Legal
Privacy
Draft — please have this text reviewed by your legal advisor before going live, and fill in the items in [brackets]: the log retention period your server actually uses, and the data-center provider if the server is not on your own premises.
In short
This website sets no cookies, uses no analytics or tracking and loads no third-party content until you actively ask for it (for example, by pressing play on a video).
Controller
SkySpirit GmbH, Industriestraße 15, 70565 Stuttgart, Germany. Email: info@skyspirit.com, phone: +49 151 10472831.
Hosting and server log files
We host this website ourselves, on our own server running the Apache web server. No external hosting provider or content delivery network is involved, and all fonts, images and videos are delivered from our server — no data is sent to third parties when you browse the site.
When you visit this website, the server automatically records technical data in log files: your IP address, the date and time of the request, the page or file requested, the amount of data transferred, the referring URL, and your browser type and operating system. We need this data to deliver the website, to keep it secure and stable, and to detect and fix errors. The legal basis is our legitimate interest in the secure and reliable operation of our website (Art. 6 (1) (f) GDPR). We do not merge this data with other data sources, and we do not use it to identify individual visitors.
Log files are deleted automatically after [7] days, unless a security incident requires us to keep specific entries for longer to investigate it. [If the server is located in a rented data center or with a server provider, name that provider here and confirm that a data processing agreement (Art. 28 GDPR) is in place.]
Encryption
This website uses TLS encryption (HTTPS) to protect the transfer of data between your browser and our server.
Contact by email or phone
If you contact us, we process your details to handle your enquiry (Art. 6 (1) (b) and (f) GDPR). We delete them once they are no longer required, unless statutory retention obligations apply.
YouTube videos
Some project pages contain videos hosted on YouTube. They are only loaded after you click “Play”, using YouTube’s privacy-enhanced mode (youtube-nocookie.com). Once loaded, Google Ireland Ltd. processes data such as your IP address and may transfer it to the USA. Legal basis: your consent by clicking play (Art. 6 (1) (a) GDPR). More: policies.google.com/privacy.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection Baden-Württemberg.