Who is responsible
Justin Uerlings, trading as Arsomia Creative Studio
Kirchstraße 9
76857 Wernersberg
Germany
This policy explains which personal data is processed when you visit arsomia.com or get in touch, why, on what legal basis, and what rights you have.
Hosting
This website and the [email protected] mailbox are hosted by our hosting provider on a server within the European Union. The host processes data only on our behalf, under a data processing agreement (Art. 28 GDPR).
Server log files
Whenever a page is loaded, the web server automatically records technical information: IP address, date and time, the page requested, the referring page, and browser and operating system. This is needed to deliver the website and to keep it secure and stable.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). The log is archived once it reaches 10 MB, and archived logs are deleted automatically after 10 days. Depending on how many visitors the site has, an entry can therefore be stored for a few weeks.
Cloudflare
Visits to this website pass through Cloudflare, which protects it against attacks and speeds up loading. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes your IP address and technical request data, and may set a technically necessary security cookie to tell people and bots apart.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and fast website). Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework. A data processing agreement with Cloudflare is in place. More information: cloudflare.com/privacypolicy
Contact form and email
When you use the contact form, these details are sent to our mailbox by email: your name, company (optional), what you're looking for, your budget range, your email address and your message (optional). The same applies when you email us directly.
We use this information only to answer your enquiry and, if we work together, to carry out the project. Legal basis: Art. 6(1)(b) GDPR for enquiries about a possible project, otherwise Art. 6(1)(f) GDPR.
Messages are not stored in a database on the website. Emails are deleted once your enquiry is fully dealt with, unless they have to be kept for legal reasons (for example, business letters for 6 years and invoices for 8 years).
To prevent spam, the form keeps a short log with the date, the result and a scrambled (hashed) form of your IP address. The log is deleted after 3 months.
Cookies and browser storage
This website does not use cookies for visitors, and it does not use analytics, tracking or advertising.
If you click the light/dark switch, your choice is saved in your browser (localStorage) so the site remembers it on your next visit. Nothing is saved unless you click it, and it contains no personal data. You can remove it at any time by clearing your browser's site data.
The admin area of this website uses a session cookie for logging in. This only applies to people with a login.
Fonts are hosted on this server; no external font services are used.
Your rights
You have the right to:
- access the personal data we hold about you (Art. 15 GDPR)
- have incorrect data corrected (Art. 16 GDPR)
- have your data deleted (Art. 17 GDPR)
- have processing restricted (Art. 18 GDPR)
- receive your data in a common, machine-readable format (Art. 20 GDPR)
- object to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21 GDPR)
- withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR)
To use any of these rights, email us at [email protected].
You can also complain to a data protection authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate: datenschutz.rlp.de
Security
All data between your browser and this website is encrypted (TLS/HTTPS).