Privacy Policy

Data Controller:

Fabio Schasse de Araujo - Graphik- & Webdesign

Großbeerenstraße 82, 10963 Berlin

Data Protection Officer: Fabio Schasse de Araujo

Introduction

Protecting your personal data is important to me. In this privacy policy, I inform you about the processing of personal data on my website and through my Telegram bot, which I offer as a sole proprietor.

1. Data Collected and Purposes of Processing

1.1. Website

Technologies: Webflow (hosting), Google Analytics, Plausible Analytics, Google Fonts.

Personal Data Collected:

When visiting the website: IP address, location data (if collected by analytics tools), user behavior (e.g., pages visited, time spent).
Through the contact form: Name, email address, and message content.

Purpose of Processing:

Google Analytics & Plausible Analytics: These tools are used to analyze user behavior on the website and understand how users find the website and how often they return. Google Analytics sets cookies only after your consent. Plausible Analytics also tracks IP addresses, but in anonymized form.
Contact Form: The data submitted via the contact form will only be used for communication purposes.

Legal Basis:

The processing of your data is based on Art. 6(1)(a) GDPR (consent) for tracking tools and cookies, and on Art. 6(1)(b) GDPR (performance of a contract) for responding to your inquiries via the contact form.

1.2. Telegram Bot

Technologies: Next.js (development), Vercel (hosting), Stripe (payment processing), Supabase (database), OpenAI (for bot interactions).

Personal Data Collected:

Through the bot, message content, a profile summary, and the user’s first name are transmitted to OpenAI. No additional contact information, such as email or full name, is collected.
For payments via Stripe, payment data is collected.

Purpose of Processing:

Bot Interactions: The data transmitted to OpenAI is used to provide the functionality of the Telegram bot.
Payments via Stripe: Payment processing is handled by Stripe, which collects the necessary payment information to complete the transaction.

Legal Basis:

The processing of your data is based on Art. 6(1)(b) GDPR (performance of a contract) for bot interactions and payment processing.

2. Use of Cookies and Tracking Tools

Cookies: Our website uses cookies to ensure functionality and improve user experience. Tracking cookies from Google Analytics are only set after your consent. You can give or revoke your consent via our cookie banner at any time.

Tracking Tools:

Google Analytics: This service is used to analyze user behavior on the website. Your IP address is anonymized before it is transmitted to Google. A transfer of data to the USA cannot be ruled out. Standard contractual clauses (SCCs) are used as appropriate safeguards to secure the data transfer to third countries.
Plausible Analytics: This service also collects IP addresses but does so in an anonymized form. No personal cookies are set.

3. Data Sharing with Third Parties

OpenAI: For interactions with the Telegram bot, first name, message content, and profile information are transmitted to OpenAI. You can find OpenAI’s privacy policy here.

Stripe: For payment processing, personal data is transmitted to Stripe. Stripe may transfer data to third countries (e.g., the USA). Data transfers are based on Standard Contractual Clauses (SCCs) according to Art. 46 GDPR. You can find Stripe’s privacy policy here.

Vercel & Supabase: These services operate through European servers (AWS), and personal data is stored there. In the event of data transfer to the USA, SCCs are also used.

4. Data Retention

Contact Form Data: This data will be stored for the duration of the communication and will not be actively used afterward, but will be kept until you request its deletion.
Bot Interactions: This data is also retained until the user requests deletion. Since no user accounts are created, there is no automatic deletion unless requested by the user. The data is not actively used or shared during this time, but kept for potential future interactions.
Analytics Data (Google Analytics, Plausible): This data is anonymized and stored according to the policies of the respective services.

5. User Rights

Under the GDPR, you have the following rights:

Access to your data and how it is processed (Art. 15 GDPR).
Correction of inaccurate data (Art. 16 GDPR).
Erasure of your personal data (Art. 17 GDPR).
Restriction of processing (Art. 18 GDPR).
Data portability (Art. 20 GDPR).
Objection to data processing (Art. 21 GDPR).

To exercise any of these rights, please contact me at hello@fabioschasse.com.

6. Changes to the Privacy Policy

This privacy policy is reviewed regularly and updated as necessary. Please check this page periodically to stay informed.

7. Consent by Using the Website and Bot

By using this website and the Telegram bot, you agree to the processing of your data as described in this privacy policy.

‍