the nature of your inquiry
Message: The content of your inquiry

Legal basis: Your consent (Art. 6(1)(a) GDPR) and our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

Purpose: To process and respond to your inquiry.

Storage duration: Your contact form data is processed through our form service provider and forwarded to our email. We retain your inquiry for as long as necessary to respond to it and for up to 3 years for documentation purposes.

Third-party processors:

Contact form submissions are processed through Formspree (https://formspree.io), which is GDPR-compliant. Please refer to their privacy policy at https://formspree.io/legal/privacy-policy/
CAPTCHA verification is provided by hCaptcha (https://www.hcaptcha.com/), which is GDPR-compliant. Please refer to their privacy policy at https://www.hcaptcha.com/privacy

2.2 Server Log Files

When you visit this website, our hosting provider automatically collects and stores information in server log files:

Browser type and version
Operating system
Referrer URL (the page you came from)
Hostname of the accessing computer
IP address (anonymized)
Date and time of the request

Legal basis: Our legitimate interest in ensuring system security and improving our website (Art. 6(1)(f) GDPR).

Purpose: Technical administration, security, and optimization of the website.

Storage duration: Log files are automatically deleted after 7 days.

2.3 Cookies and Local Storage

This website uses minimal cookies and local storage for essential functionality:

Color scheme preference: We store your selected color scheme (light, dark, or high-contrast mode) in your browser’s local storage to remember your preference on future visits.

Legal basis: Your consent (Art. 6(1)(a) GDPR) and our legitimate interest in providing a better user experience (Art. 6(1)(f) GDPR).

Purpose: To remember your display preferences.

Storage duration: Stored indefinitely in your browser until you clear your browser data.

No tracking cookies: This website does not use any tracking, analytics, or advertising cookies.

We do not sell, trade, or otherwise transfer your personal data to third parties, except:

Service providers: We use trusted third-party service providers (Formspree for form processing, hCaptcha for spam protection) who process data on our behalf under strict data processing agreements.
Legal requirements: We may disclose your information if required by law or in response to valid legal requests.

All third-party service providers we use are GDPR-compliant and located within the EU or provide adequate data protection guarantees.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

HTTPS encryption for all data transmission
Secure form submission through trusted service providers
CAPTCHA protection to prevent automated abuse
Regular security updates and monitoring
Minimal data collection principle

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): You can request information about the personal data we process about you.
Right to rectification (Art. 16 GDPR): You can request correction of inaccurate personal data.
Right to erasure (Art. 17 GDPR): You can request deletion of your personal data under certain circumstances.
Right to restriction of processing (Art. 18 GDPR): You can request that we limit the processing of your personal data.
Right to data portability (Art. 20 GDPR): You can request to receive your personal data in a structured, commonly used format.
Right to object (Art. 21 GDPR): You can object to the processing of your personal data based on legitimate interests.
Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at: contact@fenja-frings.de

6. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, workplace, or the place of the alleged infringement.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Contact form inquiries: Up to 3 years for documentation purposes
Server logs: 7 days
Local storage preferences: Until you clear your browser data

8. Children’s Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new privacy policy on this page and updating the “Last updated” date.

10. Contact Information

If you have any questions about this privacy policy or our data processing practices, please contact us:

Email: contact@fenja-frings.de

11. Technical Details

11.1 Hosting

This website is hosted on a VPS (Virtual Private Server) with appropriate security measures in place.

11.2 Static Site

This is a static website generated with Hugo. No dynamic server-side processing of user data occurs except through the contact form submission to our third-party form processor.

11.3 No Analytics

This website does not use any analytics services, tracking pixels, or advertising networks. We respect your privacy and do not track your browsing behavior.

Note: This privacy policy is provided in good faith and for informational purposes. For specific legal advice regarding GDPR compliance, please consult with a qualified legal professional.