This is a courtesy translation. The German Datenschutzerklärung is the legally relevant version.

1. Overview

This website is deliberately built to collect as little data as possible: it sets no tracking or marketing cookies, embeds no social media plugins, maps or third-party videos, and has no contact form. External services such as Instagram or WhatsApp are included only as plain links.

2. Controller

Andrei Leliuk
Rudolf-Schiestl-Str. 15
90765 Fürth
Germany
Email: speedhorn74@gmail.com
Phone: +49 155 60986964

3. Hosting (Cloudflare)

This website is delivered via Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary data, in particular IP address, date and time of access, requested page, referrer URL, and browser and operating system information. This is required to deliver the website and protect it against attacks.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable delivery of the website). A data processing agreement is in place with Cloudflare (Cloudflare Data Processing Addendum). Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR). More information: Cloudflare privacy policy.

4. Audience measurement with Cloudflare Web Analytics

To improve the website we use Cloudflare Web Analytics, a minimal analytics tool. According to Cloudflare, it sets no cookies, stores nothing in your browser and creates no user profiles or fingerprints. It records aggregated values such as page views, referrers, country and load times. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in anonymous usage statistics).

5. Cookies and local storage

This website itself sets no cookies and stores no information in your browser.

6. Contacting us

You can get in touch via WhatsApp, Instagram direct message or email. We process the information you provide (e.g. name, contact details, message, reference photos, desired placement) to answer your request and prepare an appointment.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR for general enquiries. If you voluntarily share health information (e.g. allergies or skin conditions), we process it only on the basis of your explicit consent (Art. 9(2)(a) GDPR). Data is deleted once it is no longer needed for its purpose, unless statutory retention obligations apply. We delete requests, including any photos sent, no later than six months after the last contact, unless an appointment has been arranged or statutory retention obligations apply.

7. Links to Instagram, WhatsApp, Google Maps and other services

This website links to Instagram and WhatsApp (both Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland). Simply visiting this website does not transfer any data to these services. Only when you click a link do you leave this website; the privacy policy of the respective provider then applies: Instagram, WhatsApp.

For directions we link to Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is not embedded; data is only transferred when you click the link. Google's privacy policy applies.

8. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)). An informal message to the contact details above is sufficient.

Right to object (Art. 21 GDPR): where we process data based on legitimate interests, you may object at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority. For private bodies in Bavaria this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. Encryption

The website is delivered exclusively over an encrypted HTTPS connection.