Privacy

Who is responsible

I am the controller responsible for the processing described here:

Renato Machelett
Machelett Software & Consulting
Luise-Riegger-Str. 30
76137 Karlsruhe
Germany

Email: info@machelett.de
Phone: +49 721 9374374
Website: https://machelett.de

Visiting the website

I administer the server hosting this website in Strasbourg, France. The hosting service is provided under the Server4You brand.

When you request a page or file, the web server records connection information in its access logs:

• your IP address and the date and time of the request;
• the requested address, response status and amount of data sent;
• the referring page, if your browser sends it;
• the browser's User-Agent, which can include browser and operating-system information.

The server also records errors for diagnosis. These records help deliver the website, investigate problems and protect it against misuse. The legal basis is Article 6(1)(f) GDPR: my legitimate interest in operating a reliable, secure website. Server logs can contain personal data; they are not anonymous statistics.

The public consulting pages do not require registration or offer a contact form. Fonts, images and stylesheets are served from this website. Links to LinkedIn and Xing are ordinary links; those services receive a request when you follow them, and their own privacy policies then apply.

Contacting me

If you contact me by email or telephone, I process the information you provide, such as your name, contact details and message, to respond and, where relevant, discuss or carry out an assignment.

For a contract with you or steps you request before entering one, the legal basis is Article 6(1)(b) GDPR. Other business inquiries are handled on the basis of my legitimate interest in responding to correspondence, under Article 6(1)(f) GDPR. Where records must be retained to meet a legal obligation, Article 6(1)(c) GDPR applies.

Contacting me is voluntary. Without the information needed to understand your inquiry or a way to reach you, I may be unable to respond or arrange an assignment.

Website analytics

The public consulting pages at machelett.de do not load an analytics script. The homepage at machelett.com uses self-hosted Plausible Analytics; its processing is described in that website's privacy policy.

How long data is kept

Server logs are rotated daily, with up to 14 rotated files retained.

Website backups are kept on systems under my control. Routine backup copies are replaced as the backup cycle runs; separate maintenance copies remain until manually deleted.

Correspondence is retained for as long as it is needed to handle the inquiry or assignment, meet applicable record-keeping obligations, or establish, exercise or defend legal claims. These purposes and any applicable statutory periods determine how long the information is needed.

Who receives data

The hosting provider supplies the infrastructure on which I operate the website. Email and telephone communications also involve the providers used to deliver those communications. Data may additionally need to be disclosed where a legal obligation requires it or where necessary to establish, exercise or defend legal claims.

Your rights

Under the GDPR, and subject to its conditions and exceptions, you can:

• ask whether I process your personal data and request access and a copy;
• ask for inaccurate information to be corrected or incomplete information completed;
• request erasure or restriction of processing;
• receive data you supplied in a machine-readable format, and request its transfer where technically feasible, when automated processing is based on your consent or a contract;
• withdraw consent at any time where processing relies on it, without affecting the lawfulness of earlier processing.

You can object to processing based on legitimate interests for reasons relating to your particular situation. Processing must then stop unless overriding compelling grounds or grounds relating to legal claims apply. You can object to direct marketing at any time; that processing must stop.

To exercise your rights, use the contact details above. Requests are normally free of charge. The GDPR generally requires a response within one month; where its conditions for an extension apply, you must be told within that month. Additional information may be needed to confirm your identity if there are reasonable doubts.

You can complain to a data-protection supervisory authority, including the authority where you live or work or where you believe an infringement occurred. For Karlsruhe, the relevant authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

The public consulting website does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.