Privacy policy

This policy explains which personal data we process when you visit maakmedia.com, on what legal basis, and which rights you have. It is based on the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

Matthias Mackowiak, trading as Maak Media
Knebelstraße 6, 98693 Ilmenau, Germany
Email: garmin@maakmedia.com

2. Hosting and server log files

This website runs on a server of Host Europe GmbH, Welserstraße 14, 51149 Cologne, Germany. Host Europe processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

With every request, the server automatically stores technical information in log files: IP address, date and time, the page requested, the amount of data transferred, the previous page (referrer), and browser and operating system. This is necessary to deliver the site and detect attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR). Log files are deleted regularly and not combined with other data. The connection is encrypted via TLS.

3. Cookies and consent

The site does not need cookies to work. We only use Google Analytics (section 4) with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). We ask for consent through a banner that runs on our own server (tarteaucitron.js, open source). Your choice is stored in the essential cookie “tarteaucitron” for up to 12 months (§ 25 (2) no. 2 TDDDG). The banner does not pass any data to third parties.

You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page. This does not affect the lawfulness of processing before the withdrawal.

4. Google Analytics 4

With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us in aggregate which pages are visited and where visitors come from. Google processes usage data such as pages viewed, approximate location, device and browser, and sets the cookies “_ga” and “_ga_*” (stored for up to 2 years).

We use Google Consent Mode v2 in basic mode: without your consent, Google Analytics is not loaded at all. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Data may be transferred to Google LLC in the USA. Google is certified under the EU–US Data Privacy Framework; Standard Contractual Clauses apply in addition. Google deletes event and user data after 14 months; if you visit the site again, this period starts over for user data. More: policies.google.com/privacy.

5. Newsletter (Brevo)

If you sign up for the newsletter, we process your email address and chosen language to send you new watch faces and updates, at most every two weeks. Emails are sent via Brevo, a service of Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France, acting as our processor under Art. 28 GDPR. The data is stored on servers in the EU.

We use double opt-in: you are only subscribed once you click the link in the confirmation email. As proof, we store the time and IP address of sign-up and confirmation. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe at any time via the link in every email. We then delete your address; we keep proof of your earlier consent only as long as legally required.

6. Spam protection (Cloudflare Turnstile)

To keep bots away from the newsletter and contact forms, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile only loads when you use a form. Cloudflare processes technical data such as IP address, browser and device information to tell people from bots. The legal basis is our legitimate interest in protecting the forms (Art. 6 (1) (f) GDPR); access to your device is strictly necessary for the service you requested (§ 25 (2) no. 2 TDDDG). Cloudflare is certified under the EU–US Data Privacy Framework. More: cloudflare.com/privacypolicy.

7. Contact form and email

If you write to us via the contact form or by email, we process your details (name if given, email address, message) to answer your enquiry. The form sends the message from our server to our mailbox and does not store it anywhere else. To prevent misuse for mass mailing, we store a hashed value of your IP address for no more than one hour to limit the number of messages (Art. 6 (1) (f) GDPR). The legal basis is Art. 6 (1) (b) GDPR where it concerns buying or using our watch faces, otherwise our legitimate interest in answering (Art. 6 (1) (f) GDPR). We delete the data once the enquiry is settled and no retention obligations apply.

8. Storage period

We only keep personal data as long as needed for the purposes described or as required by statutory retention periods. There is no automated decision-making or profiling under Art. 22 GDPR.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7 (3)). Just write to garmin@maakmedia.com.

Right to object: Where we process data based on our legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

10. Complaints

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany, www.tlfdi.de.