
Privacy Policy
1. Controller & Responsibility
Benjamin Brostian
c/o Digital Forge Group
Lauterstrasse 16
12159 Berlin
Email: benjamin@brostian.com
Website: www.brostian.com
As the operator of this website, I am responsible for the collection and processing of personal data in accordance with applicable data protection laws.
2. General Information
I take the protection of personal data seriously.
This Privacy Policy explains how this website collects, uses, stores, and protects personal information.
Personal data is only processed where necessary to provide a functional, secure, and user-friendly website.
3. Data Collection When Visiting the Website
a) Server Log Files
When you access this website, certain technical data is automatically recorded by the website provider, including:
-
IP address
-
Date and time of access
-
Pages viewed
-
Browser type and version
-
Operating system
-
Referrer URL
This data is used solely to ensure the functionality, stability, and security of the website.
It is not combined with other data sources.
Legal basis: legitimate interest under Art. 6(1)(f) GDPR.
4. Contacting Me
If you contact me via email or via a contact form, the data you voluntarily provide (e.g., name, email address, message) will be processed exclusively to handle your inquiry.
Legal basis:
Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest).
5. Cookies and Local Storage
This website may use cookies or similar technologies necessary for technical functionality and security.
Optional cookies (e.g., analytics cookies) are only used if you consent via the cookie banner.
You can adjust your cookie settings at any time.
6. Web Analytics — Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”).
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by these cookies about your use of this website may be transmitted to and stored on Google servers.
IP Anonymization
IP anonymization is activated on this website. This means that your IP address is shortened within the European Union or the European Economic Area before being transmitted to Google.
Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there.
Purpose of Processing
Google Analytics helps me understand how visitors interact with my website in order to improve content, performance, and user experience.
Legal Basis
The legal basis for the use of Google Analytics is your consent under Art. 6(1)(a) GDPR.
Google Analytics is not loaded until you provide consent in the cookie banner.
Data Collected May Include
-
Pages visited
-
Time spent on pages
-
Click behavior
-
Referrer URL
-
Device information
-
Browser type and version
-
Approximate geographic region
Google may also process this data for its own purposes (e.g., product improvements), based on its privacy policy.
Data Retention
Data related to cookies, user identifiers, or advertising identifiers is retained for the period set in your Google Analytics settings (typically 2–14 months).
Data Sharing & Transfers Outside the EU
Google may transfer data to servers in the USA.
Google is subject to the EU–U.S. Data Privacy Framework, meaning transfers may rely on an adequacy decision or on Standard Contractual Clauses (SCCs).
Opt-Out / Withdrawal of Consent
You may withdraw your consent for Google Analytics at any time using the cookie settings on this website.
You can also install the browser add-on to disable Google Analytics tracking:
➡️ https://tools.google.com/dlpage/gaoptout
Further Information
For details, please refer to Google’s privacy policies:
➡️ https://policies.google.com/privacy
➡️ https://policies.google.com/technologies/partner-sites
7. Embedded Third-Party Services
This website may include content or services from third parties, such as:
-
Fonts (Wix or Google Fonts)
-
Video platforms (YouTube, Vimeo)
-
Map services
-
Social media links
-
External scripts or embedded tools
When accessing such content, the third-party provider may receive technical data (e.g., IP address).
Third-party content is only integrated where necessary or where you have consented.
8. Data Sharing
Your data is never sold or shared for marketing purposes.
Data is only shared if:
-
legally required (Art. 6(1)(c) GDPR)
-
needed to fulfill a contract (Art. 6(1)(b) GDPR)
-
or if you have explicitly consented (Art. 6(1)(a) GDPR)
9. Data Storage & Deletion
Personal data is only stored for as long as necessary for the purpose for which it was collected, or as required by law.
Emails and inquiries are deleted periodically.
10. Your Rights as a Data Subject
Under GDPR, you have the right to:
-
Access your stored personal data
-
Rectify inaccurate data
-
Request deletion (“right to be forgotten”)
-
Request restriction of processing
-
Object to processing
-
Data portability
To exercise these rights, contact:
benjamin@brostian.com
11. Withdrawal of Consent
If processing is based on consent, you may withdraw that consent at any time with future effect.
12. Right to Lodge a Complaint
You may lodge a complaint with a data protection supervisory authority if you believe your data is being processed unlawfully.
13. Data Security
I use technical and organizational measures designed to protect personal data against loss, misuse, or unauthorized access.
However, internet-based data transmission may have security vulnerabilities.
14. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect legal requirements or changes to this website.
The current version is always available under www.brostian.com/privacy-policy.
