Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Chris Zemmel
Ostendstraße 1
75331 Engelsbrand, Germany
Email: chris@zyric.de

2. Hosting

This website runs on a server operated by the controller and rented from Hetzner Online GmbH, Germany, which acts as a processor. When the website is accessed, technically necessary access data (including IP address, time of access, requested resource, volume of data transferred, and user agent) is processed in order to deliver the page and ensure the security of operation. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the site). The server is located in Germany and hosting involves no transfer to a third country.

3. Visitor notification

When the page is accessed, a technical notification may be triggered to the operator. The following data is processed and transmitted to the operator via the messaging service Telegram: device type (mobile/desktop), screen size, the browser’s language setting, the referring page (referrer), the requested path, a timestamp, the IP address, and an approximate location derived from it (city/country). The approximate location is derived from the IP address via external services (including ipapi.co, ip-api.com, ipify). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in assessing the reach and security of the offering). You may object to this processing at any time (see section 10).

4. Contact form

If you use the contact form, we process the data you provide (name, email address, and message) in order to respond to your inquiry. This data is transmitted to the operator via the messaging service Telegram. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in processing inquiries).

5. Transfer to Telegram

For the notifications described in sections 3 and 4, we use the service Telegram (Telegram FZ LLC, Dubai, UAE). In doing so, personal data may be transferred to a third country outside the EU/EEA for which no adequacy decision by the EU Commission exists. A corresponding data protection risk cannot be entirely ruled out.

6. Reach measurement

None. This website runs no reach measurement, no web analytics, and no tracking service. Nothing beyond the access data described in section 2 and the visitor notification described in section 3 is collected.

7. Cookies

This website sets the following cookies on your device. They are first-party cookies, are not used for advertising, and are not shared with third parties for their own purposes:

• visitor_id — a randomly generated identifier used to recognise repeat visits so the notification described in section 3 is not triggered again on every page load. Storage period: 30 days.
• contact_id — a randomly generated identifier assigned to a contact-form enquiry so a follow-up message can be matched to an earlier one. Storage period: 30 days.
• last_notified — a timestamp that limits the notification described in section 3 to at most once per hour. Storage period: 1 day.

These cookies are not required for the website to be displayed, and the site remains fully usable without them. They store only randomly generated values and a timestamp — no name, email address or other information you have provided. You can delete cookies at any time in your browser settings and configure your browser to refuse them.

8. Fonts and local features

The fonts used (Inter and Space Grotesk) are downloaded at build time and served locally from our server; no connection is made to external providers such as Google Fonts when you visit the site, and no request carrying your IP address reaches Google. Any vibration feature (Web Vibration API) runs exclusively locally on your device; no personal data is collected or transmitted in the process.

9. Storage period

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. Inquiries submitted via the contact form are deleted once they have been processed, provided no statutory retention obligations prevent this.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). To exercise your rights, a message to the email address above is sufficient.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority includes the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).