Privacy Policy

This Privacy Policy explains how Sven Durand ("we," "us," or "our") collects, uses, and discloses information about you when you visit our website www.svendurand.eu (the "Website").

We are committed to protecting your privacy and handling your personal data in a transparent manner, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for the processing of your personal data on this Website is:

Sven Durand G r u e n e r W e g 2 0, 51375, Leverkusen, Germany

E-Mail: sven@svendurand.eu Phone: 0049 1 5 1 2 8 8 3 4 1 5 1

2. Types of Data Collected

We may collect and process the following types of personal data:

• Website Usage Data (collected by Hostinger): When you visit our Website, Hostinger (our hosting provider) automatically collects certain information that your browser sends. This includes:

  • Your IP address

  • Date and time of access

  • Referral URL (the website you visited before ours)

  • Browser type and version

  • Operating system used

  • Amount of data transferred

  • Access status (e.g., file transferred, file not found)

  • This data is used for technical purposes (e.g., to display the website, ensure stability and security of our systems) and to analyze website traffic.

• Booking Information (via Microsoft Booking Page): When you use our Microsoft Booking Page to schedule an appointment, you will provide personal information such as:

  • Your Name

  • Your Email Address

  • Further details you decide to enter in the Notes section

• Voluntary Information: If you choose to contact us directly via email or phone, any information you provide in that communication will be processed.

3. Purposes and Legal Basis for Data Processing

We process your personal data for the following purposes and on the following legal bases:

• To provide and maintain the Website (Website Usage Data):

  • Purpose: Ensuring the functionality, security, and stability of the Website.

  • Legal Basis: Art. 6(1) lit. f GDPR (legitimate interests – our interest in presenting a functional and secure website).

• To enable appointment booking (Booking Information):

  • Purpose: To manage and confirm your appointments scheduled through the Microsoft Booking Page.

  • Legal Basis: Art. 6(1) lit. b GDPR (performance of a contract or steps taken at the request of the data subject prior to entering into a contract).

• To communicate with you:

  • Purpose: To respond to your inquiries or provide requested information.

  • Legal Basis: Art. 6(1) lit. b GDPR (performance of a contract or steps taken at the request of the data subject prior to entering into a contract) or Art. 6(1) lit. f GDPR (legitimate interests – our interest in communicating with users and prospective clients).

4. Data Recipients

Your personal data may be disclosed to the following categories of recipients:

• Hostinger (Hosting Provider): Our Website is hosted by Hostinger. Hostinger processes data on our behalf to provide hosting services. You can find Hostinger's Privacy Policy here: [Link to Hostinger's Privacy Policy, e.g., https://www.hostinger.com/legal/privacy-policy]

• Microsoft (Microsoft Booking Page): The booking functionality is provided by Microsoft. When you use the booking page, your data is processed by Microsoft as a data processor on our behalf. Please refer to Microsoft's Privacy Statement for more information: [Link to Microsoft's Privacy Statement, e.g., https://privacy.microsoft.com/en-us/privacystatement]

• Social Media Platforms (LinkedIn, Xing): Our Website contains links to our profiles on LinkedIn and Xing. When you click on these links, you are redirected to the respective platforms. We are not responsible for the data processing activities on these platforms. Please review their respective privacy policies:

  • LinkedIn Privacy Policy: [Link to LinkedIn Privacy Policy, e.g., https://www.linkedin.com/legal/privacy-policy]

  • Xing Privacy Policy: [Link to Xing Privacy Policy, e.g., https://privacy.xing.com/en/privacy-policy]

• Other Third Parties: We do not share your personal data with other third parties unless required by law or necessary for the provision of our services, or with your explicit consent.

5. International Data Transfers

It is possible that personal data collected through the Website may be transferred to and processed in countries outside the European Union (EU) or European Economic Area (EEA), especially if our service providers (like Hostinger or Microsoft) use servers located outside the EU/EEA.

When such transfers occur, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR, such as:

• The use of Standard Contractual Clauses (SCCs) approved by the European Commission.

• Ensuring the recipient country has been deemed to provide an adequate level of data protection by the European Commission.

6. Data Retention

We store your personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Website Usage Data (Server Logs): Typically retained for a short period (e.g., 7-30 days) for security and analytical purposes.

• Booking Information: Retained for the duration necessary to manage your appointment and potentially for a reasonable period thereafter for administrative or legal purposes.

• Communication Data: Retained as long as necessary to address your inquiry and for potential follow-up.

7. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you.

• Right to rectification (Art. 16 GDPR): You have the right to request that we correct any inaccurate or incomplete personal data.

• Right to erasure ("right to be forgotten") (Art. 17 GDPR): You have the right to request the deletion of your personal data under certain conditions.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal data under certain conditions.

• Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

• Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data under certain conditions, particularly if based on legitimate interests.

• Right to withdraw consent (Art. 7(3) GDPR): If our processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of your personal data infringes GDPR. The supervisory authority for [Your Region/Germany] is: [Name and contact details of your local German data protection authority, e.g., "Der Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)", Kavalleriestr. 2-4, 40213 Düsseldorf, Germany].

To exercise any of these rights, please contact us using the details provided in Section 1.

8. Cookies and Similar Technologies

Our Website may use cookies and similar technologies to enhance user experience and for functional purposes. Cookies are small text files placed on your device by websites that you visit.

• Strictly Necessary Cookies: These cookies are essential for the operation of our Website (e.g., for security or enabling basic functions). They do not require your consent.

You can generally manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, please note that blocking strictly necessary cookies may affect the functionality of the Website.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. This includes using SSL/TLS encryption for data transmission on our Website.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page with a new "Last updated" date. We encourage you to review this Privacy Policy periodically.

Last updated: July 1st, 2025