Privacy

1. Controller

Email: carlopaultoniwiggers@gmail.com

2. Website access and hosting

When you access this website, technically necessary connection data is processed. This may include your IP address, date and time of access, requested URL, amount of data transferred, browser and device information, referrer URL, status information and error data.

This processing is necessary to deliver the website securely and reliably, prevent abuse and maintain technical stability. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted operation of the website. Technical hosting and security providers process this data on our behalf or as independent controllers where necessary to provide the infrastructure.

Log data is retained only for as long as operational and security purposes require, unless statutory retention duties or a specific security incident justify a longer period.

3. Cookies and local storage

This website does not use analytics, advertising or marketing cookies and does not store analytics identifiers in Local Storage or Session Storage. Its technical infrastructure may use short-lived, strictly necessary security cookies to detect automated access and prevent abuse. The legal basis is section 25(2)(2) TDDDG together with Article 6(1)(f) GDPR.

4. Anonymous audience measurement

To improve the website, we record aggregated page views, scroll depth, active engagement in fixed time thresholds and selected clicks. If sponsor elements are added in the future, we may also count their views and clicks. We only store the time, event type, requested page path, the hostname of a referring website where available, voluntarily transmitted campaign parameters and the destination of selected internal or external links.

We do not store IP addresses, browser or device information, full referrer addresses or user identifiers for this measurement. We use no analytics cookies, create no personal profiles and do not track visitors across other websites or devices. The data remains within the website infrastructure, is automatically deleted after no more than 90 days and is used solely to assess and improve our own website.

Where any of these details may nevertheless be considered personal data in an individual case, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is understanding how our non-commercial website is used so that we can improve its content and navigation.

5. Contact by email and contact form

If you contact us by email or through the join form, we process your name, email address, voluntary details about your region and Instagram account, and the content of your message so that we can respond. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual communication and otherwise Article 6(1)(f) GDPR. Our legitimate interest is responding appropriately to enquiries.

We use Brevo to deliver contact-form messages. Depending on the contractual allocation, the provider is a European company of the Brevo group. Form details are processed solely to deliver the enquiry. According to Brevo, its databases are processed and stored on servers within the European Union. The message is delivered to our Google email account. Data required to operate the mailbox may also be processed outside the European Economic Area where the applicable legal requirements are met.

We generally retain enquiries for up to six months after they have been fully dealt with and then delete them, unless statutory retention obligations or a resulting collaboration require longer storage. The form uses a hidden field, a timing plausibility check and temporary limits on repeated submissions to prevent misuse.

6. Instagram

This website only contains an external link to the Instagram account operated by Carlo Wiggers. No Instagram plugin or content is embedded. We therefore do not transfer data to Instagram merely because you visit this website. If you click the link, you leave this website and the platform provider's privacy terms apply.

7. Recipients and international transfers

Personal data is disclosed only to recipients who need it for the purposes described above. These may include technical hosting, security and email providers. Transfers to a country outside the EEA take place only where the statutory requirements are met, in particular on the basis of an adequacy decision or appropriate safeguards such as the EU standard contractual clauses.

8. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Consent may be withdrawn at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Baden-Württemberg is the State Commissioner for Data Protection and Freedom of Information, Heilbronner Straße 35, 70191 Stuttgart, Germany, baden-wuerttemberg.datenschutz.de.

9. Updates to this notice

We update this privacy notice when website features, service providers or legal requirements change. The version published on this page is the current version.