Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Media-Shell Sp. Z.o.o
Managing Director: Jan Weglewicz
Wrzesinska 12/21
03-713 Warsaw, Poland
Email: jan@media-shell.de
Website: https://media-shell.de

2. General Information on Data Processing

  1. We process personal data of our users only to the extent necessary to provide a functional website and our content and services.
  2. The processing of personal data of our users is generally only carried out with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of data is permitted by law.
  3. Where we obtain consent for personal data processing, Art. 6(1)(a) GDPR serves as the legal basis. For processing necessary for contract fulfillment, Art. 6(1)(b) GDPR applies. For processing to fulfill a legal obligation, Art. 6(1)(c) GDPR applies. For processing to protect legitimate interests, Art. 6(1)(f) GDPR applies.

3. Rights of the Data Subject

You have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): You have the right to request confirmation as to whether we process your personal data.
  • Right to Rectification (Art. 16 GDPR): You have the right to request immediate rectification of inaccurate personal data.
  • Right to Erasure (Art. 17 GDPR): You have the right to request deletion of your personal data.
  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to request restriction of processing.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Art. 21 GDPR): You have the right to object to the processing of your personal data at any time.
  • Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time.
  • Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

4. Website Provision and Log Files

  1. Each time you access our website, our system automatically collects data from the accessing computer system, including:
    • Browser type and version
    • User's operating system
    • IP address (anonymized)
    • Date and time of access
    • Referring website (Referrer URL)
    • Pages accessed on our website
  2. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the functionality and security of the website.
  3. Data is deleted as soon as it is no longer necessary. Log files are typically deleted after 30 days.

5. Cookies and Consent Management

  1. Our website uses cookies – small text files stored in or by the browser on the user's computer system.
  2. We distinguish between:
    • Technically Necessary Cookies: Required for website operation. Legal basis: Art. 6(1)(f) GDPR.
    • Analytics Cookies: Enable us to count visits and traffic sources. Only set with your explicit consent. Legal basis: Art. 6(1)(a) GDPR.
    • Marketing Cookies: Used to display relevant advertising. Only set with your explicit consent. Legal basis: Art. 6(1)(a) GDPR.
  3. You can configure your browser to prevent cookies from being stored. Fully disabling cookies may limit website functionality.

6. Hosting and Content Delivery

  1. Our website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA.
  2. The use of Vercel is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in reliable website presentation.
  3. Vercel is certified under the EU-US Data Privacy Framework. More information: https://vercel.com/legal/privacy-policy.

7. Contact

  1. When you contact us via email, your information (name, email address, message) is stored to process your inquiry. We do not share this data without your consent.
  2. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).
  3. Data is deleted once the purpose of storage no longer applies and no legal retention obligations exist.

8. Google Fonts

  1. This website uses Google Fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for consistent font display.
  2. Fonts are loaded from an external server. Your IP address may be transmitted to Google. Legal basis: Art. 6(1)(f) GDPR. More: https://policies.google.com/privacy.

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security purposes and to protect the transmission of confidential content. An encrypted connection is indicated by "https://" in the browser address bar and a lock icon.

10. Data Retention and Deletion

  1. Personal data is deleted or blocked as soon as the purpose of storage no longer applies.
  2. Statutory retention periods:
    • Commercial retention (§ 257 HGB): 6 years for commercial correspondence
    • Tax retention (§ 147 AO): 10 years for accounting records and invoices

11. Changes to this Privacy Policy

We reserve the right to update this privacy policy to comply with current legal requirements or to reflect changes to our services.

12. Privacy Questions

If you have any questions about data protection, please email us at: jan@media-shell.de.