Iron Hand

Privacy Policy
I. Information on the Processing of Your Data in Accordance with Article 13 of the General Data Protection Regulation (GDPR)

1. Controller and Data Protection Officer
The controller for this website is:
Timo Vollmayer
You can contact the Data Protection Officer via email at eisenhand.power@gmail.com or by mail at the following address:

Zum Rental 4
88529 Zwiefalten
Germany

2. Data Processed for the Provision of the Website and Log Files

a. What data is processed and for what purpose?
Each time the website is accessed, temporary data that may allow identification is stored. The following data is collected:

• Date and time of access

• IP address

• Hostname of the accessing device

• Website from which the site was accessed

• Websites accessed via our website

• Pages visited on our website

• Notification of whether access was successful

• Transferred data volume

• Information on the browser type and version used

• Operating system

Temporary storage of this data is necessary for the duration of the website visit to ensure the proper delivery of the site. Further storage in log files is carried out to maintain the functionality and security of our IT systems. This constitutes our legitimate interest in processing the data.

b. On what legal basis is this data processed?
The data is processed based on Article 6(1)(f) GDPR.

The website is hosted by:
Wix.com Ltd.
Nemal St. 40
6350671 Tel Aviv
Israel

The personal data of users is controlled by Wix.com Ltd. in Israel, which the European Commission has deemed to provide an adequate level of protection for the personal data of EU residents.

The hosting provider receives the aforementioned data as a processor.

c. How long is the data stored?
The data is deleted as soon as it is no longer necessary for the purposes for which it was collected. For website provision, this typically occurs when the session ends.

Log files are stored exclusively for administrators for [up to 24 hours] and then only indirectly via backup reconstructions for a maximum of four weeks before final deletion.

3. Data Subject Rights

a. Right to Access
You can request information about the personal data we process concerning you under Article 15 GDPR.

b. Right to Object
You have the right to object to data processing for specific reasons (see Section II).

c. Right to Rectification
If your personal data is inaccurate or incomplete, you can request rectification or completion under Article 16 GDPR.

d. Right to Erasure
You can request the deletion of your personal data under Article 17 GDPR.

e. Right to Restriction of Processing
You have the right to request a restriction of processing under Article 18 GDPR.

f. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you can lodge a complaint with a data protection supervisory authority under Article 77(1) GDPR. This includes the authority responsible for the controller:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
https://www.ldi.nrw.de/kontakt/ihre-beschwerde

g. Right to Data Portability
If the requirements of Article 20(1) GDPR are met, you have the right to receive your personal data that we process based on your consent or in performance of a contract in a structured, commonly used, and machine-readable format or to have this data transferred to a third party.

The collection of data for website provision and log file storage is necessary for website operation and does not rely on consent under Article 6(1)(a) GDPR or a contract under Article 6(1)(b) GDPR. It is justified under Article 6(1)(f) GDPR, meaning the requirements of Article 20(1) GDPR do not apply.

II. Right to Object Under Article 21(1) GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR.

The controller will no longer process your personal data unless compelling legitimate grounds for the processing are demonstrated that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.

The collection of data for website provision and the storage of log files are essential for website operation.