Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Arc & Anchor 42 UG (haftungsbeschränkt)
Unterfeld 14, 85653 Aying GT Großhelfendorf
Email: hello@arcandanchor.eu

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. Hosting

This website is hosted on Amazon Web Services (AWS), provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The website files are stored in the AWS region Frankfurt (eu-central-1) and delivered via the content delivery network Amazon CloudFront. When you access our website, your browser automatically transmits certain technical data to AWS's servers. This includes:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referring URL
• Requested page

This data is processed on the basis of Art. 6 (1) (f) GDPR — our legitimate interest in providing a secure and functional website. AWS acts as a data processor on our behalf under the AWS GDPR Data Processing Addendum. We do not store access logs for this website. Because CloudFront delivers content from the edge location nearest to you, data may be processed outside the EU; appropriate safeguards are in place through Standard Contractual Clauses (SCCs), and Amazon.com, Inc. is certified under the EU-U.S. Data Privacy Framework. For more information, see the AWS Privacy Notice.

3. No Cookies, No Tracking

This website does not use cookies, analytics tools, tracking scripts, or any third-party services that collect personal data. No personal profiles are created. No data is transmitted to third parties for advertising or analytics purposes when you visit this website.

4. Self-Hosted Fonts

We use the Inter font, which is hosted locally on our own server. No connection to external font services (such as Google Fonts) is established when you visit our website. This ensures no additional data transfer to third parties occurs during page rendering.

5. Email Communication

If you contact us via email, your message and any personal data you provide (name, email address, content of your message) will be stored and processed for the purpose of handling your inquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual or contractual measures) or Art. 6 (1) (f) GDPR (our legitimate interest in responding to inquiries).

We use Microsoft 365 for email processing. Microsoft Corporation acts as a data processor on our behalf under a Data Processing Agreement (DPA). Data may be processed on servers within the European Union. Microsoft is certified under the EU-U.S. Data Privacy Framework. For more information, see Microsoft's Privacy Statement.

Your data will be retained for as long as necessary to process your inquiry and any resulting business relationship. Statutory retention obligations (e.g., under German commercial and tax law: 6–10 years) remain unaffected.

6. Data Retention

Unless a more specific retention period has been stated elsewhere in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods). In the latter case, the data will be deleted once these reasons no longer apply.

7. Your Rights under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — You can request information about your stored personal data.
• Right to rectification (Art. 16 GDPR) — You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — You can request deletion of your data under certain conditions.
• Right to restriction of processing (Art. 18 GDPR) — You can request restriction of processing under certain conditions.
• Right to data portability (Art. 20 GDPR) — You can request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR) — You can object to processing based on legitimate interests at any time.
• Right to withdraw consent (Art. 7 (3) GDPR) — You can withdraw any given consent at any time with effect for the future.

To exercise any of these rights, please contact us at hello@arcandanchor.eu.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent supervisory authority for our company is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach
www.lda.bayern.de

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in legal requirements or our data processing practices. The current version is always available on this page.