Privacy Policy

Controller / Responsible Party

The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:

If you have any questions about data protection, please contact us directly at the email address above.

Data We Collect & Why

We only collect personal data that is necessary for the operation of this website and the provision of our services. The following categories of data may be processed:

• Server log files: When you visit our website, your browser automatically transmits data including IP address (anonymised), browser type and version, operating system, referring URL, date and time of access. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in website security and stability). Log files are automatically deleted after 7 days.
• Contact form data: When you submit our contact form, we collect your first name, last name, email address, subject, and message. This data is processed on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We retain this data for up to 6 months or until the matter is resolved.
• Email correspondence: If you contact us by email, we process your email address and any personal data contained in your message solely for the purpose of handling your inquiry.

We do not collect data for advertising profiling, we do not use tracking pixels, and we do not sell or share your data with third parties for marketing purposes.

Cookies & Local Storage

This website uses only technically necessary storage mechanisms. Specifically:

• Theme preference (localStorage key: planich-theme): Stores your light/dark mode preference locally in your browser. This data never leaves your device and is not transmitted to our servers. It is not a cookie and therefore does not require consent under TTDSG §25.
• CSRF Token (session cookie): A temporary session cookie used to protect form submissions from cross-site request forgery attacks. This cookie is strictly necessary for security and is deleted when you close your browser. No consent is required under TTDSG §25(2)(2).

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or analytics cookies.

Google Fonts

This website loads fonts (Orbitron, Rajdhani, Share Tech Mono) from Google Fonts via fonts.googleapis.com. When your browser requests a font, your IP address is transmitted to Google servers in the United States.

Google Fonts is used on the basis of Art. 6(1)(f) GDPR (legitimate interest in a visually consistent and performant website). Google LLC is certified under the EU-US Data Privacy Framework, providing an adequate level of data protection.

Google's privacy policy: https://policies.google.com/privacy

Hosting, Infrastructure & Email

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Hostinger processes server log data and email data on our behalf as a data processor under a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR.

Hostinger's servers used for this website are located within the European Union, ensuring an adequate level of data protection under GDPR.

The legal basis for data processing related to hosting is Art. 6(1)(f) GDPR (legitimate interest in operating a reliable and secure website).

Data Transfers to Third Countries

Our hosting and email infrastructure (Hostinger) is based in the EU (Cyprus) and processes data within the European Economic Area (EEA).

The only known transfer of data outside the EEA occurs when loading Google Fonts as described in Section 04. Google LLC is certified under the EU-US Data Privacy Framework, providing an adequate level of data protection per the European Commission's adequacy decision of July 10, 2023.

We do not transfer your personal contact form data outside the EEA.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights. To exercise any of these rights, please contact us at office@planich.com:

• Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and receive a copy of that data.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to legal retention obligations.
• Right to restriction (Art. 18 GDPR): You may request that we restrict the processing of your data in certain circumstances.
• Right to data portability (Art. 20 GDPR): You may receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You may object at any time to the processing of your data based on legitimate interest (Art. 6(1)(f) GDPR).
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

We will respond to your request within 30 days in accordance with Art. 12 GDPR.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).

The competent supervisory authority in Germany is:

You may also contact the data protection authority in your country of residence or place of work.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, in accordance with Art. 32 GDPR. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our server (HTTPS)
• CSRF protection on all form submissions
• Regular updates to server software and frameworks
• Restricted access to personal data on a need-to-know basis

Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at office@planich.com and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically.

Material changes that affect your rights will be communicated prominently on our website.

Contact & Questions

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: