Privacy Policy
This English page is a translation for convenience. The German version is legally binding.
Controller
Branco Digital UG (haftungsbeschränkt)
Hochstraße 94
52525 Heinsberg
Germany
Represented by the managing director: Luis Manuel Branco
Contact
Phone: +49 156 7859 8676
Email: luis@branco.digital
Hosting and delivery
This is a static website delivered through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
When you open a page, Cloudflare processes technically necessary data, in particular your IP address, date and time of the request, the requested address, browser and operating system details (user agent) and the referring page. The purpose is to deliver the website and to defend against attacks and abuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable provision of the website.
A data processing agreement with Cloudflare is in place. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR). Cloudflare keeps these logs only as long as necessary for these purposes. We do not analyse them ourselves. More information: cloudflare.com/privacypolicy.
Contact by email and phone
If you contact us by email or phone, we process your details (e.g. name, email address, phone number, content of your request) to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once your request has been fully handled, unless statutory retention obligations apply.
Our email is processed by Google Workspace. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A data processing agreement with Google is in place. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework.
External links
This website links to Calendly (appointment booking), LinkedIn and GitHub. These are plain links, not embedded content: visiting this website sends no data to these providers. Only when you click a link do you leave this website; the provider’s privacy policy then applies.
No cookies, no browser storage
This website sets no cookies and uses no browser storage (e.g. localStorage). The font is served by this website itself. There is no connection to Google Fonts. Consent under § 25 TDDDG for cookies or browser storage is therefore not required.
Visitor statistics with Simple Analytics
We count visits with Simple Analytics. The provider is Simple Analytics B.V., Hooftlaan 4, 1401 ED Bussum, the Netherlands. When you open a page, your browser loads a script from Simple Analytics and sends it the following data: the page address without query parameters, the referring page, browser and device type (anonymized user agent), screen size, device language, time zone, time on page and scroll depth.
Simple Analytics stores no IP addresses, sets no cookies and creates no user profiles. We cannot identify you from this data. The country is derived from the time zone, not from the IP address. The data is processed on servers in the EU (the Netherlands).
The purpose is to learn which pages are read and how visitors find this website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to improve the website. A data processing agreement with Simple Analytics is in place. You can object to this processing (Art. 21 GDPR), or block the script in your browser. More information: simpleanalytics.com/privacy-policy.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR), and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). Please use the contact details above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Automated decisions
No automated decision-making, including profiling (Art. 22 GDPR), takes place.
Last updated: