Privacy

/ 01Privacy Policy

Protecting personal data matters to me. Below I provide information pursuant to Art. 13 GDPR on the nature, scope and purpose of the processing of personal data when you visit this website. (GDPR = General Data Protection Regulation / German: DSGVO.)

1. Controller

The controller within the meaning of Art. 4 No. 7 GDPR is the operator of this website, reachable by email at ShamiroQDH@gmail.com or on Discord (shamiroqdh). No data-protection officer has been appointed, as the conditions of Art. 37 GDPR are not met.

2. Competent supervisory authority

You have the right to lodge a complaint with the supervisory authority responsible for me (Art. 77 GDPR):

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI)
Häßlerstraße 8, 99096 Erfurt, Germany
Postal address: Postfach 90 04 55, 99107 Erfurt
Phone: +49 361 57-3112900
Email: poststelle@datenschutz.thueringen.de
Web: www.tlfdi.de

3. Hosting and server log files

When this website is accessed, the hosting provider automatically collects and stores information in so-called server log files. These are:

• IP address of the requesting device
• date and time of access
• the file / URL requested and the amount of data transferred
• notification of whether the request was successful (status code)
• referrer URL (the previously visited page)
• the browser used, its version and the operating system

The processing is based on Art. 6 (1) (f) GDPR. The legitimate interest lies in the technically error-free delivery, the stability and the security of the website (defence against attacks). The log files are stored for a short period (usually a few weeks) and then deleted.

This website is hosted by the site operator's hosting provider, which acts as a processor pursuant to Art. 28 GDPR and processes the above log data solely on the operator's behalf. Where a third-party hosting provider is used, an order-processing agreement under Art. 28 GDPR is in place.

4. Embedded third-party services

When this website loads, content is retrieved from external providers. Your IP address is technically necessarily transmitted to the respective provider so that the content can be delivered to your browser. The legal basis is Art. 6 (1) (f) GDPR (interest in an appealing, functional presentation).

• Google Fonts (Google Ireland Ltd. / Google LLC, USA) — fonts are loaded from fonts.googleapis.com and fonts.gstatic.com.
• Cloudflare cdnjs (Cloudflare, Inc., USA) — the JavaScript library three.js is loaded from cdnjs.cloudflare.com.
• mc-heads.net — Minecraft avatars/heads are loaded from this third party and retrieved when you enter a name (see point 5).

A transfer to the USA may take place. Google LLC and Cloudflare, Inc. are self-certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023, Art. 45 GDPR), so an adequate level of data protection is recognised for these transfers.

5. Minecraft name lookup (skin preview)

This website offers an optional feature that lets you enter a Minecraft username (IGN) to display the associated skin or head. When you enter a name, it is transmitted to this website's server and the associated skin is loaded from mc-heads.net. For functionality and abuse prevention, the lookup is logged with a timestamp (the name entered, the action, the skin address, the time).

The legal basis is Art. 6 (1) (f) GDPR (provision and improvement of the feature). Entering a name is voluntary; if no name is entered, no such processing takes place. The log data is deleted once it is no longer required for the stated purpose.

6. Local storage in the browser (localStorage)

For functionality, this website stores some information locally in your browser (localStorage). These are not cookies; no transmission to the server and no tracking takes place:

• mc_logged_in — the display name you last entered, so it can be shown again on your next visit.
• ign_history — the names you last looked up (history for the skin preview).

This storage is strictly necessary to provide the feature you have expressly requested (§ 25 (2) No. 2 TDDDG). Therefore no consent (cookie banner) is required. You can delete this data at any time via your browser settings.

7. Contacting me

If you contact me by email or Discord, your details (e.g. name, email address, message content) are processed in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR insofar as the request is aimed at concluding or performing a contract (e.g. a project enquiry), otherwise Art. 6 (1) (f) GDPR (interest in answering). The data is deleted once your request has been fully dealt with and no statutory retention obligations apply.

8. Your rights as a data subject

You have the following rights regarding your personal data vis-à-vis the controller:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR), in particular for processing based on Art. 6 (1) (f) GDPR
• right to lodge a complaint with a supervisory authority (Art. 77 GDPR, see point 2)

9. Withdrawal of consent

Where processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected. Currently no processing is carried out on the basis of consent (Art. 6 (1) (a) GDPR).

10. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.