Privacy policy

1. Overview

This policy explains what data is processed when you visit the Blazar Core website, why, on which legal basis, how long it is kept, and what rights you have under the EU General Data Protection Regulation (GDPR).

The short version: visiting the site creates only the technical server logs that any website produces. It sets no cookies, runs no analytics and loads no fonts or scripts from third parties. The exceptions are a YouTube video you start yourself (section 4) and the messages you send through the support forms (section 5). Buying Blazar Core and downloading the demo happen on the store, under the store’s privacy policy.

2. Controller

Alex Pfeffer
Buchwaldstieg 10
22149 Hamburg
Germany
Email: alex@alexpfeffer.com

There is no legal obligation for us to appoint a data protection officer.

3. Hosting and server logs

The site is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you open a page, your browser sends a request to Netlify’s servers, which process the technical data needed to deliver the page and keep the service secure: your IP address, the date and time of the request, the requested URL, the referring page, your browser type and version, and your operating system. Netlify keeps this data in server logs for a limited period for security and error analysis and then deletes it. We do not combine it with other data or use it to identify visitors.

Legal basis: our legitimate interest in providing a stable and secure website (Art. 6 (1) (f) GDPR). Netlify processes this data on our behalf (Art. 28 GDPR). Netlify participates in the EU-US Data Privacy Framework; where data is transferred to the USA, the transfer is based on that framework and on the EU standard contractual clauses. Netlify’s privacy policy: netlify.com/privacy

4. Fonts, scripts and videos

The fonts (Unbounded and Barlow) are served from our own hosting; your browser does not connect to a font provider. The site loads no external scripts, tracking pixels or social media plugins.

The home page shows a feature tour video from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Until you press play, the page shows a preview image from our own hosting and makes no connection to YouTube. When you press play, the video loads from youtube-nocookie.com, YouTube’s privacy-enhanced mode. Your browser then sends YouTube your IP address and technical data about your device, and YouTube may store cookies or similar data on your device while the video plays. Google may process this data in the USA; Google participates in the EU-US Data Privacy Framework. Legal basis: your consent, given by pressing play (Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG). Google’s privacy policy: policies.google.com/privacy

5. Bug reports, feature requests and email

If you send a bug report or a feature request, we process your email address, your name if given, the details you enter (summary, description, steps, Blazar Core version, computer, edition and the like) and a file you attach, to handle and answer your message and to improve Blazar Core. The form is handled by Netlify Forms, a service of the host named in section 3: Netlify stores the message for us and sends it to our inbox by email. To keep automated spam out, Netlify checks submissions with Akismet, a service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Sending a message does not subscribe you to anything. The same applies when you write to us by email.

Legal basis: our legitimate interest in answering enquiries and fixing and improving our software (Art. 6 (1) (f) GDPR), or pre-contractual and contractual steps where your message concerns a purchase (Art. 6 (1) (b) GDPR). We delete a report once it has been dealt with and is no longer needed to track the issue, at the latest after three years, unless we must keep business correspondence under commercial or tax law. Data may be processed in the USA; Netlify participates in the EU-US Data Privacy Framework (section 3). Akismet’s privacy policy: automattic.com/privacy

6. Cookies and browser storage

The site does not set cookies, so no consent banner is shown. A YouTube video you start yourself may store cookies or similar data from YouTube on your device (section 4).

7. Your rights

Under the GDPR you have the right to access the personal data we hold about you (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), to object to processing based on our legitimate interest (Art. 21), to withdraw any consent with effect for the future (Art. 7 (3)), and to lodge a complaint with a supervisory authority (Art. 77).

To exercise these rights, email alex@alexpfeffer.com. The supervisory authority responsible for us is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany, datenschutz-hamburg.de. You may also contact the authority of your own place of residence.

Right to object. Where we process your data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time for reasons arising from your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

The imprint (Impressum) is on the store: store.alexpfeffer.com/imprint.