Privacy Statement
Detailed information on the processing of personal data on this website in accordance with GDPR and TDDDG.
1. Controller
Responsible for data processing on this website is:
Media-Flex24 UG
Anastasia Curdoglo
Bad Meinberger Straße 1
32760 Detmold
Germany
Email:info@media-flex24.de
Phone:+49 5231 5611370
2. Data Protection at a Glance
We process personal data only as far as necessary to provide this website, handle inquiries, ensure technical security, fulfill contracts, or based on consent. Non-essential cookies and optional services are loaded only after consent.
3. Legal bases for processing
The processing of personal data is based in particular on the following legal bases:
- Art. 6 Para. 1 lit. a GDPR with consent, for example for optional cookies, external fonts, or marketing services.
- Art. 6 Para. 1 lit. b GDPR for pre-contractual measures and contract fulfillment.
- Art. 6 Para. 1 lit. c GDPR for compliance with legal obligations, such as evidence and retention duties.
- Art. 6 para. 1 lit. f GDPR to protect legitimate interests, especially IT security, abuse prevention, and efficient communication.
- § 25 TDDDG for storing and reading information on end devices, insofar as no technically necessary exception applies.
4. Hosting, technical provision, and server log files
This website is operated by an external hosting provider. When accessing the website, technical data is processed by the web server. This may include IP address, date and time of access, requested URL, referrer URL, browser type, operating system, HTTP status code, and data volume transferred.
The processing is for technical delivery, stability, security, error analysis, and abuse prevention based on Art. 6 Para. 1 lit. f GDPR. Log data is stored only as long as required for security and error analysis, unless longer retention is necessary due to specific security incidents.
5. Contact, project inquiries, and forms
If you contact us via form, email, or phone, we process the data you provide. This may include name, company, email address, phone number, project type, budget range, message, technical metadata, and communication history.
The purpose of processing is to handle your inquiry, communications, prepare offers, conduct pre-contractual measures, and document the process. Legal bases are Art. 6 Para. 1 lit. b GDPR and Art. 6 Para. 1 lit. f GDPR.
If a contract is concluded, data may be retained according to commercial and tax law requirements. Inquiries without a subsequent contract will be deleted once no longer needed unless legal obligations prevent deletion.
6. Email communication
For communication via email, we process your email address, message contents, technical transmission data, and possibly attachments. Please do not send particularly sensitive data unless necessary. Email communication can pose security risks if end-to-end encryption is not used.
7. Cookies, Consent, and Own Consent Manager
This website uses cookies and similar technologies. Some cookies are technically necessary, e.g., for display, security, or storing your privacy preferences. Other cookies or services are for optional functions, comfort, analytics, marketing, or external integrations.
We use a proprietary consent manager from media-flex24 to manage your consents. The consent manager blocks optional services until you actively consent to the respective category. Your choice is stored locally in the browser and in a technically necessary consent cookie, so the website can apply and document your decision.
Specifically stored are the selected categories, date and time of selection, a technical version number, and the note that the decision was made via the media-flex24 consent manager. No transmission to an external consent provider occurs as a result.
The categories are: Necessary, Comfort and Display, Statistics, as well as Marketing and External Content. Non-essential services are only loaded if you consent to the respective category. Declining is possible without disadvantaging the website visit.
The legal basis for consent management is Art. 6 Para. 1 lit. c GDPR for fulfilling legal documentation obligations and Art. 6 Para. 1 lit. f GDPR for the legal operation of the website. Storing technically necessary information is based on § 25 Para. 2 TDDDG. Optional services are loaded only based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG.
You can change or revoke your consent at any time via the linkor withdraw it.
8. Adobe Fonts / Typekit
This website may use Adobe Fonts to enable high-quality and consistent font display. The provider is Adobe Systems Software Ireland Limited or Adobe Inc. Adobe Fonts are loaded only after you have consented to the relevant category via our own consent manager.
In this process, technical data like IP address, browser information, and accessed pages can be transmitted to Adobe. The legal basis is Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG.
9. Chatbot, external scripts, and marketing services
A chatbot or comparable communication service may be integrated on this website. It is loaded only if corresponding consent is given. When used, entered content, technical data, timestamps, and communication histories may be processed.
The purpose is to facilitate contact, pre-qualify inquiries, and improve communication. The legal basis is your consent according to Art. 6 Para. 1 lit. a GDPR and, if you actively make contact, Art. 6 Para. 1 lit. b GDPR.
10. Analysis, tracking, and conversion measurement
If analysis or tracking services are used, this is only after consent. These services may process information about page views, devices, browsers, origin, interactions, and conversion events. Details are found in this cookie declaration or in the categories listed in the cookie settings.
11. Embedded contents and external media
If external content such as videos, maps, social media elements, fonts, chatbots, or analytics tools are integrated, personal data may be transmitted to providers outside this website. Such content is generally loaded only after consent unless technically necessary.
12. Applications and recruiting
If you send us application data, we process the data you provide for reviewing and conducting the application process. This may include contact details, resume, qualifications, certificates, and communication content. Legal basis is § 26 BDSG, Art. 6 Para. 1 lit. b GDPR, and Art. 6 Para. 1 lit. f GDPR.
13. Recipients and Processors
Personal data may be transmitted to technical service providers as far as required for hosting, maintenance, email, consent management, security, communication or project processing. If providers act as processors, their involvement is based on contracts per Art. 28 GDPR.
14. Transfers to Third Countries
For some services, a transfer of personal data to countries outside the European Union or the European Economic Area cannot be excluded. If necessary, this is based on an adequacy decision, EU standard contractual clauses, additional guarantees, or your consent.
15. Storage duration
Personal data will be deleted as soon as the processing purpose ceases and no legal retention obligations prevent deletion. Contractual and billing data may be retained according to commercial and tax laws. Consent proof is stored as long as necessary for documentation.
16. Your Rights
Under the legal conditions, you have the following rights:
- Information on processed personal data according to Art. 15 GDPR
- Correction of incorrect data according to Art. 16 GDPR
- Deletion of personal data according to Art. 17 GDPR
- Restriction of processing according to Art. 18 GDPR
- Data portability according to Art. 20 GDPR
- Objection to processing according to Art. 21 GDPR
- Revocation of given consents according to Art. 7 para. 3 GDPR
To exercise your rights, you can contact us at any time using the contact details provided above.
17. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
18. SSL/TLS encryption
This website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” in the browser's address bar.
19. Objection to Promotional Emails
The use of published contact details to send unsolicited advertising and information materials is hereby objected to. We reserve the right to take legal action in case of unsolicited advertising.
20. Social Media Data Protection
Information on data processing in connection with social media appearances can be found on our separate page:Privacy for Social Media.