Privacy policy

Last updated:

Controller

We have not designated a data protection officer.

We are a company based in the USA. What you write to us by email or enter when booking therefore goes to a company outside the EU. We are not certified under the EU-U.S. Data Privacy Framework. The European Commission’s adequacy decision for the USA applies only to companies that participate in the Data Privacy Framework. There is therefore no adequacy decision for the data that reaches us.

Opening the website, server log files

When you open the site, your browser transmits technically necessary data to the server this site is hosted on. The provider logs the requested address including the query, date and time, the status code, your browser’s identifier (user agent) and the IP address.

The site is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. The data is also transferred to the USA. Vercel is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the European Commission’s adequacy decision under Article 45 GDPR. In addition, Vercel uses the standard contractual clauses of the European Commission.

The legal basis is Article 6 (1) (f) GDPR. The legitimate interest lies in the technically error-free operation and the security of the website. Without this data the site cannot be delivered.

In the logs we can see, Vercel keeps the data for one day. How long Vercel keeps it beyond that is set out in Vercel’s privacy notice: vercel.com/legal/privacy-policy

Audience measurement with Google Analytics

We use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us how many people visit the site and which parts they open.

Whenever you open a page, your browser loads a script from Google and sends information about your visit to Google: the page opened, date and time, details about your device and browser, and your approximate location. Google receives your IP address in the process. According to Google, Google Analytics does not log or store individual IP addresses of users from the EU, Switzerland or the United Kingdom.

Google Analytics stores two cookies on your device: _ga, to tell visitors apart, and _ga_DK9NH3LRCB, to keep the session. Google states a lifetime of two years for both, and your browser may shorten it, Chrome for example to 400 days. Using the identifier in _ga, Google Analytics links the page views of the same browser, across several visits as well. Data may also go to Google in the USA.

Legal basis: not yet determined.

You can prevent the measurement by blocking cookies for this site in your browser or by blocking scripts from googletagmanager.com. Google’s privacy policy: policies.google.com/privacy

Booking appointments via Calendly

We use Calendly to book a call, operated by Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA.

Calendly only loads when you click an appointment button. The click opens the booking calendar in a window on this site. Until then, not a single byte goes to Calendly, and there is no Calendly cookie on your device. Without JavaScript, or if you open the link directly in a new tab, you go straight to Calendly.

When the calendar loads, your IP address and browser data are transferred to Calendly in the USA. Calendly may use cookies and similar storage technologies. If you book an appointment, Calendly additionally processes the details you enter in the form, i.e. name, email address and anything else you enter.

Legal basis for loading the calendar: not yet determined.

You can also request an appointment by email. The legal basis for processing the booking data is Article 6 (1) (b) GDPR, the implementation of pre-contractual measures. Calendly is certified under the EU-U.S. Data Privacy Framework, so the transfer to the USA is based on the European Commission’s adequacy decision under Article 45 GDPR and, in addition, on the standard contractual clauses of the European Commission.

To book, you need to give your name and email address, without them no appointment comes about. Calendly stores the data for as long as necessary for the purposes for which it was collected. The booking itself comes to us.

Calendly’s privacy notice: calendly.com/privacy

Booking signal in the browser

When an appointment is booked through the booking window, this site receives a booking signal. It then creates an event in your browser’s memory without a name, email address or booking identifier. The event is currently neither stored persistently nor analysed, and we do not transmit it to third parties. It disappears when you close the page.

Contact by email

If you write to us at info@vands-media.com, we process your address and what you write in order to reply. The legal basis is Article 6 (1) (b) GDPR if it concerns working together, otherwise (f): our interest in answering enquiries.

The mailbox is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

Your rights

You have the following rights towards us regarding your personal data:

You can withdraw consent once given at any time with effect for the future. To do so, contact info@vands-media.com.

You can also lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, Article 77 GDPR.

We do not make automated individual decisions under Article 22 GDPR, including decisions based on profiling.

Your right to object

Where we base processing on Article 6 (1) (f) GDPR, you can object to it at any time on grounds relating to your particular situation. This applies to the server log files and to any email that is not about working together.

We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Send your objection to info@vands-media.com.