1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Permanomix — Annika Mahmood & Ole Lebendig GbR
Arndtstraße 24, 24943 Flensburg, Germany
Phone: +49 179 9039219
E-mail: hello@permanomix.com
2. Overview of Data Processing
The following overview summarises the types of data processed and the purposes for which they are processed, as well as the data subjects concerned.
Types of data processed
- Usage data (e.g. visited pages, interest in content, access times)
- Meta and communication data (e.g. device information, IP addresses)
- Contact data (e.g. e-mail, phone numbers) — only when voluntarily provided
Data subjects
Visitors and users of the website; prospective and current clients who contact us.
Purposes of processing
- Providing the website and its contents
- Answering contact requests and communicating with users
- Security measures and technical operation
3. Legal Bases
The following provides an overview of the legal bases of the GDPR on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile.
| Art. 6 (1)(a) GDPR | Consent — the data subject has given consent to the processing of their personal data for one or more specific purposes. |
| Art. 6 (1)(b) GDPR | Performance of a contract — processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract. |
| Art. 6 (1)(c) GDPR | Compliance with a legal obligation — processing is necessary for compliance with a legal obligation to which the controller is subject. |
| Art. 6 (1)(f) GDPR | Legitimate interests — processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. |
4. Website Hosting
This website is hosted on servers provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit our website, your browser automatically transmits data to our web server. This includes:
- IP address of the requesting device
- Date and time of the request
- Content of the request (specific page)
- Access status / HTTP status code
- Amount of data transferred
- Referring URL (previously visited page)
- Browser, operating system, and language setting
This data is temporarily stored in server log files for technical and security reasons. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in the secure and technically error-free provision of the website). Log data is deleted after 7 days at the latest. We have concluded a data processing agreement (DPA) with Hetzner in accordance with Art. 28 GDPR.
Hetzner’s privacy policy: hetzner.com/legal/privacy-policy
5. Contact
When you contact us by e-mail or phone, the data you provide (name, e-mail address, telephone number, message content) will be stored by us in order to process your enquiry and in the event of follow-up questions. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures) or Art. 6 (1)(f) GDPR (legitimate interest in processing enquiries). We will delete the data once it is no longer necessary, taking into account any statutory retention obligations.
We do not pass on the data you provide when contacting us to third parties without your consent.
6. Web Fonts (Self-Hosted)
This website uses the typefaces Bricolage Grotesque and Inter. Both fonts are self-hosted: the font files are stored directly on our web server (Hetzner Web Hosting, Germany) and are served from the same domain as this website (permanomix.com). No font files are loaded from any third-party server.
Because the fonts are delivered from our own server, no connection is established to any external service when loading the typefaces. This means no IP address or any other personal data is transmitted to a third party as part of font delivery. No cookies are set and no tracking takes place in this context.
There is therefore no data processing by a third party in connection with web fonts that would require a legal basis under the GDPR.
7. Images (Self-Hosted)
All images used on this website are self-hosted: the image files are stored directly on our web server (Hetzner Web Hosting, Germany) and are served from the same domain as this website (permanomix.com). No images are loaded from any third-party server or image service.
Because all images are delivered from our own server, no connection is established to any external service when displaying images. No IP address or any other personal data is transmitted to a third party in this context. There is therefore no data processing by a third party in connection with images that would require a legal basis under the GDPR.
8. Web Analytics (Matomo)
This website uses Matomo (formerly Piwik), an open-source web analytics platform. Matomo is self-hosted on our own server at analytics.permanomix.com (Hetzner Web Hosting, Germany). No data is transmitted to any third party.
Matomo is configured in cookieless mode — no cookies are set and no persistent identifier is stored in your browser. The following data is collected per page visit in anonymised form:
- Anonymised IP address (last two octets masked, e.g. 192.168.0.0)
- Page URL and page title
- Referring URL (the page you came from)
- Browser type and operating system (general, not fingerprinted)
- Country and approximate region (derived from the anonymised IP)
- Date and time of visit
Because no cookies are set and IP addresses are anonymised before storage, no personal data within the meaning of the GDPR is processed. No consent is therefore required for this analytics setup. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in understanding website usage to improve our services).
You may opt out of analytics tracking at any time by enabling the Do Not Track (DNT) signal in your browser settings — Matomo respects this signal and will not record your visit.
9. Cookies and Local Storage
This website uses localStorage (a browser storage technology) to save your language preference (English or German). No personal data is stored; only the key pmx-lang with the value en or de is written. No cookies requiring consent are set. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in providing a consistent user experience).
You can clear localStorage at any time via your browser settings (usually under “Clear browsing data” → “Cookies and site data”).
10. Your Rights
Under the GDPR you have the following rights with respect to your personal data:
- Right of access (Art. 15 GDPR) — you have the right to obtain confirmation as to whether personal data concerning you is being processed.
- Right to rectification (Art. 16 GDPR) — you have the right to have inaccurate personal data corrected.
- Right to erasure (“right to be forgotten”) (Art. 17 GDPR) — you have the right to have your personal data deleted, subject to legal exceptions.
- Right to restriction of processing (Art. 18 GDPR) — you have the right to request the restriction of processing of your personal data in certain circumstances.
- Right to data portability (Art. 20 GDPR) — you have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR) — you have the right to object at any time to the processing of your personal data based on Art. 6 (1)(e) or (f) GDPR.
- Right to withdraw consent (Art. 7 (3) GDPR) — you have the right to withdraw your consent at any time with future effect.
To exercise any of these rights, please contact us at: hello@permanomix.com.
11. Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority — in particular in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement — if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority responsible for Permanomix is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98, 24103 Kiel, Germany
www.datenschutzzentrum.de
12. Data Security
We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties in accordance with Art. 32 GDPR. Our security measures are continuously improved in line with technological developments.
This website is transmitted via HTTPS (Transport Layer Security). This means that data transferred between your browser and our server is encrypted and cannot be read by third parties.
13. Links to Third-Party Websites
Our website contains links to external websites (e.g. dontmimimi.me, EU ODR platform). We have no influence over the data protection practices of these external sites. We recommend that you review the privacy policies of those websites directly.
14. Updates to this Privacy Policy
We reserve the right to update this privacy policy at any time to reflect changes in legal requirements or changes in our services. The current version is always available on this page. We recommend that you review this policy regularly.
Note: If you have any questions about data protection that are not answered here, please contact us directly at hello@permanomix.com.