KONODigital Start a project
EN

Legal

Privacy policy

This website is deliberately built to collect as little as possible: no tracking or marketing cookies, no external analytics services, no external fonts. How the website is used is measured by my own server without cookies and without external services; your IP address is not stored in the process (section 5). Personal data is only processed if you actively give it to me through the contact form, the website check or by email.

1. Controller

KONO Digital · Louis Konopatzki
Avenida Pádua 3, 2A 1B, 1800-294 Lisbon, Portugal
Email: louis@kono-digital.de

2. Hosting

This website is hosted by Hostinger International Ltd.; the servers are located inside the European Union. When the website is called up, the host automatically processes technical access data (server log files: IP address, date and time, page called up, browser type). This data is technically necessary in order to deliver the website and to keep operation secure (legal basis: Article 6(1)(f) GDPR – legitimate interest in secure operation).

3. Contact form and email

If you use the contact form, I process the data you enter (name, company where given, email address, phone number where given, website where given, budget indication where given, message) exclusively in order to deal with your enquiry (legal basis: Article 6(1)(b) GDPR – steps taken prior to entering into a contract).

The data is sent to me by email and is not passed on to third parties. It is deleted as soon as it is no longer needed for handling the enquiry and no statutory retention periods apply.

4. Website check

On the website check page you can enter the address of a website and have it examined automatically. The address you enter is transmitted to my server for this one check only, processed there and not stored. The server calls up the page named, exactly as any visitor would; my server IP appears in the access logs of the website being checked. The legal basis is Article 6(1)(f) GDPR (legitimate interest in providing the tool).

If you request the detailed report in the second step, I additionally process the email address you give, optionally your name, the checked address and the result. This data serves solely to send you the report and to contact you about it once. The legal basis is your consent under Article 6(1)(a) GDPR, which you give expressly in the form. To be able to demonstrate that consent, the time, the wording and the IP address are logged (Article 7(1) GDPR).

Withdrawal: You can withdraw your consent at any time and without any formality – a short email to louis@kono-digital.de is enough. Your data is then deleted. The lawfulness of the processing carried out up to that point is unaffected. Without a reply from you, the details are deleted at the latest six months after the request.

5. Cookies and tracking

This website uses no analytics, advertising or tracking cookies and embeds no external services that could recognise you. That is why you will not find a cookie banner here.

A technically necessary session cookie (PHP session) is set only when the contact form is submitted and when the website check is run. It contains no personal content, serves solely to protect against automated abuse and is deleted when the browser is closed. For such strictly necessary cookies no consent is required under § 25(2) TDDDG.

Audience measurement without cookies. To understand how this website is used and where it needs to improve, it measures usage on my own server – without cookies and without storing anything on your device. For this, a script on this website transmits the following when a page is opened, when you click and when you leave a page:

  • the page called up and the time;
  • where the visit came from – only the name of the referring website (e.g. google.com), never its full address – plus campaign parameters from the link (utm_source, utm_medium, utm_campaign, ref);
  • which links and buttons are clicked (label and destination; for external links only the name of the destination website);
  • whether a form was started and submitted – never what you enter;
  • how long the page was visible and how far you scrolled;
  • device class (smartphone, tablet, desktop), browser and operating system family (e.g. “Chrome”, “iOS”), browser language and your device’s time zone, from which only a rough country is derived.

So that page views from the same day can be grouped into one visit, the server combines your IP address and your browser identifier (user agent) with a random key that is newly generated every day into a shortened checksum. The IP address and user agent themselves are processed only fleetingly and are not stored; the key is discarded every day. Once the day is over, the checksum can therefore no longer be linked to an IP address, and recognising you beyond that day is impossible. Visits by search engine crawlers and other automated programs are discarded.

Processing takes place exclusively on my own web space at Hostinger (section 2). No external analytics service is involved, and the data is not passed on to third parties. The raw data is deleted after 180 days. The purpose is audience measurement and improving the website – for example, seeing which pages are read and at which point visitors leave. The legal basis is Article 6(1)(f) GDPR (legitimate interest in a data-minimising evaluation and improvement of my own offering).

You can object to the measurement at any time (Article 21 GDPR): if your browser sends the “Global Privacy Control” or “Do Not Track” signal, no measurement takes place. Without JavaScript, it does not take place either.

6. External links

This website links to external websites (e.g. findyourgolfclub.com). When you follow external links, the privacy terms of the respective operators apply.

7. Business outreach

I occasionally approach companies on my own initiative in order to offer them the design or rebuild of their website. For this I process publicly accessible details of those companies – data, that is, which was not collected from the data subjects themselves. Where it comes from, what I use it for, how long I keep it and how an objection takes effect immediately is set out separately as information under Article 14 GDPR in the privacy notice for business outreach.

If you have received mail from me and do not want any more: opt out here. One click, free of charge, no account – the block takes effect immediately and permanently.

8. Your rights

  • access to the data held about you (Article 15 GDPR)
  • rectification of inaccurate data (Article 16 GDPR)
  • erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR)
  • data portability (Article 20 GDPR)
  • objection to the processing (Article 21 GDPR)
  • lodging a complaint with a supervisory authority (Article 77 GDPR). The competent supervisory authority is the Portuguese Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134 – 1.º, 1200-651 Lisbon.

An informal email is enough to exercise your rights.

This English version is provided for your convenience; the German version at kono-digital.de/datenschutz/ is the legally binding one.