Legal
Privacy Policy
Introduction
This privacy policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter "data") in connection with the provision of our services and within our online offering and the websites, functions, and content associated with it.
1. Controller
Rafael Alex
Ullsteinstraße 16
90763 Fürth
Germany
Phone: +49 (0) 176 320 33 188
Email: a@rafaelalex.de
2. Types of Data Processed
- Master data (e.g. personal master data, names, addresses)
- Contact data (e.g. email, phone numbers)
- Content data (e.g. text input, photographs, videos)
- Usage data (e.g. visited websites, interest in content, access times)
- Meta/communication data (e.g. device information, IP addresses)
3. Categories of Data Subjects
Visitors and users of the online offering (hereinafter collectively referred to as "users").
4. Purpose of Processing
- Provision of the online offering, its functions, and content
- Answering contact requests and communicating with users
- Security measures
- Reach measurement/marketing
The WhatsApp button on this website links to the service of Meta Platforms Ireland Ltd.; no data is sent to Meta until you open the link yourself.
5. Terminology Used
"Personal data" is any information relating to an identified or identifiable natural person (hereinafter "data subject").
"Processing" is any operation or set of operations performed on personal data, whether or not by automated means.
"Controller" is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
6. Relevant Legal Bases
In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing. The legal basis for data processing is based on Art. 6 para. 1 lit. a, b, c, and f GDPR.
7. Security Measures
We take appropriate technical and organizational measures in accordance with legal requirements to ensure a level of protection appropriate to the risk.
8. Processors and Hosting
If, in the course of our processing, we disclose data to other persons and companies (processors), transfer it to them, or otherwise grant them access to the data, this is done only on the basis of legal permission.
Hosting: This website is hosted by tec-promotion GmbH, Benno-Strauß-Straße 7, 90763 Fürth, Germany. Servers are located in Germany. A data processing agreement (DPA) in accordance with Art. 28 GDPR is in place with the hoster. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the reliable presentation of our website).
Content Delivery Network (CDN): We use the service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA as a Content Delivery Network. Cloudflare temporarily processes user IP addresses. The use is based on our legitimate interests in a secure and efficient provision of our online offering in accordance with Art. 6 para. 1 lit. f GDPR. Data transfer to the USA is based on the EU-US Data Privacy Framework. More information: https://www.cloudflare.com/privacypolicy/
9. Transfers to Third Countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), this is done only to the extent necessary for the fulfillment of our (pre)contractual obligations.
10. Rights of Data Subjects
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.
11. Right of Withdrawal
You have the right to withdraw consent you have given with effect for the future.
12. Right to Object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. f GDPR (Art. 21 GDPR).
To exercise your right to object, you can contact us by email at a@rafaelalex.de.
14. Deletion of Data
The data processed by us is deleted or restricted in its processing in accordance with legal requirements.
15. Cal.com Integration
We use the appointment booking service Cal.com, Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Legal basis: Art. 6 para. 1 lit. b GDPR. Privacy policy: https://cal.com/privacy
16. Rybbit Analytics
Rybbit Analytics, a privacy-friendly, self-hosted web analytics service, runs on all pages of rafaelalex.de. Fully cookieless and GDPR-compliant. Legal basis: Art. 6 para. 1 lit. f GDPR. More information: https://rybbit.com
17. Project Questionnaire
For project inquiries I provide an online questionnaire, accessible via an individual, non-public access link. The data processed includes the answers given in the questionnaire (e.g. name, email address, details about the project) as well as voluntarily uploaded files. Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures).
The current progress is stored server-side under a random identifier so the questionnaire can be resumed later or the link shared within a team. Anyone with the link can view and change the answers; the link should therefore not be passed on to third parties. Drafts are deleted automatically after 7 days without access.
On submission, the answers are processed on my self-hosted automation platform (n8n) and delivered by email to me and to the email address provided. To summarize and structure the answers I use the AI service Claude by Anthropic PBC, 500 Howard St, San Francisco, CA 94105, USA; for this purpose the answers (excluding uploaded files) are transmitted to Anthropic. Privacy policy: https://www.anthropic.com/privacy
18. Server Log Files
The provider automatically collects and stores information in server log files:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
Legal basis: Art. 6 para. 1 lit. f GDPR.
19. SSL Encryption
This site uses SSL encryption. You can recognize an encrypted connection by the "https://" and the lock symbol in your browser bar.
20. Changes to the Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements.
21. Sprachverliebt (iOS App)
The iOS app Sprachverliebt and its website have their own privacy policy (in German): sprachverliebt.rafaelalex.de/datenschutz.
Last updated: October 2026