Privacy Policy

This is a courtesy translation for our English-speaking clients. The German version of this page is legally binding.

Controller. DJonas | Jonas Hartmann, Rheinstraße 40–42, 64283 Darmstadt, email info@djonas.com, phone 0157 73850495.

Server log files. When you visit this website, our hosting provider automatically collects information transmitted by your browser: IP address, date and time, the file requested, referrer URL, browser and operating system. The legal basis is Art. 6(1) (f) GDPR (legitimate interest in secure and stable operation). This data is deleted automatically as soon as it is no longer required to ensure secure operation, typically within a few days. Our hosting provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Germany (Falkenstein/Vogtland); the hosting does not involve any transfer to third countries. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner. More information: Hetzner privacy policy.

Enquiry form. If you use the form, the information you provide is processed to handle your enquiry and is sent to us by email. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. Your details are deleted as soon as they are no longer required for this purpose and no statutory retention obligations apply. No external form services are used.

Contact by email, phone or WhatsApp. When you contact us, your details are stored to process your enquiry. If you contact us via WhatsApp, that provider’s own privacy policy also applies.

Sending and receiving email (Microsoft 365). For our email mailbox we use Microsoft 365 (Exchange Online) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. This covers emails you send us as well as the notifications about enquiries from our form, which our website sends via SMTP through Microsoft. The content of your message or form details and related metadata (e.g. email address, time) are processed. The legal basis is Art. 6(1)(b) GDPR (processing your enquiry) or Art. 6(1)(f) GDPR (legitimate interest in secure and reliable email communication). A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft (Microsoft Products and Services Data Protection Addendum). A transfer to Microsoft Corporation in the USA cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework. More information: Microsoft Privacy Statement.

Your rights. You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a supervisory authority – in Hesse, this is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit).

Google reviews. Some pages display current reviews from the Google Business Profile. So that your browser does not need to connect directly to Google, our own server retrieves the data via the Google Places API and delivers it to your browser (a server-to-server call – no cookie and no tracking pixel from Google on this page). The API provider is Google Ireland Limited or Google LLC (USA). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in transparently displaying current customer reviews). The „All reviews on Google“ button leads directly to Google Maps, where Google’s own privacy policy applies.

Instagram feed. Some pages display the latest posts from the Instagram profile @_djonas_. Here too, our own server retrieves the post data via the Instagram Graph API and delivers it – your browser does not connect directly to Meta’s servers unless you actively click on a post or the profile link. The provider is Meta Platforms Ireland Limited or Meta Platforms, Inc. (USA). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in showcasing current work). Clicking a post or the profile button takes you away from this website; Instagram/Meta’s own privacy policy then applies.

WhatsApp button. The WhatsApp button on this website opens a chat with the stated phone number via the app or web.whatsapp.com. Only once the chat is opened, or a message is sent, does a connection to WhatsApp/Meta occur; WhatsApp Ireland Limited’s or Meta Platforms, Inc.’s (USA) own privacy policy then applies.

Google Ads conversion tracking. We run ads via Google Ads. Only if you consent to the “Marketing” category in the cookie banner do we load the Google tag (gtag.js) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It sets cookies (e.g. “_gcl_au”, stored for up to 90 days) and records whether a visit via one of our ads led to an enquiry through the form or to a click on our phone number or WhatsApp. In doing so, data such as your IP address, device and browser information and the ad click ID are transmitted to Google. Data may also be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via the cookie settings link in the footer. More information: Google Privacy Policy.

This website sets no analytics cookies. Marketing cookies (Google Ads conversion tracking) are only set with your consent. On your first visit, a cookie banner lets you allow or refuse statistics and marketing individually. Your choice is stored locally in your browser (localStorage) and can be changed at any time via the cookie settings link in the footer. Details are available in our Cookie Policy.