Privacy Policy

1. Controller

Michal Maciejewski
Sole proprietor trading as “digital-mm”
Bahnhofstr. 120c
61267 Neu-Anspach
Germany

Phone: +49 159 01093643
Email: contact@digital-mm.com

2. Hosting and server logs

This website is operated on a virtual server supplied by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes personal data as a processor under an agreement pursuant to Article 28 GDPR.

Whenever the website is accessed, server logs may process the IP address, access date and time, requested page or file, referrer URL, browser type and version, operating system, HTTP status code and volume of data transferred.

This processing is necessary to deliver the website and maintain its stability and security. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, stable and error-free operation of the website. Log data is normally deleted or anonymised after no more than 14 days. It is retained for longer only where necessary to investigate a specific security incident or to establish, exercise or defend legal claims.

Further information:STRATO privacy information.

3. Language detection and preference

When the home page is accessed, the preferred language is selected using theAccept-Language header sent by the browser and, where supplied by the hosting infrastructure, a country code derived from the IP address. This information is used solely to select the appropriate language version. The legal basis is Article 6(1)(f) GDPR, and the legitimate interest is providing a user-friendly multilingual website.

If you expressly select a language using the language switcher, the technically necessary cookie preferred_locale is stored. It contains only the language code de,en or pl, applies throughout the website and expires after one year. Its sole purpose is to retain your selected language for future visits. The legal basis is Section 25(2)(2) TDDDG in conjunction with Article 6(1)(f) GDPR. You can delete the cookie at any time in your browser settings.

4. Contact by email or phone

If you contact us by email, the information you provide, in particular your email address, name, message content and technical metadata, is processed to handle your enquiry. Email communication is provided by STRATO GmbH, already identified in Section 2, as a technical service provider. Further information is available in theSTRATO privacy information.

If you contact us by phone, your phone number and the information provided during the call are processed insofar as necessary to deal with your enquiry. Calls are not recorded.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns entering into or performing a contract, and otherwise Article 6(1)(f) GDPR. The legitimate interest is responding to business and general enquiries. Data is deleted once the enquiry has been fully resolved, unless statutory retention duties or legitimate interests require further storage. Contractual and tax-relevant records are retained for the statutory periods, normally six, eight or ten years.

5. Fonts, analytics and tracking

The Poppins font used on this website is served locally from our own server. Loading the font does not establish a connection to Google. This website does not use web analytics, advertising pixels or other tracking technologies and does not set marketing cookies.

6. Links to social networks and external websites

The website contains ordinary links to external services, in particular LinkedIn, Instagram, X and GitHub. No data is sent to these providers merely by visiting this website. Only when you click a link do you access the relevant provider's website. The respective provider is responsible for the processing of personal data on that website.

7. Recipients and international transfers

Personal data is disclosed only to the technical service providers named in this policy, legally authorised bodies or other recipients where required to perform a contract, comply with a legal obligation or protect legitimate interests. We do not intend to transfer data outside the European Economic Area ourselves. Where a processor uses a subprocessor outside the EEA, a transfer takes place only on the basis of a European Commission adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR.

8. Your rights

Subject to the applicable legal requirements, you have in particular the right to:

• access your personal data (Article 15 GDPR),
• rectification of inaccurate data (Article 16 GDPR),
• erasure of your data (Article 17 GDPR),
• restriction of processing (Article 18 GDPR),
• data portability (Article 20 GDPR),
• object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR).

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the controller's place of establishment is:

The Hessian Commissioner for Data Protection and Freedom of Information
Wilhelmstraße 7
65185 Wiesbaden
Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de
Website: datenschutz.hessen.de

9. Provision of data and automated decisions

Technical connection data is required to access the website. You are not required to provide any other personal data. If you contact us, however, at least the contact details needed for a response are required. No automated decision-making, including profiling, takes place.

10. Encryption and updates

The website uses TLS encryption to protect transmitted data. This policy will be updated if the website, service providers or legal requirements change.