Privacy Policy

Controller for Data Processing
Information on the processing of your data pursuant to Article 13 of the General Data Protection Regulation (GDPR)

1. Controller and Data Protection Officer

The controller responsible for this website is:
Nadja Lana Winkelmann
Lindenstr. 213
40235 Düsseldorf
Germany
nadja@nadjalana.com

You can reach the data protection officer via:
nadja@nadjalana.com

2. Data Processed for the Provision of the Website and the Creation of Log Files

a. What data is processed and for what purpose?

Each time content on the website is accessed, certain data that may allow identification is temporarily stored. The following data is collected:

Date and time of access

IP address

Hostname of the accessing device

Website from which the site was accessed

Pages accessed via this website

Page visited on our website

Status message (e.g. successful retrieval)

Amount of data transmitted

Browser type and version

Operating system

Temporary storage of this data is necessary for the website to be delivered. Additional storage in log files is used to ensure the functionality of the website and the security of IT systems. This constitutes our legitimate interest in data processing.

b. What is the legal basis for processing this data?

Data is processed on the basis of Article 6(1)(f) GDPR (legitimate interest).

c. [If applicable] Are there other recipients of the personal data besides the controller?

The website is hosted by [insert name, postal address, and email of the hosting provider].
The hosting provider receives the above-mentioned data as a data processor.

d. How long is the data stored?

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For the provision of the website, this is typically when the session ends.
Log files are kept for a maximum of 24 hours and are only accessible to administrators. After that, they are only available indirectly via backup tapes and are permanently deleted after a maximum of four weeks.

3. Rights of the Data Subject

a. Right of Access

You have the right to request access to the personal data we process about you (Article 15 GDPR).

b. Right to Object

You have the right to object to the processing of your personal data for reasons arising from your particular situation (see Section II below).

c. Right to Rectification

If the data concerning you is incorrect or incomplete, you may request correction or completion under Article 16 GDPR.

d. Right to Erasure

You may request the deletion of your personal data under Article 17 GDPR.

e. Right to Restriction of Processing

Under Article 18 GDPR, you may request restriction of processing of your personal data.

f. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you may lodge a complaint with any supervisory authority of your choice under Article 77(1) GDPR. This includes the supervisory authority responsible for the controller:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
https://www.ldi.nrw.de/kontakt/ihre-beschwerde

g. Right to Data Portability

If the conditions of Article 20(1) GDPR are met, you have the right to receive your personal data that we process automatically based on your consent or a contract, or to have it transferred to a third party.
However, the data collected to provide the website and log file storage is necessary for technical operation and is not based on consent or a contract, but on Article 6(1)(f) GDPR. Therefore, Article 20 GDPR does not apply in this context.

II. Right to Object under Article 21(1) GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.
In such a case, the controller will no longer process your data unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Please note that collecting data to provide the website and storing it in log files is essential for the operation of the site.