1. Controller
The party responsible for processing personal data on this website is:
Juri Ehret
Heidenheimer Straße 36
73312 Geislingen an der Steige
Germany
Email: contact@scriptor-cms.dev
2. Overview
This site is deliberately data-minimal. It uses only one functional cookie, runs no analytics, and embeds no third-party tracking, advertising or social-media scripts. The only place you actively send personal data is the contact form.
3. Hosting
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit the site, Hetzner automatically processes the data described under "Server log files" on our behalf. A data processing agreement (Art. 28 GDPR) is in place with Hetzner.
4. Server log files
The web server automatically collects and stores information that your browser transmits, namely: an abbreviated IP address, the date and time of the request, the page requested, the referring URL, and your browser type and operating system. This data is not combined with other sources and is processed on the basis of Art. 6 (1) (f) GDPR (our legitimate interest in the secure, stable operation of the site). The logs are deleted after a short period.
5. SSL/TLS encryption
This site uses SSL/TLS encryption for security. You can recognise an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.
6. Cookies
This site sets a single, strictly necessary functional cookie (a session cookie) — for example to show a status message after you submit the contact form, or to keep an administrator signed in to the editor. It is essential for these functions, is not used to track you, and expires at the end of the session. Because no non-essential cookies and no tracking are used, no cookie-consent banner is required. The legal basis is Art. 6 (1) (f) GDPR; for strictly necessary cookies, § 25 (2) TDDDG applies.
7. Contact form
If you send a message via the contact form, we process the data you enter — your name, your email address and your message — solely to handle and answer your enquiry. Your email address is used as the reply address. The legal basis is Art. 6 (1) (f) GDPR (our legitimate interest in responding to enquiries addressed to us). We keep the data until your enquiry has been dealt with, unless statutory retention periods apply; you may ask us to delete it at any time.
To deliver these messages we use the email service Brevo (Sendinblue GmbH, Cologne, Germany) as a processor acting on our instructions. The message data is processed within the EU; a data processing agreement (Art. 28 GDPR) is in place with the provider. [Verify the exact Brevo legal entity/address against your Brevo DPA.]
8. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6 (1) (f) (Art. 21). To exercise any of these, contact us at contact@scriptor-cms.dev.
9. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement.
10. Changes to this policy
We may update this privacy policy to reflect changes to the site or to legal requirements. The version published here always applies.
