Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dr-Jordan-Design
Owner: Dr.-Ing. Frank Jordan
Schanzenstraße 27
01097 Dresden
Germany
Phone: +49 (0) 351 8104394
Fax: +49 (0) 351 8104395
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

2. Hosting and Server Log Files

Our website is hosted by an external service provider (data processor pursuant to Art. 28 GDPR):

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

When you visit our website, the web server automatically collects and stores information in so-called server log files, which your browser transmits. This includes:

• IP address of the requesting device
• Date and time of the server request
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used and, if applicable, the operating system of your device

This data is processed on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free presentation, ensuring system security, and defending against attacks on our infrastructure. The server log files are automatically deleted after 14 days at the latest, unless longer retention is required for evidentiary purposes in the event of specific security incidents.

Data transmission between your browser and our server is fully SSL/TLS encrypted (HTTPS).

3. Contact via Email, Phone, or Fax

If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (e.g., name, contact details, content of the inquiry), will be stored and processed by us for the purpose of handling your request.

The legal basis for this processing is Art. 6 (1) (b) GDPR, provided your inquiry is related to the initiation or fulfillment of a contract. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) (f) GDPR).

The data you transmit to us will remain with us until the purpose for data storage ceases to apply (e.g., after your request has been fully processed). Mandatory statutory provisions—in particular commercial and tax retention periods (generally 6 to 10 years under the German Commercial Code (HGB) and Fiscal Code (AO))—remain unaffected.

4. Cookies and Consent Management (Cookie Consent Tool)

Our website uses cookies. Cookies are small text files that are stored on your device.

• Strictly Necessary Cookies: Some cookies are technically essential to provide basic website functions (e.g., session management of the CMS or storing your privacy preferences). The use of these strictly necessary cookies is based on Section 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), and the subsequent data processing is based on Art. 6 (1) (f) GDPR (legitimate interest in the technically flawless operation of the website).
• Services Requiring Consent: Any other cookies or external integrations (such as embedded YouTube videos) are only loaded if you have given your explicit consent via our cookie consent banner. The legal basis for this is Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR.

To manage and document your consent in a legally compliant manner, we use a local cookie consent tool. This tool stores your selection in a strictly necessary cookie on your device in order to respect your choice during subsequent page views. The legal basis for this is Art. 6 (1) (c) GDPR (fulfillment of the legal obligation to provide proof pursuant to Art. 7 (1) GDPR) and Art. 6 (1) (f) GDPR. You can access your cookie settings at any time via the corresponding icon or link on the website and withdraw any consent given with effect for the future.

5. Embedded YouTube Videos

We embed videos from the YouTube platform on our website. For users in the European Economic Area (EEA), the service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

We use our cookie consent tool (two-click solution) as well as YouTube's privacy-enhanced mode for integration. This means that simply visiting a subpage with an embedded video does not establish a connection to YouTube servers, and no data is transmitted to Google. Only when you actively give your consent to load YouTube via the cookie banner or directly on the video placeholder is a connection to the YouTube servers established.

In doing so, YouTube is informed which of our pages you are visiting, and your IP address is transmitted. In addition, YouTube may store cookies or similar technologies (e.g., local storage) on your device to analyze user behavior. If you are logged into your YouTube or Google account at the same time, YouTube can assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account before activating the video.

The legal basis for loading the videos and setting the associated cookies is exclusively your explicit consent pursuant to Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. You can withdraw this consent at any time with effect for the future via our cookie settings.

When using YouTube, personal data may also be transferred to servers of Google LLC in the USA. An adequacy decision by the European Commission pursuant to Art. 45 GDPR (EU-US Data Privacy Framework) exists for the USA. Google LLC is certified under the EU-US Data Privacy Framework and thus commits to complying with European data protection standards.

Further information on data protection at YouTube can be found in Google's privacy policy at: https://policies.google.com/privacy?hl=en

6. Your Rights as a Data Subject

You have the following statutory rights in connection with the processing of your personal data:

• Right of Access (Art. 15 GDPR): You may request information about your personal data processed by us.
• Right to Rectification (Art. 16 GDPR): You may request the immediate correction of inaccurate or the completion of your personal data stored by us.
• Right to Erasure (Art. 17 GDPR): You may request the deletion of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
• Right to Restriction of Processing (Art. 18 GDPR): You may request the restriction of the processing of your data under the statutory conditions.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract in a structured, commonly used, and machine-readable format.
• Withdrawal of Consent (Art. 7 (3) GDPR): If we process data on the basis of your consent, you may withdraw this consent at any time with effect for the future.
• Right to Object (Art. 21 GDPR): Insofar as the processing of your personal data is based on legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation.

To exercise your rights, an informal message to the contact details specified above under Section 1 is sufficient.

7. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR. The supervisory authority responsible for our registered office is:

Saxon Data Protection and Transparency Commissioner (Sächsischer Datenschutz- und Transparenzbeauftragter)
Devrientstraße 5
01067 Dresden
Germany
Website: https://www.datenschutz.sachsen.de