1. Controller
Benjamin Zekavica
Charlottenstraße 14
52070 Aachen, Germany
Email: [email protected]
2. General Information on Data Processing
We process personal data exclusively in accordance with the GDPR and the TTDSG.
This website can generally be used without creating an account.
3. Processing of Personal Data When Visiting This Website
3.1 Hosting (ALL-INKL)
Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
ALL-INKL processes server log files on our behalf:
- IP address (anonymized)
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
- Pages accessed
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: technical delivery, security, and stability.
A data processing agreement (DPA) with ALL-INKL is in place.
3.2 Content Delivery Network & Security (Cloudflare)
We use Cloudflare by Cloudflare Inc., 101 Townsend St, San Francisco, CA, USA.
Cloudflare processes:
- IP address
- Browser information
- System configuration
- Security logs
Purposes:
- Protection against attacks (DDoS, bot protection)
- Faster delivery of the website (CDN)
- Optimization of availability
Legal basis: Art. 6(1)(f) GDPR
Cloudflare uses global data centers outside the EU.
Transfers are based on Standard Contractual Clauses (SCCs).
4. Cookies & Consent with Borlabs Cookie
We use Borlabs Cookie to obtain and manage user consent.
A technically necessary cookie is set when visiting the website:
- Name: borlabs-cookie
- Purpose: storing selected privacy preferences
- Storage period: 1 year
- No disclosure to third parties
Legal basis: Art. 6(1)(c) GDPR (legal obligation)
5. Local Google Fonts (no data transfer to Google)
We use Google Fonts from the library locally, i.e.:
- no connection to Google servers
- no transmission of personal data
- no tracking
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent display)
6. Google Analytics 4 (with Consent Mode v2)
Google Analytics is only loaded after explicit consent (Borlabs Cookie).
6.1 Service Provider
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, USA
6.2 Data Processed
- IP address (anonymized)
- Usage data (page views, interactions)
- Browser and device information
- Referrer URL
6.3 Consent Mode v2
We use Google’s Consent Mode, so Analytics loads only after consent has been given.
Before consent, no cookies are set.
6.4 Legal Basis
Art. 6(1)(a) GDPR – Consent
Consent can be withdrawn at any time:
7. Comment System “Giscus” (GitHub Discussions)
We use Giscus, a service that embeds GitHub Discussions for comments.
7.1 Provider
GitHub Inc.
88 Colin P Kelly Jr St
San Francisco, CA 94107
USA
7.2 What Data Is Transferred?
When viewing/submitting comments, data may be transmitted to GitHub:
- IP address
- Browser data
- Operating system
- GitHub account (if logged in)
- Comment content (publicly visible)
Data is processed in the United States.
7.3 When Does Transfer Occur?
Only after your consent.
Before consent, Borlabs blocks the comment area.
7.4 Legal Basis
Art. 6(1)(a) GDPR – Consent
Consent can be withdrawn at any time via the cookie settings.
8. Contacting Us
If you contact us via email, we process:
- Your email address
- Message content
- Date/time
- Technical metadata
Legal basis: Art. 6(1)(b) GDPR (handling inquiries)
9. Rights of Data Subjects
You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 GDPR)
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority:
State Commissioner for Data Protection NRW (LDI NRW)
Email: [email protected]
11. Changes
This privacy policy will be updated if we add new services or if legal requirements change.
