Privacy policy

1. Controller

Thorsten Franz Pavlou Serafide, Stratis Block A, Flat 209A 8854 Prodromi, District Paphos, Republic of Cyprus Email: info@franz.com.de

2. Principles

We process personal data solely within the framework of the General Data Protection Regulation (GDPR) and the applicable national provisions. This policy provides information on the nature, scope and purpose of processing on this website.

3. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — in particular the Commissioner for Personal Data Protection in Nicosia, Cyprus, and in every case also the supervisory authority in your place of habitual residence.

4. Hosting and server log files

When this website is accessed, the web server automatically records technical data (IP address, date and time, page accessed, browser type, referring URL) in order to ensure stable and secure operation. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in system security and stability). Retention period: 7 days, after which data is deleted automatically.

5. Audience measurement

We record which pages are accessed and how often, in order to see which content is actually needed. Measurement runs exclusively on our own server, without cookies, without third parties, without cross-device recognition and without profiling. The IP address is not stored; it is truncated and converted into a non-reversible daily hash so that repeat visits are not counted twice. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in assessing the reach of our own content).

Your right to object. You may object to this processing at any time under Art. 21 GDPR. The objection takes effect immediately and permanently for this browser; it is recorded via a purely technical stored value containing no personal data. You will find it under Privacy settings, linked in the footer of every page.

6. No cookies, no third-party scripts

This website sets no tracking or analytics cookies and loads no third-party resources. Only three purely technical values are stored locally in the browser via the localStorage web storage function: the theme setting (light/dark), the record that you have already seen the one-off privacy notice, and, if you have declared one, your objection to audience measurement. None of the three contains personal data and none is transmitted to the server. Pursuant to § 25 (2) no. 2 TTDSG, no consent is required for this — a consent banner is therefore neither necessary nor present.

7. Fonts

All fonts used (Source Serif 4, Public Sans) are hosted locally on our own server and delivered with the page. No connection is made to Google Fonts or other external font providers — no data, in particular no IP address, is therefore transmitted to third parties.

8. Contact form

If you use the contact form, we process the data you enter (name, company, email, optionally phone, your message) solely in order to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR (steps taken at your request prior to entering into a contract) or Art. 6 (1) (f) GDPR (legitimate interest in communicating with prospective clients). The data is deleted as soon as it is no longer required to handle the enquiry.

9. Profile request (full CVs)

If you request a full CV via the form, we process your name and email address in order to send you a download link automatically. Legal basis: Art. 6 (1) (b) GDPR (steps taken at your request prior to entering into an engagement).

In addition, we receive an internal notification of the request. It contains your name, your email address, the files requested, the date and time of the request, and the IP address from which it was sent. The purpose is personal follow-up of the request and the detection and prevention of abusive bulk submissions through the form. Legal basis for processing the IP address: Art. 6 (1) (f) GDPR (legitimate interest in the security and functioning of the form).

If no engagement relationship subsequently comes about, this data is deleted once the purpose of the enquiry has been fulfilled, and at the latest after six months without a response. The download link is time-limited and expires after that period.

10. Short profiles (PDF download without registration)

No personal data is required to download the short profiles; no processing takes place in this respect beyond the server log files described in section 4.

11. Recipients / processors

For the hosting of this website we use the company conmo (www.conmo.de), Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with conmo.

12. Transfers to third countries

No personal data is transferred to countries outside the EU/EEA.

13. Changes to this policy

This policy will be adapted as soon as the actual scope of data processing changes.