Privacy

Who is responsible

I am the controller responsible for the processing described here:

Renato Machelett
Machelett Software & Consulting
Luise-Riegger-Str. 30
76137 Karlsruhe
Germany

Email: info@machelett.com
Phone: +49 721 9374374
Website: https://machelett.com

Visiting the website

I administer the server hosting this website in Strasbourg, France. The hosting service is provided under the Server4You brand.

When you request a page or file, the web server records connection information in its access logs:

• your IP address and the date and time of the request;
• the requested address, response status and amount of data sent;
• the referring page, if your browser sends it;
• the browser's User-Agent, which can include browser and operating-system information.

The server also records errors for diagnosis. These records help deliver the website, investigate problems and protect it against misuse. The legal basis is Article 6(1)(f) GDPR: my legitimate interest in operating a reliable, secure website. Server logs can contain personal data; they are not anonymous statistics.

The public consulting pages do not require registration or offer a contact form. Fonts, images and stylesheets are served from this website. Links to LinkedIn and Xing are ordinary links; those services receive a request when you follow them, and their own privacy policies then apply.

Contacting me

If you contact me by email or telephone, I process the information you provide, such as your name, contact details and message, to respond and, where relevant, discuss or carry out an assignment.

For a contract with you or steps you request before entering one, the legal basis is Article 6(1)(b) GDPR. Other business inquiries are handled on the basis of my legitimate interest in responding to correspondence, under Article 6(1)(f) GDPR. Where records must be retained to meet a legal obligation, Article 6(1)(c) GDPR applies.

Contacting me is voluntary. Without the information needed to understand your inquiry or a way to reach you, I may be unable to respond or arrange an assignment.

Website analytics

The homepage of machelett.com uses Plausible Analytics Community Edition, which I host myself. It helps me understand visits and engagement with the website. The other public consulting pages do not load this analytics script.

The script measures pageviews and engagement, including the page address, referring page, scroll depth and engaged time. It does not set cookies or store tracking identifiers in your browser. It also checks whether an opt-out preference has previously been stored in your browser. Requests go to my analytics server, not Plausible's managed cloud service.

The analytics server also uses the IP address to estimate which country a request comes from. It derives the browser and operating system (including their versions) and device category from the User-Agent. These details are stored as part of the statistics.

Plausible documents the use of an IP address and browser User-Agent to create a day-limited identifier, without storing those raw values in its analytics database. Separately, my analytics server records the requests it receives in access logs, as described under Visiting the website. See Plausible's explanation of its data processing.

The purpose is to understand and improve the website. To the extent that personal data is processed to produce these statistics, the basis is that legitimate interest under Article 6(1)(f) GDPR.

How long data is kept

Server logs are rotated daily, with up to 14 rotated files retained.

Website and analytics backups are kept on systems under my control. Routine backup copies are replaced as the backup cycle runs; separate maintenance copies remain until manually deleted.

Correspondence is retained for as long as it is needed to handle the inquiry or assignment, meet applicable record-keeping obligations, or establish, exercise or defend legal claims. These purposes and any applicable statutory periods determine how long the information is needed.

Analytics statistics are retained to compare use of the website over time. No automatic expiry period is currently configured; the statistics remain until I delete them.

Who receives data

The hosting provider supplies the infrastructure on which I operate the website. Email and telephone communications also involve the providers used to deliver those communications. Data may additionally need to be disclosed where a legal obligation requires it or where necessary to establish, exercise or defend legal claims.

Your rights

Under the GDPR, and subject to its conditions and exceptions, you can:

• ask whether I process your personal data and request access and a copy;
• ask for inaccurate information to be corrected or incomplete information completed;
• request erasure or restriction of processing;
• receive data you supplied in a machine-readable format, and request its transfer where technically feasible, when automated processing is based on your consent or a contract;
• withdraw consent at any time where processing relies on it, without affecting the lawfulness of earlier processing.

You can object to processing based on legitimate interests for reasons relating to your particular situation. Processing must then stop unless overriding compelling grounds or grounds relating to legal claims apply. You can object to direct marketing at any time; that processing must stop.

To exercise your rights, use the contact details above. Requests are normally free of charge. The GDPR generally requires a response within one month; where its conditions for an extension apply, you must be told within that month. Additional information may be needed to confirm your identity if there are reasonable doubts.

You can complain to a data-protection supervisory authority, including the authority where you live or work or where you believe an infringement occurred. For Karlsruhe, the relevant authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

The public consulting website does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.