Privacy Policy

1. Controller

Maurice Grabowski
Am Tauberbach 13
56321 Brey
Germany
E-Mail:
Instagram: www.instagram.com/maurice.grw/
LinkedIn: www.linkedin.com/in/maurice-grabowski

2. Data processing principles

We process personal data only on the basis of applicable privacy laws, especially the GDPR where applicable, and limit processing to what is necessary for operating the website, security and responding to enquiries.

3. Contact form

When you use the contact form, we process the data you submit so we can respond to your enquiry.

  • Name
  • Email address
  • Message content

The enquiry is forwarded to the responsible email mailbox. For technical security and short-term delivery backup, an encrypted copy is stored in Cloudflare D1. Name, email address and message are encrypted by the application before they are stored.

The encrypted copy is automatically deleted after no more than 90 days unless statutory retention obligations apply. Rate-limit entries used for abuse prevention are stored as hashes, not in plain text, and are normally deleted after 48 hours.

Cloudflare D1 is a database service provided by Cloudflare and is covered by the Cloudflare processing arrangements and privacy safeguards described in Section 4.

For users in the EU/EEA, the legal basis is Art. 6(1)(b) GDPR for handling your enquiry and Art. 6(1)(f) GDPR for secure operation, spam prevention and delivery reliability.

4. Hosting, Cloudflare and server logs

This website is delivered through Cloudflare. Cloudflare processes technical connection data necessary for delivery, security, performance and abuse prevention. This may include IP address, date and time of access, browser and device information, requested resources and security events.

For EU/EEA users, this processing is based on Art. 6(1)(f) GDPR. Cloudflare provides data processing terms and privacy safeguards for its services.

5. Email delivery and Zoho mailbox

Contact enquiries are forwarded to the mailbox contact@grabowski.vip. The mailbox is operated through Zoho. Resend is used as the transactional email provider when email delivery is actively configured. Processing is limited to delivering and handling the enquiry.

6. Fonts

This website uses locally hosted fonts. Google Fonts or comparable external font servers are not loaded.

7. Cookies and local storage

This website does not use tracking cookies, analytics, marketing cookies or profiling technologies. A cookie banner is therefore not used because no optional consent-based cookies or comparable technologies are currently active.

  • The selected language is stored as a technical-functional preference, especially through the grabowski-site-language cookie and complementary local browser storage. This is used only to remember the requested language version.
  • Cloudflare may use technically necessary security cookies or comparable mechanisms, for example for bot protection, attack detection, abuse prevention or security checks. These are not used for advertising or analytics.
  • For EU/EEA users, the legal basis is Art. 6(1)(f) GDPR and, where access to terminal equipment is involved, Section 25(2) TDDDG because storage or access is necessary for security, delivery or the language function requested by the user.
  • If optional analytics, marketing or tracking technologies are introduced in the future, they will be activated only after prior consent.

8. Social media links

This website only links to external Instagram and LinkedIn profiles. No social media plugins, feeds, iframes, pixels or scripts from these providers are loaded automatically. No data is sent to these platforms merely by visiting this website. If you click a link, you leave this website and the privacy terms of the respective provider apply.

9. International transfers

Some service providers may be located outside the European Union, including in the United States. Where required, appropriate safeguards such as adequacy decisions, standard contractual clauses or comparable privacy mechanisms are used.

10. Your rights

Subject to applicable law, you may have the following rights:

  • Access
  • Correction
  • Deletion
  • Restriction of processing
  • Data portability
  • Objection
  • Complaint with a competent privacy authority

The competent privacy supervisory authority for Rhineland-Palatinate is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate (LfDI Rheinland-Pfalz): www.datenschutz.rlp.de

11. Sponsorship enquiries

Sponsorship enquiries are used only to assess a possible collaboration. If no collaboration is established, the contact form buffer is deleted after no more than 90 days; further communication is retained only as long as needed to handle the enquiry or comply with legal obligations.

12. Status of this Privacy Policy

This Privacy Policy is current as of April 2026.