Privacy policy

The legally binding version is the German privacy policy. This English version is for convenience only.

1. Controller

Ben Dangelmayr
Friedensstraße 49
69121 Heidelberg, Germany
Email: support@dangelstudio.de

2. Legal bases

Personal data is processed only where necessary, primarily on the basis of Art. 6 (1) (f) GDPR (legitimate interest in secure operation), (a) (consent, e.g. for non-essential cookies) and (b) (pre-contractual / contractual requests).

3. Hosting

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, acting as a processor under Art. 28 GDPR (a data processing agreement is in place). Processing takes place in data centers in Germany or the EU.

4. Server log files

When the website is accessed, the host automatically collects server log data sent by your browser (IP address, date and time, page requested, referrer, browser and operating system) to operate and secure the site (Art. 6 (1) (f) GDPR). Log files are deleted automatically by the hosting provider, usually after eight weeks at the latest.

5. Cookies & consent

By default this site uses only technically necessary functions, which are exempt from consent under § 25 (2) TDDDG; no cookie banner is required. Before any non-essential service (e.g. analytics or marketing) is used, genuine consent will be obtained via a banner offering equivalent “accept” and “reject” options.

For reach measurement, I count page views anonymously and cookie-free on my own server: one counter per day and page, plus one daily counter each for a few events (a click on a Marketplace link, a submitted contact form) and for the referring domain a visit came from. Only these totals are stored; no IP addresses are stored, no identifiers are assigned and no profiles are created. The browser signals “Do Not Track” and “Global Privacy Control” are respected, in the browser and on the server.

6. Fonts

Fonts are served locally from this server (self-hosted). There is no connection to third-party servers (e.g. Google Fonts) and no data is transferred for this purpose.

7. Contact

If you contact me by email or via the contact form, the data you provide (e.g. name, email, message) is processed to handle your request (Art. 6 (1) (b) or (f) GDPR) and deleted once no longer needed. Contact-form messages are forwarded to me by email via my web space and are not stored on the web server. To prevent abuse (rate limiting), the web space stores a non-reversible, daily-rotating check value of the sending connection together with a timestamp for up to 24 hours; IP addresses themselves are not stored.

8. Third-party services

No third-party services (analytics, maps, embedded video, CDNs, captchas) are currently integrated. Note: any such service added later must be listed here with provider, purpose, legal basis and any third-country transfer.

9. Note regarding my apps

This privacy policy applies only to this website. The apps on the Atlassian Marketplace are covered by a separate policy, which is also linked from each marketplace listing: Atlassian apps privacy policy.

10. Your rights

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent with future effect (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

11. Automated decision-making

No automated decision-making or profiling takes place.