1. General information

This privacy policy explains how personal data is processed when you use this website. Personal data is any information that can be used to personally identify you.

This website is operated in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.


2. Data controller

C. Misselwitz & C. Wheeler GbR
Kupferhammer 39
60439 Frankfurt am Main
Germany

Email: hi@letsrocc.com
Website: https://staging.letsrocc.com

Responsible person pursuant to data protection law:
Claudia Misselwitz, same address as above.


3. Hosting and server log files

This website is hosted by an external hosting provider. When you visit the website, the hosting provider automatically collects and stores information in server log files, which your browser transmits automatically.

This data includes:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Host name of the accessing device
  • Date and time of the server request
  • IP address

This data is processed to ensure the secure and stable operation of the website and to protect against misuse.

Hosting provider

Rocket.net, LLC
United States

The hosting provider processes personal data on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).


4. Cookies and consent management

This website uses cookies.

Technically necessary cookies are required for the operation of the website and are set automatically.

Cookies for analytics and tracking purposes are used only after you have given your explicit consent via the cookie consent banner.

You can withdraw or change your consent at any time via the cookie settings.

Legal basis:

  • Art. 6(1)(a) GDPR (consent)
  • § 25 TTDSG

5. Google Tag Manager

This website uses Google Tag Manager, a service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Tag Manager itself does not store personal data. It is used solely to manage and deploy tracking tools. Data processing only occurs when tracking services are activated and only after consent has been given.

Legal basis: Art. 6(1)(a) GDPR (consent).


6. Google Analytics 4 (GA4)

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.

Google Analytics uses cookies and similar technologies to analyse how visitors use the website. The information generated about your use of this website may be transmitted to servers operated by Google LLC in the United States.

IP anonymisation is enabled. According to Google, IP addresses are truncated before storage.

Google Analytics is activated only after consent has been given via the cookie banner.

Legal basis: Art. 6(1)(a) GDPR (consent).

Data transfers to the United States are based on appropriate safeguards, including standard contractual clauses pursuant to Art. 46 GDPR.


7. Google Search Console

This website uses Google Search Console, a service provided by Google Ireland Limited, to monitor and improve the technical performance and visibility of the website in Google Search.

Google Search Console does not use cookies and does not process personal data of website visitors directly. The data is aggregated and site-level only.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website optimisation and security).


8. Contact via email or forms

If you contact us by email or via a contact form, your enquiry and the resulting personal data will be stored for the purpose of processing your request and any follow-up communication.

This data will not be passed on to third parties without your consent.

Legal basis: Art. 6(1)(b) GDPR (contractual or pre-contractual communication).


9. Email communication and delivery

Email delivery from this website is handled via Postmark, a transactional email service provided by:

Postmark, Inc.
548 Market Street, PMB 98174
San Francisco, CA 94104
USA

Postmark processes email metadata and content solely for the purpose of reliable email delivery. A data processing agreement pursuant to Art. 28 GDPR is in place.

Incoming and outgoing email communication is received and managed using Microsoft 365, provided by:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland

Microsoft processes personal data as part of email communication and storage in accordance with the GDPR and on the basis of a data processing agreement.

Legal basis for email processing:
Art. 6(1)(b) GDPR (contractual or pre-contractual communication).

Data transfers to the United States (Postmark) are based on appropriate safeguards, including standard contractual clauses pursuant to Art. 46 GDPR.


10. Data retention

Personal data is stored only for as long as necessary to fulfil the respective purpose or as required by statutory retention obligations.


11. Your rights

You have the right to:

  • Access your personal data
  • Rectification or deletion
  • Restriction of processing
  • Objection to processing
  • Data portability
  • Lodge a complaint with a supervisory authority

The competent supervisory authority is the data protection authority of the federal state in which the data controller is based.


12. SSL / TLS encryption

This website uses SSL or TLS encryption to protect the transmission of confidential content and personal data.


13. Changes to this privacy policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or changes to this website.