Privacy Policy
Language Disclaimer: This privacy policy is provided in English for your convenience. In the event of any contradiction or discrepancy between the German version (Datenschutzerklärung) and this English translation, the German version (Datenschutzerklärung) shall prevail and be legally binding. It can be found at https://roman-minchyn.de/recht/datenschutz.
Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.
Pursuant to Art. 4 No. 1. of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we determine the purposes and means of processing either alone or jointly with others. We also inform you below about third-party components used by us for optimization purposes and to improve usability, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
- Information about us as controllers
- Rights of users and data subjects
- Information on data processing
I. Information about us as controllers
The provider responsible for this website in terms of data protection law is:
Roman MinchynHeinrich-Meister-Allee 11
30459 Hannover, Germany
Mobile: +49 (0) 177 33 41 257
Email: freelancing@roman-minchyn.de
VAT identification number pursuant to Section 27 a of the German Value Added Tax Act: DE815815864
Dispute resolution
I am neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.
Responsible for content pursuant to Section 18 para. 2 MStV
Heinrich-Meister-Allee 11
30459 Hannover
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation of whether data concerning them is being processed, to information about the processed data, to further information about the data processing, and to copies of the data (see also Art. 15 GDPR);
- to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
- to immediate deletion of data concerning them (see alsoArt. 17 GDPR), or, alternatively, insofar as further processing is required under Art. 17 para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- to receive data concerning them and provided by them and to transmit this data to other providers/controllers (see also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they are of the opinion that data concerning them is being processed by the provider in violation of data protection provisions (see also Art. 77 GDPR). The competent authority for us is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out on the basis of Article 16, 17 para. 1, 18 GDPR has been carried out. However, this obligation does not apply insofar as this notification is impossible or involves a disproportionate effort. Regardless of this, the user has a right to information about these recipients.
Likewise, pursuant to Art. 21 GDPR users and data subjects have the right to object to future processing of data concerning them insofar as the data is processed by the provider pursuant to Art. 6 para. 1 lit. f) GDPR . In particular, an objection to data processing for direct marketing purposes is permissible.
III. Information on data processing
Data processed when using our website will be deleted or blocked as soon as the purpose of storage ceases to apply, provided that no statutory retention obligations prevent deletion and no different information is provided below for individual processing procedures.
Cookies
a) Session cookies / technically necessary cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your terminal device by your browser.
We use exclusively strictly necessary cookies. These are technically required for operation and website functionality (e.g. language selection, security functions).
The legal basis for storing information on the user's terminal device and accessing that information is Section 25 para. 2 no. 2 TDDDG. The subsequent processing of personal data is based on Art. 6 para. 1 lit. f) GDPR to safeguard our legitimate interests in the technically error-free and optimized provision of our services.
b) Third-party cookies
If necessary, cookies from partner companies with whom we cooperate for the purposes of advertising, analytics, or website functionality may also be used on our website.
Please refer to the information below for details, in particular regarding purposes and legal bases for processing such third-party cookies.
c) Option to disable
You can prevent or restrict the installation of cookies by setting your internet browser accordingly. You can also delete cookies that have already been stored at any time. However, the steps and measures required depend on the specific internet browser you use. If you have questions, please use your browser's help function or documentation, or contact the manufacturer or support. For so-called Flash cookies, processing cannot be prevented via browser settings. Instead, you must change your Flash player settings. The necessary steps and measures for this also depend on the Flash player you use. If you have questions, please likewise use the help function or documentation of your Flash player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be fully used.
Contact form and email contact
If you send us inquiries via contact form or email, your details from the inquiry form or your email, including the contact data you provide there, are stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass this data on without your consent.
Legal basis: The processing of this data is based on:
Art. 6 para. 1 lit. b) GDPR, insofar as your inquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures (e.g. preparing an offer).
Art. 6 para. 1 lit. f) GDPR (legitimate interest) in all other cases, as we have a legitimate interest in effectively processing inquiries addressed to us.
Storage duration: The data you enter in the contact form or send by email remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions, in particular tax and commercial retention periods, remain unaffected.
Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your internet browser to us or to our webspace provider. With these so-called server log files, information such as the type and version of your internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our website that you visit, date and time of the respective access, and the IP address of the internet connection from which our website is used is collected.
The data collected in this way is stored temporarily, but not together with other data from you.
This storage takes place on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted within a maximum of 30 days, unless further retention is required for evidentiary purposes. Otherwise, the data is exempt from deletion in whole or in part until final clarification of an incident.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. However, we point out that data transmission on the internet (e.g. when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Hosting and Content Delivery Networks (CDN)
For the provision of our website, we use services from specialized providers. They process technical data (e.g. IP address) to deliver the website securely and quickly.
Vercel
Provider:
Vercel Inc.Address: 440 N Barranca Ave #4133, Covina, CA 91723, USA.
Purpose/use: We use Vercel as the hosting and deployment platform for our website.
Legal basis: Vercel is used on the basis of Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in the most reliable and fast possible presentation of our website.
Processed data: When using the website, Vercel may in particular process technical connection and log data (e.g. IP address, request/header information, time of access, requested URL, browser and device information).
Third-country transfer/guarantees: Personal data may also be transferred to third countries, in particular to the USA. For data transfers to third countries, according to its own statements, Vercel uses appropriate safeguards, in particular standard contractual clauses pursuant to Art. 46 GDPR. You can find Vercel's Data Processing Addendum (DPA) at: https://vercel.com/legal/dpa.
According to Vercel, there is also certification under the EU-U.S. Data Privacy Framework: https://vercel.com/guides/is-vercel-certified-under-dpf.
Objection options: Processing via Vercel is necessary for the technical provision of the website. You can limit processing by not using our website or by making corresponding settings in your browser (e.g. blocking cookies/scripts), where technically possible.
Privacy policy: Further information on data processing by Vercel can be found at: https://vercel.com/legal/privacy-policy
Cloudflare (DNS and security)
Provider:
Cloudflare Inc.Address: 101 Townsend Street, San Francisco, California 94107, USA.
Purpose/use: We use Cloudflare as a DNS service provider to optimize the availability of our website and to protect it against DDoS attacks and other cyber threats.
Legal basis: The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the technical security, stability, and performance of our website.
Third-country transfer/guarantees: When using Cloudflare, data may be transferred to the USA. Cloudflare Inc. is certified under the EU-U.S. Data Privacy Framework. In addition, Cloudflare uses standard contractual clauses pursuant to Art. 46 GDPR. Information on the Cloudflare Customer DPA can be found at: https://www.cloudflare.com/de-de/cloudflare-customer-dpa/.
Note on cookies: If Cloudflare sets technically necessary cookies for security checks (e.g. bot protection), this is done on the basis of Section 25 para. 2 no. 2 TDDDG.
Social Media & external links
We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers/prospective clients. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
In this context, we point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may entail increased risks for users, for example because later access to user data may be more difficult. We also do not have access to this user data. Access is exclusively available to LinkedIn.
LinkedIn's privacy notices can be found at https://www.linkedin.com/legal/privacy-policy
General linking to profiles at third-party providers
The provider uses links on the website to the social networks listed below.
The legal basis is Art. 6 para. 1 lit. f GDPR. The provider's legitimate interest lies in improving the usability of the website.
The plugins are integrated via a linked graphic. The user is only redirected to the service of the respective social network by clicking the corresponding graphic.
After redirecting the customer, information about the user is collected by the respective network. This is initially data such as IP address, date, time, and visited page. If the user is logged into their user account of the respective network at the same time, the network operator may assign the collected information of the user's specific visit to the user's personal account. If the user interacts via a “Share” button of the respective network, this information can be stored in the user's personal account and may be published. If the user wants to prevent the collected information from being directly assigned to their user account, the user must log out before clicking the graphic. It is also possible to configure the respective user account accordingly.
The following social networks are linked by the provider:
Address: 4 Grand Canal Square, Dublin 2, Ireland.
Imprint: https://www.facebook.com/impressum
Privacy policy: https://www.facebook.com/policy.php
Address: Wilton Plaza, Wilton Place, Dublin 2, Ireland; as a subsidiary of LinkedIn Corporation: 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
Imprint: https://www.linkedin.com/legal/impressum
Privacy policy: https://www.linkedin.com/legal/privacy-policy
X
Address: One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
Imprint: https://legal.x.com/de/imprint.html.
Privacy policy: https://x.com/de/privacy
GitHub
Address: Prins Bernhardplein 200, 1097JB Amsterdam, Netherlands; 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA.
Third-country transfer/guarantees: According to GitHub, services may involve processing in the USA; personal data may therefore be stored and processed in the USA. GitHub, Inc. is certified under the EU-U.S. Data Privacy Framework. In addition, GitHub uses appropriate safeguards, in particular standard contractual clauses pursuant to Art. 46 GDPR, to ensure an adequate level of data protection.
Privacy policy: https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement
Address: Am Strandkai 1, 20457 Hamburg, Germany.
At XING as well, personal data may be transferred to third countries. According to XING, such transfers are carried out only under legal requirements; as a rule, based on appropriate safeguards pursuant to Art. 46 GDPR (in particular EU standard data protection clauses).
Information on third-country transfers: https://privacy.xing.com/de/datenschutzerklaerung/wer-erhaelt-daten-zu-ihrer-person/drittlaender
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Imprint: https://new-work.se/en/impressum-EN
Model Data Protection Statement for Anwaltskanzlei Weiß & Partner
Date of last revision: