Privacy Policy

1. Controller

Morvance | Benjamin Zekavica
Charlottenstraße 14
52070 Aachen

2. General Information on Data Processing

We process personal data exclusively in accordance with the GDPR and the TTDSG. Use of this website is generally possible without registration.

3. Processing of Personal Data When Visiting the Website

3.1 Hosting (ALL-INKL)

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

ALL-INKL processes server log files on our behalf:

IP address (anonymized)
Date and time
Browser type and browser version
Operating system
Referrer URL
Pages accessed

Legal basis: Art. 6 (1) lit. f GDPR
Legitimate interest: technical delivery, security, and stability.

A data processing agreement (DPA) has been concluded with ALL-INKL.

3.2 Content Delivery Network & Security (Cloudflare)

We use Cloudflare from Cloudflare Inc., 101 Townsend St, San Francisco, CA, USA.

Cloudflare processes:

IP address
Browser information
System configuration
Security logs

Purposes:

Protection against attacks (DDoS, bot protection)
Faster delivery of the website (CDN)
Optimization of availability

Legal basis: Art. 6 (1) lit. f GDPR

Cloudflare uses global data centers outside the EU.
Data transfers are based on Standard Contractual Clauses (SCCs).

Cloudflare is used solely as a processor.

4. Cookies & Consent with Borlabs Cookie

We use Borlabs Cookie to obtain and manage consents.

When accessing the website, a technically necessary cookie is set:

Name: borlabs-cookie
Purpose: storing the selected privacy settings
Storage period: 1 year
No transfer to third parties

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in the legally compliant collection and documentation of consents)

5. Local Google Fonts (No Data Transfer to Google)

We use fonts from the Google Fonts library locally, which means:

no connection to Google servers
no transmission of personal data
no tracking

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in a consistent presentation)

6. Google reCAPTCHA

To protect our contact forms against automated access and spam, we use Google reCAPTCHA.

Provider:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Parent company: Google LLC, USA

Processed data:

IP address
Browser information
Operating system
Referrer URL
Movements on the website (for risk assessment)

Purpose of processing:
Protection of the website against misuse and spam
Ensuring the functionality of the forms

Legal basis:
Art. 6 (1) lit. f GDPR (legitimate interest in the security and stability of the website)

Third-country transfer:
A transfer of data to the USA cannot be ruled out. The transfer takes place on the basis of Standard Contractual Clauses (SCCs).

Further information:
https://policies.google.com/privacy

7. Web Analytics with Matomo

We use the web analytics service Matomo on this website to analyze and improve our online offering.

Matomo is operated by us directly (self-hosted), and no data is shared with third parties.

Processed data:
– IP address (shortened/anonymized)
– Usage data (e.g. page views, interactions)
– Browser and device information
– Referrer URL

Purpose of processing:
Analysis of user behavior to improve our website and marketing measures.

Matomo is used only with your consent and is loaded only after you have agreed to the use of statistical services.

Legal basis:
Art. 6 (1) lit. a GDPR (consent)

Withdrawal:
You can withdraw your consent at any time via the cookie settings.

8. Contacting Us

If you contact us by email, we process:

Your email address
Communication content
Date/time
Technical metadata

Legal basis: Art. 6 (1) lit. b GDPR (processing of inquiries)

9. Rights of Data Subjects

You have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7 GDPR)

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection authority:
State Commissioner for Data Protection of North Rhine-Westphalia
Email: poststelle@ldi.nrw.de

11. Changes

This privacy policy will be updated whenever new services are introduced or legal changes occur.