Privacy policy

What this site does with your data.

Almost nothing, and this page says exactly what. It sets no cookies, runs no analytics, and loads nothing from anyone else's servers.

01   Controller

The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation is:

Controller
Bernhard Rauscher
Address
Josef-Kogler-Strasse 8D
82031 Gruenwald
Germany
Email
impressum@burnletics.com
Telephone
+49 89 28879988

No data protection officer has been appointed, as the statutory conditions for a mandatory appointment are not met.

02   In short

This is a static website. It has no user accounts, no shop, no comment function, no newsletter and no tracking.

  • It sets no cookies and stores nothing in your browser.
  • It runs no analytics and no advertising or conversion pixels.
  • Every file it loads, including the fonts, images and the video, is served from this site itself. Your browser is not asked to contact Google, a content delivery network, or any other third party.
  • The request form sends nothing to a server. It opens your own email programme.

What remains is the technically unavoidable processing described below.

03   Legal bases

Where we process personal data, we rely on the following legal bases:

  • Article 6 (1) (a) GDPR where you have given consent.
  • Article 6 (1) (b) GDPR for processing needed to perform a contract or to take steps at your request before entering into one.
  • Article 6 (1) (c) GDPR for compliance with a legal obligation, in particular commercial and tax retention duties.
  • Article 6 (1) (f) GDPR for our legitimate interests, namely operating this site securely and reliably and answering enquiries addressed to us.

04   Server log files

When you open this site, your browser sends technical information to the server that delivers it. Our hosting provider records this in server log files. The data comprises:

  • the abbreviated or full IP address of the requesting device
  • the date and time of the request
  • the address of the file requested and the amount of data transferred
  • the HTTP status code reporting whether the request succeeded
  • the referring address, where your browser sends one
  • the browser and operating system in use

This processing is necessary to deliver the site, to keep it stable and to detect and investigate attacks. The legal basis is Article 6 (1) (f) GDPR. The log data is not merged with other data sources and is not used to identify individual visitors. It is deleted by the hosting provider after a short period unless a specific incident requires it to be retained for evidence.

This website is hosted by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. IONOS processes the log data on our behalf as a processor under Article 28 GDPR, on the basis of a data processing agreement. The servers are located within the European Union.

05   Cookies and browser storage

This site sets no cookies. It does not use local storage, session storage or any comparable technique to store information on your device. There is therefore no consent banner, because there is nothing to consent to.

06   Third party content

This site embeds no third party content. In particular:

  • The typefaces are hosted on this site. No connection is made to Google Fonts and no IP address is transmitted for that purpose.
  • There are no maps, no embedded videos from external platforms, no social media plugins and no share buttons.
  • There is no content delivery network, no tag manager and no external script of any kind.

The practical effect is that opening this page results in requests to our own server only.

07   The request form

The form on the home page does not transmit anything to us when you fill it in. Nothing you type is sent to a server, stored, or logged by this site.

When you press the send button, your browser assembles the entries into a message and opens the email programme configured on your device, addressed to us, with the message prefilled. The message is sent only if you send it yourself from your own email programme. From that point the data reaches us as ordinary email correspondence, described in the next section.

08   Contact by email or telephone

If you contact us by email or telephone, the details you provide, including your name, your contact details, your company and the content of your message, are processed so that we can answer you.

The legal basis is Article 6 (1) (b) GDPR where your enquiry relates to a contract or to steps taken before entering into one, and otherwise Article 6 (1) (f) GDPR, based on our legitimate interest in responding to enquiries addressed to us.

Please note that email is not an encrypted channel from end to end unless you encrypt it yourself. If your enquiry is confidential, ask us to arrange a secure channel.

09   Encryption in transit

This site is delivered over HTTPS with TLS encryption. You can recognise this by the padlock in your browser's address bar. While the connection is encrypted, the data you transmit cannot be read by third parties.

10   Retention

We delete personal data as soon as the purpose it was collected for no longer applies. Data is kept beyond that point only where statutory retention duties require it, in particular under German commercial and tax law, where retention periods of six or ten years may apply. In those cases the data is restricted to that purpose and not otherwise used.

11   Transfers to third countries

Personal data collected through this website is not transferred to countries outside the European Union or the European Economic Area.

12   Your rights

Under the GDPR you have the following rights in respect of your personal data:

  • Access, Article 15 GDPR: to be told whether we process data about you and, if so, which data and for what purpose.
  • Rectification, Article 16 GDPR: to have inaccurate data corrected and incomplete data completed.
  • Erasure, Article 17 GDPR: to have your data deleted where the conditions are met.
  • Restriction of processing, Article 18 GDPR.
  • Data portability, Article 20 GDPR: to receive data you provided in a structured, commonly used and machine readable format.
  • Objection, Article 21 GDPR: to object at any time, on grounds relating to your particular situation, to processing based on Article 6 (1) (f) GDPR.
  • Withdrawal of consent, Article 7 (3) GDPR: to withdraw consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, write to impressum@burnletics.com or to the postal address above.

13   Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement. The authority responsible for us is:

Authority
Bayerisches Landesamt fuer Datenschutzaufsicht (BayLDA)
Address
Promenade 18
91522 Ansbach
Germany
Web
www.lda.bayern.de

14   Automated decision making

We do not use automated decision making, including profiling, within the meaning of Article 22 GDPR.

15   Unsolicited advertising

We object to the use of the contact details published under our legal notice for sending advertising and information material that we have not expressly requested. We reserve the right to take legal steps in the event of unsolicited advertising being sent.