Privacy policy of the website

1. Controller

Valeriia Kravchenko (sole trader, project “Jena für dich”)
Fritz-Ritter-Str. 2007747 JenaGermany · E-mail: kontakt@jenafuerdich.de

No data protection officer has been appointed (there is no obligation to do so under § 38 BDSG, the German Federal Data Protection Act).

This policy applies to the website “Jena für dich”. The app is subject to its own privacy policy.

2. Hosting, delivery and server logs (Cloudflare)

The website runs on Cloudflare Workers (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Each time the website is accessed, Cloudflare processes technically necessary data: IP address, time, address accessed, browser identifier (user agent), referrer. Purpose: delivery of the website and protection against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Cloudflare is my processor (Art. 28 GDPR, Data Processing Addendum). Processing in the USA is possible; it is based on the EU-US Data Privacy Framework and, alternatively, on standard contractual clauses.

Server logs: The request logs of the website (Workers Logs) are switched off; I do not analyse any access data and do not create user profiles. Cloudflare processes connection data to defend against attacks only for a short time, in accordance with its own retention periods. Cloudflare’s privacy information: https://www.cloudflare.com/privacypolicy/

3. No cookies, no tracking, no forms

The website does not set any cookies and does not use local storage. There are no analytics or advertising services, no social media plugins and no forms. The selected language is contained only in the address (/, /en, /ru, /uk, /pl, /tr, /ar, /fa, /zh, /ja, /vi) and is not stored. Fonts, images and icons are delivered by this website itself; no data is transmitted to Google Fonts or other third-party providers.

4. Contact by e-mail (Zoho)

If you write to me by e-mail, I process your address and message in order to deal with your request (Art. 6(1)(f) GDPR; for requests under the GDPR, Art. 6(1)(c)). I delete the correspondence once the matter has been dealt with; I keep a brief record of data subject requests (date, type, outcome) for three years. E-mail service provider: Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, as processor (Art. 28 GDPR) on the basis of a data processing agreement. The e-mails are stored in Zoho’s EU data centre (Netherlands, backup location Ireland). According to Zoho, in individual cases employees of the Zoho group in India may access the data for technical support and maintenance; this is based on the EU standard contractual clauses (Art. 46(2)(c) GDPR).

5. Links to other websites

Links to other websites (for example to authorities, to Cloudflare or to Apple’s App Store via “Download the app”) open their pages. Only then do these providers receive your connection data; their privacy information applies. Apple is responsible for the download of the app (Apple Distribution International Ltd., Ireland).

6. Recipients, storage period, no automated decisions

I do not sell any personal data, do not pass it on for advertising and do not use it for automated decisions (Art. 22 GDPR). The only recipients are the processors named above: Cloudflare for delivery of the website, Zoho exclusively for incoming e-mails.

7. Obligation to provide data

You are not obliged to provide personal data. However, without the technically necessary connection data (section 2), the website cannot be displayed; sending me an e-mail is voluntary.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal e-mail to kontakt@jenafuerdich.de is sufficient; your request will be handled free of charge. You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); in Thuringia, this is the Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI, Thuringian State Commissioner for Data Protection and Freedom of Information), Häßlerstraße 8, 99096 Erfurt: https://www.tlfdi.de/

Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(f) GDPR (sections 2 and 4). I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defence of legal claims.