Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

groves.digital
Mark Groves
Brahmsallee 127
20144 Hamburg
Germany
Email: mark@groves.digital

2. Overview

Personal data is processed on this website in three situations only:

• when your browser requests a page (technical delivery by the hosting provider, see section 3),
• when you send the contact form (section 4),
• when you write to us by email (section 5).

There are no user accounts, no newsletter, no comment functions and no embedded third-party content.

3. Hosting and server log files

This website is hosted by Contabo GmbH, Aschauer Straße 32a, 81549 München, Germany, on a server in Germany. To deliver a page, the server has to process the data your browser transmits with every request. This usually includes the IP address, date and time of the request, the address of the page requested, the referring page, and the browser and operating system in use.

[TODO: confirm which of these data the hosting provider stores in log files and for how long]

The processing is necessary to deliver the website and to keep it secure and stable. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and reliable operation of the website).

[TODO: confirm that a data processing agreement pursuant to Art. 28 GDPR has been concluded with Contabo]

4. Contact form

When you send an enquiry using the contact form, the following data is processed:

• the topics you selected (optional),
• your project description,
• your name,
• your email address,
• your company (optional),
• the language version of the page you used.

Purpose: the data is used solely to read and answer your enquiry and, where applicable, to prepare an offer.

Legal basis: Art. 6 (1) (b) GDPR, where your enquiry relates to a contract or to steps prior to entering into a contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).

Transmission: the website does not store enquiries in a database. The server passes your enquiry on as an email to mark@groves.digital. It is sent by SMTP through our email account at ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, which processes the email on our behalf, and is then delivered to our mailbox (section 5). [TODO: confirm that a data processing agreement with ALL-INKL.COM is in place]

Confirmation: after sending, you receive an automatic confirmation email at the address you entered. It contains no content from your message, only the topics you selected.

Protection against misuse: to limit automated submissions, the server holds the IP address of the sender in its working memory for up to ten minutes and counts the enquiries sent from it. This information is not written to a database and is not linked to the content of the enquiry. The form also contains a hidden field that is used only to recognise automated submissions. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in protecting the form against abuse).

Retention: enquiries are kept in the email inbox only as long as is necessary to deal with them, and are deleted at the latest six months after the last contact. This does not apply where statutory retention periods require longer storage, for example when an enquiry leads to a contract.

Providing the data is voluntary. Without a project description, a name and an email address, however, the enquiry cannot be answered.

5. Contact by email

If you write to mark@groves.digital, your email address and the content of your message are processed in order to answer you. The legal basis is Art. 6 (1) (b) GDPR for enquiries relating to a contract, and otherwise Art. 6 (1) (f) GDPR.

The mailbox is operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft 365). Emails are deleted once they are no longer needed, unless statutory retention periods apply.

6. Cookies, analytics and tracking

This website does not set cookies. It does not use analytics or tracking tools, advertising networks or social media plug-ins. No consent banner is shown because there is nothing that would require consent.

7. Fonts and other resources

All fonts, style sheets, scripts and images are delivered by this website's own server. Your browser does not connect to third-party servers such as font or content delivery networks when you visit a page.

8. Your rights

Under the GDPR you have the following rights regarding your personal data:

• the right of access (Art. 15 GDPR),
• the right to rectification (Art. 16 GDPR),
• the right to erasure (Art. 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to data portability (Art. 20 GDPR),
• the right to object to processing that is based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).

To exercise these rights, an email to mark@groves.digital is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state in which you live or work. The authority responsible for us is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg.

9. Changes to this privacy policy

This privacy policy is updated whenever the website or the legal situation changes. The version published on this page applies.