Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

Name and address

Jude Mingay
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach
Germany

Email

[email protected]

No data protection officer has been appointed, as none is legally required for a business of this size. Questions about this policy can be sent by email or post to the contact details above.

2. At a glance

• This site sets no cookies of its own and uses no advertising or tracking tools. For visitors outside the EU it counts page views with Cloudflare Web Analytics, which uses no cookies; visitors in the EU are not measured.
• Fonts, images and video are served from this site's own hosting. No third-party font or media services are loaded.
• Personal data are processed only when you visit the site (technical server logs), send the enquiry form, or email me.
• The enquiry form is delivered by a function on this site's hosting and Brevo, an email service with servers in the EU; Cloudflare Turnstile blocks spam. All three are described below, and email remains available as an alternative.

3. Hosting, server logs and visitor statistics

This website is hosted on Cloudflare Pages and delivered through the content delivery network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you open a page, your browser automatically transmits technical data to Cloudflare's servers, which process it to deliver the page and to protect the site against attacks and abuse. This data includes:

• IP address of the requesting device
• Date and time of the request
• Requested page or file, and the page you came from (referrer), if transmitted
• Browser type and version, operating system, and the amount of data transferred

Purpose and legal basis: operating the website securely and reliably, which is a legitimate interest under Art. 6 (1) (f) GDPR. I do not receive personal visitor logs from Cloudflare; I see aggregated request statistics only.

Retention: Cloudflare stores server logs for a limited period for security purposes and deletes them in line with its privacy policy.

Transfers: Cloudflare operates data centres in the EU and worldwide, including the USA. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, and its data processing addendum includes the EU standard contractual clauses. Details: Cloudflare privacy policy.

Visitor statistics (visitors outside the EU)

To see how many people visit and which pages they read, this site uses Cloudflare Web Analytics, a service of Cloudflare, Inc. (address above). For visitors from outside the European Union, Cloudflare adds a small script to each page. It reports the page address without its query string, the referring page, the browser, operating system and device type, the country derived from your IP address, and how quickly the page loaded. According to Cloudflare, the script uses no cookies or local storage and does not fingerprint visitors; it counts page views rather than identifying people. Visitors from the EU are not measured, because Cloudflare does not add the script for them. I see aggregated statistics only.

Purpose and legal basis: understanding how the site is used so I can improve it, which is a legitimate interest under Art. 6 (1) (f) GDPR. You can object at any time (Art. 21 GDPR), for example by blocking scripts from static.cloudflareinsights.com in your browser. Retention and transfers follow the Cloudflare terms described above.

4. Enquiry form

The project enquiry form asks for your name, email address, and a description of what you want to build or improve. You may optionally add the project stage, desired timeline, and budget range. When opened on a service page, the form includes the service you are asking about. When you send it, the form also records the page you sent it from, which button opened it, the referring page if your browser transmits one, and any campaign parameters in the address, so that I can see where an enquiry came from.

Purpose and legal basis: answering your enquiry and preparing a proposal. This is processing to take steps at your request before entering into a contract, Art. 6 (1) (b) GDPR. The anti-spam check described below is based on my legitimate interest in keeping the form usable, Art. 6 (1) (f) GDPR.

Message delivery

When you submit the form, your browser sends it to a small server-side function that runs on this website's hosting at Cloudflare (see section 3). The function checks the spam-protection token described below and hands the message to Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France), an email service headquartered in France whose servers are located in the European Union. Brevo delivers the message to my mailbox, acts as my processor under its data processing agreement, and uses the data only for that delivery. The function stores nothing; Brevo keeps delivery logs for a limited period in line with its privacy policy. Details: Brevo privacy policy.

Cloudflare Turnstile (spam protection)

The form is protected by Cloudflare Turnstile, a bot-detection service of Cloudflare, Inc. (address above). Turnstile runs a check in your browser when the form is displayed and processes client-side signals such as your IP address, TLS fingerprint, browser user agent and the site key of this website. Cloudflare processes these signals as my processor to run the check, and as an independent controller to improve Turnstile's bot detection. It states that it cannot directly identify individuals from them. Turnstile may set strictly necessary cookies for the duration of the check. Details: Cloudflare Turnstile privacy notice.

Retention

I keep enquiries in my mailbox while the conversation is active and delete them once the enquiry is concluded, unless an engagement follows. If it does, the correspondence becomes part of the contract records, which German commercial and tax law require me to retain for six years (correspondence) or ten years (accounting records).

5. Contacting me by email

If you email me, I process your email address, the content of your message and any details you include in order to reply. The legal basis is Art. 6 (1) (b) GDPR when the message concerns a possible or existing engagement, and otherwise my legitimate interest in answering correspondence, Art. 6 (1) (f) GDPR. The retention rules in section 4 apply.

6. Video, external links and third-party content

The videos on this site are hosted on this site's own infrastructure; no video platform is involved. The site links to other websites, such as LinkedIn, GitHub and the websites of clients and partners. When you follow a link, the operator of the destination site processes your data under its own privacy policy. No social media plugins, embedded widgets or share buttons are used.

7. Cookies and local storage

This website does not set cookies of its own and does not use advertising or tracking services, so no consent banner is needed. The visitor statistics in section 3 use no cookies or local storage and are not collected from visitors in the EU. Cloudflare may set strictly necessary security cookies while protecting the site or during a Turnstile check. These are not used to track you across websites. Nothing on the site tracks you across websites, and the site does not change its behaviour in response to Do Not Track or Global Privacy Control signals.

8. Your rights

Under the GDPR you have the right to:

• obtain information about the personal data I hold about you (Art. 15),
• have inaccurate data corrected (Art. 16) and, subject to legal retention duties, erased (Art. 17),
• have processing restricted (Art. 18),
• receive the data you provided in a portable format (Art. 20),
• object to processing based on legitimate interests for reasons arising from your particular situation (Art. 21).

To exercise these rights, email [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:

Providing your data is voluntary. Without the required fields the enquiry form cannot be sent, but you can always contact me by email instead. No automated decision-making or profiling takes place.

9. Changes to this policy

This policy is updated whenever the website or the services it relies on change. The current version applies; the date of the last revision is shown at the top of the page.