Valentin Despa

Privacy Policy

1. Data Controller

The controller responsible for processing personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

Valentin-Andrei Despa
c/o flexdienst – #21078
Kurt-Schumacher-Straße 76
67663 Kaiserslautern
Deutschland
Email: …

For any privacy-related question or request, please use the contact form. A Data Protection Officer is not required under Art. 37 GDPR / § 38 BDSG.

2. Scope

This policy applies to the website vdespa.com and any subdomains operated by the controller.

3. Data We Process & Legal Basis

3.1 Server logs & security

This site is served through Cloudflare, which terminates TLS and proxies every request. In doing so, Cloudflare processes technical data — IP address, date and time of the request, requested URL, referrer, browser and operating system identifiers — to deliver the site, ensure availability, and protect against abuse (DDoS mitigation, bot filtering). Cloudflare may set a strictly necessary first-party cookie (__cf_bm, ~30 minutes) for bot management.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, performant, and available website). Edge logs are kept short-term by Cloudflare under their standard retention and then deleted or anonymised.

3.2 Contact form

The contact form is provided by Tally (see Subprocessors). When you submit it, the name, email address, and message you provide are transmitted to and stored by Tally on our behalf, and forwarded to the controller.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract, where applicable) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Submissions are retained for up to 12 months and then deleted, unless a longer retention is necessary to handle an ongoing matter or required by law.

3.3 Newsletter

If you subscribe to the newsletter, your email address and opt-in metadata (timestamp, IP at sign-up, confirmation status) are processed by SendFox on our behalf. We use a double opt-in process: you will receive a confirmation email, and your address is only added after you confirm.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time by clicking the unsubscribe link in any newsletter, or by contacting us. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

4. Privacy-First Analytics

This website uses Cloudflare Web Analytics, a privacy-first analytics service. It measures aggregate page performance and traffic without using cookies, without fingerprinting visitors, and without building cross-site profiles. IP addresses are processed transiently to derive aggregated metrics and are not stored. No advertising trackers or third-party tracking cookies are used.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate site usage to improve content and performance). See Cloudflare Web Analytics.

5. Subprocessors

The following providers process personal data on our behalf under data processing agreements (Art. 28 GDPR):

Where a provider is located outside the EU/EEA, transfers are safeguarded by the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, as set out in the provider's data processing agreement.

6. Your Rights

Under the GDPR, you have the right to:

  • access your personal data (Art. 15);
  • rectify inaccurate data (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw consent at any time (Art. 7(3)), without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for the controller is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz.

7. How to Exercise Your Rights

The simplest way is the contact form. You can also reach the controller by email at …. We will respond within the timelines set by Art. 12 GDPR.

8. Changes to This Policy

This policy may be updated to reflect changes in our processing activities or legal requirements.