Privacy Policy
Note: Draft. Have reviewed by a legal professional before going live.
1. Controller
CardConnect — Dejan Vukomanovic
Halskestraße 11, 81379 München
2. Server Log Files
Server log files (IP, date/time, URL, browser, referrer). Legal basis: Art. 6(1)(f) GDPR.
3. Cookies
Only technically necessary localStorage entry for the privacy notice. No tracking cookies.
4. Plausible Analytics
Plausible Analytics (Plausible Insights OÜ, Estonia). GDPR-compliant, no cookies, no personal data. Art. 6(1)(f) GDPR.
5. Newsletter (Brevo, Double Opt-In)
Email processed via Brevo (Sendinblue SAS, Paris). Double opt-in required. Stored: email, timestamp, IP, language. Art. 6(1)(a) GDPR. Unsubscribe anytime.
6. Hosting (Cloudflare, USA)
Cloudflare, Inc. (USA) under a Data Processing Agreement and EU Standard Contractual Clauses. Served via Cloudflare's global edge network.
7. Your Rights (GDPR Art. 15–21)
Access, rectification, erasure, restriction, portability, objection. Contact: cardconnect@outlook.de
8. Supervisory Authority
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach. www.lda.bayern.de