Legal
Privacy policy
This website deliberately avoids tracking, advertising cookies and external analytics. Below is what data is processed anyway, and why. The German version is legally binding.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Shkelqim Sina Sina Labs Helgenwald 4a 35463 Fernwald Germany Email: kima@sinalabs.de
A data protection officer is not required, as the conditions of section 38 BDSG are not met.
2. Hosting and server log files
This website runs on a server operated by Contabo GmbH, Aschauer Strasse 32a, 81549 Munich, Germany. Processing takes place exclusively on servers within the European Union. A data processing agreement under Art. 28 GDPR is in place.
When you access the website, your browser automatically transmits the following data:
- shortened or full IP address of the requesting device
- date and time of access
- name and URL of the requested file
- amount of data transferred and confirmation of successful retrieval
- browser type and version as well as operating system
- the previously visited page (referrer), if transmitted
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the technically correct operation of the site, its delivery and the defence against attacks. This data is not merged with other data sources and is not evaluated for marketing purposes. Log files are deleted automatically after 14 days at the latest.
3. Cookies and local storage
This website sets no cookies and uses no analytics, tracking or advertising technologies. A consent banner is therefore not required.
No data is placed in your browser's local storage or session storage. The language shown follows from the address you open, so nothing needs to be stored on your device.
4. Fonts and media
All fonts are downloaded at build time and served directly from my own server. No connection to Google or other third-party servers is established when you visit this site. Images and icons are also stored locally.
5. Contact by email
If you contact me by email, your details are processed in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to concluding or performing a contract, otherwise Art. 6(1)(f) GDPR based on the legitimate interest in responding to enquiries.
The data is deleted once the enquiry has been dealt with conclusively and no statutory retention obligations apply. Business correspondence is subject to commercial and tax retention periods of six and ten years respectively (section 257 HGB, section 147 AO).
The email service is provided via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A data processing agreement under Art. 28 GDPR is in place.
6. Appointment booking via Cal.com
This website links to the booking service Cal.com. No widget and no script is embedded: as long as you do not click the link, no data is transmitted to Cal.com.
Only when you open the link do you leave this website, and the privacy terms of Cal.com, Inc. apply. Your IP address and the data you enter in the booking form (name, email address, requested time, optional message) may then be processed and transferred to the USA. The legal basis for the subsequent appointment is Art. 6(1)(b) GDPR.
Provider information: https://cal.com/privacy
7. No automated decision-making
There is no automated decision-making including profiling under Art. 22 GDPR. Your data is not passed on to third parties for advertising purposes.
8. Encryption
For security reasons this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.
9. Your rights
You have the right at any time to:
- access to the data processed about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
An informal message to kima@sinalabs.de is enough to exercise these rights.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany, www.datenschutz.hessen.de
10. Changes to this policy
This privacy policy is updated whenever the technical setup of the website or the legal situation changes. The version published here always applies.