Privacy policy

This is a translation of my German privacy policy (Datenschutzerklärung). If the two differ, the German version applies.

Controller

Maksymilian Wozniak, Wozniak Webdesign
Badener Str. 23, 65824 Schwalbach am Taunus, Germany
Email: kontakt@wozniak-webdesign.de

Hosting

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. The server is located in Germany. When you visit the site, the server processes technically necessary data such as your IP address, the date and time, the page requested and your browser and device, in order to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is a secure website that works. Hostinger stores these log files for 30 to 90 days and then deletes them.

I have a data processing agreement with Hostinger under Art. 28 GDPR. Hostinger processes the data only on my instructions. Hostinger uses other service providers, including companies based in the USA, so data may also be processed outside the EU. For countries without an adequacy decision of the European Commission, the agreement with Hostinger provides for the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Hostinger’s data processing agreement and the list of its service providers are at hostinger.com/legal/dpa. I will send you a copy of the Standard Contractual Clauses on request.

Website check and contact form

When you send the form, I process the details you give. These are your website or the note that you don’t have one yet, your name, your email address and, if you wish, the size of your firm and your message. For the request I need your website (or the tick at “I don’t have a website yet”), your name and your email address. Without these details I can’t handle your request. You are not obliged by law or contract to give them to me. All other details are voluntary. I use your details to send you the website check or a reply to your request. The legal basis is Art. 6(1)(b) GDPR.

I don’t use an external form service. Your details are sent encrypted to my web server at Hostinger (server location Germany). A script on this server sends them straight away as an email to my mailbox, which is also hosted by Hostinger. I don’t store the details on the web server. What the server logs on every visit is described under “Hosting”. My mailbox is covered under “Contact by email or phone”. If no order results, I delete your request no later than 12 months after my last message to you. If an order results, I keep the necessary records for as long as the law requires, for example invoices under tax law.

To protect against spam, the form contains a field you can’t see and checks how quickly it is sent. The server also limits the number of requests. For this it stores only the times of the requests, none of your details. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is protection against misuse.

Contact by email or phone

When you email or call me, I process your details (for example your name, email address, phone number and your request) in order to answer you. The legal basis is Art. 6(1)(b) GDPR where a possible order is concerned, otherwise Art. 6(1)(f) GDPR. My legitimate interest is then to answer your message. Here too, I delete your request no later than 12 months after my last message to you if no order results. For orders, the statutory retention periods apply.

My email mailbox is also hosted by Hostinger International Ltd. (address under “Hosting”). The data processing agreement under Art. 28 GDPR covers it too. For the email service, Hostinger uses other service providers, including companies based in the USA, for example for sending emails and checking them for spam. For countries without an adequacy decision of the European Commission, the agreement with Hostinger provides for the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Fonts

The fonts of this website are stored on its own server. No connection is made to Google or other font providers when you visit.

Cookies and analytics

If you choose “Play the film” on the home page, your browser remembers this choice until you close the window or tab (session storage). This information stays in your browser and is not sent to me. This way your choice is kept if you open the home page again in this tab. This storage is strictly necessary for the function you asked for (§ 25(2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act). No consent is needed for it.

Your rights

You have the right of access, rectification, erasure and restriction of processing, and the right to data portability (Art. 15 to 20 GDPR). Just send me an email.

Right to object: Where I process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). An email to me is enough. I will then no longer process the data, unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de.

I do not use automated individual decision-making or profiling (Art. 22 GDPR).

Last updated: October 2026