Privacy policy

Controller

The controller for data processing on this website is Imed Ben Tahar, Paul-Dietz-Straße 19, 72072 Tübingen. You can reach us by email at imedmalerei@gmail.com or by phone on +49 177 4298519.

In brief

• This website sets no cookies.
• There are no analytics or tracking services and no advertising.
• Fonts, images and scripts are delivered by the website itself, not by other providers. Only the host Cloudflare processes technical data when a page is opened (see below).
• We process personal data only for hosting and when you write to us.

Hosting and server logs

The website runs on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Whenever a page is requested, Cloudflare processes the technical data needed to deliver it and protect it from attacks. This includes your IP address, the date and time, the address requested, the page you came from and your browser’s identifier.

The legal basis is our legitimate interest in a secure and stable website under Art. 6(1)(f) GDPR. We have a data processing agreement with Cloudflare under Art. 28 GDPR. Cloudflare is certified under the EU-US Data Privacy Framework, and transfers to the USA rely on the European Commission’s adequacy decision under Art. 45 GDPR. Cloudflare keeps this data only as long as operation and security require.

Contact form and email

When you use the form or send an email, we process the details you provide. These are your name, your email address, your phone number if you give it, the subject and your message. We use this data only to reply to you.

We need your name, email address and message so that we can reply. The phone number is optional, unless you would like to be contacted by phone.

The legal basis is our legitimate interest in replying under Art. 6(1)(f) GDPR.

The form sends your message through the email service Resend, operated by Resend, Inc., USA. Resend forwards it to Imed Ben Tahar’s mailbox, hosted by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and sends you a copy. Transfers to the USA rely on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

To prevent misuse, the website processes your IP address as a shortened check value for no longer than one hour, so that it can recognise too many requests in a short time. A field that only automated programs fill in keeps spam out as well. No third-party services are used for this.

We delete your message once it has been dealt with, and within six months at the latest.

Storage in your browser

The website keeps two settings in your browser’s local storage (localStorage). These are your chosen appearance (light or dark) and your chosen language. This data never leaves your device.

This storage is strictly necessary for features you request and is permitted without consent under § 25(2) no. 2 TDDDG. You can delete the entries at any time in your browser settings.

Offline storage

So that pages you have already visited stay stored without a connection, your browser keeps copies of them in a separate cache. These copies stay on your device and contain no information about you.

Room view with your own photo

If you choose a photo of your wall in the room view, it is processed only in your browser. The photo is neither uploaded nor stored.

Links to other websites

This website links to newspaper articles and exhibition venues, for example. Only when you follow such a link does that provider receive data such as your IP address. Their own privacy notices apply to those pages.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Under Art. 21 GDPR you can object to processing based on legitimate interests, and any consent can be withdrawn at any time with effect for the future. An informal message to imedmalerei@gmail.com is enough.

You may also lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

No automated decisions

We make no automated decisions and carry out no profiling within the meaning of Art. 22 GDPR.