1. Controller
The controller responsible for the processing of personal data on this website is Yanick Philipp Savoi, email: legal@savoi.info.
2. Overview
This website is a private site. It uses no tracking services, no analytics services, no advertising and no external fonts or scripts. I process personal data only to the extent necessary to run the site, to answer your enquiries and to protect the restricted areas. Data is not passed on to third parties. The only exception is the hosting provider that technically operates the site (section 3).
3. Hosting and server logs
This website is hosted by netcup GmbH, Karlsruhe, Germany. When you visit the site, the server automatically records data in so called server log files: the IP address of the requesting device, the date and time of the request, the page requested, and the browser and operating system used. This data is necessary to deliver the page and to keep the server secure; it is not combined with other data. The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is the secure and stable operation of the website. A data processing agreement under Art. 28 GDPR is in place with netcup GmbH. The log files are kept only as long as necessary for secure operation and are then deleted.
4. Contact form
If you write to me through the contact form, I process your name, your email address, the subject and the text of your message. The message is sent to me by email. I use this data solely to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a contract or a cooperation, for example an internship. Otherwise the legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is answering the enquiries addressed to me. To prevent misuse, the number of messages per IP address is limited to 5 per hour. For this purpose your IP address is stored briefly in a file on the server and deleted when that period has expired. I keep your message in my mailbox until your enquiry has been dealt with and there is no further reason to retain it.
5. Cookies
This website uses two technically necessary cookies: a session cookie (PHP session) that protects the contact form and the document areas and is deleted when you close your browser, and a cookie that stores your chosen language (German or English). Both cookies serve only to operate the site and are required for the functions you request. The legal basis is Section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6 (1) (f) GDPR. No consent is required for them. No cookies are set for tracking, analytics or advertising purposes. You can delete or block cookies at any time in your browser settings; in that case the contact form and the protected areas may not be available.
6. Protected document areas
The areas “Application documents” and “Financial Accounting tutorial” are protected by an access code. When you enter a code, the site only checks whether it is correct; no user account is created. To prevent codes from being guessed, failed attempts are counted per IP address for one hour. After that hour the counter is deleted. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is protecting the documents stored there.
7. Browser storage (localStorage)
If you switch the colour scheme of the site (light or dark), your choice is stored in your browser's localStorage. This information stays on your device, is not sent to the server and contains no personal data. You can delete the entry at any time in your browser settings.
8. Links to external sites
This website contains a link to my profile on LinkedIn. When you click that link you leave my website; LinkedIn's privacy policy applies to the processing of data there. No content or scripts from LinkedIn are embedded in this website, so simply visiting my site does not transfer any data to LinkedIn.
9. Retention periods
Server log files are deleted after a short time (section 3). The data used to limit the contact form and to count failed access attempts is deleted after one hour (sections 4 and 6). The session cookie is deleted when you close your browser; the language cookie and the localStorage entry remain until you delete them in your browser (sections 5 and 7). Messages from the contact form are kept until your enquiry has been dealt with (section 4).
10. Your rights
With regard to your personal data you have the following rights towards me: the right of access (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR). To exercise your rights, an email to legal@savoi.info is sufficient.
11. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for me is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA) in Ansbach.