HAS TO BE HERE – but I’ll do it the Floo way
By the way: this is the only part of this website I let AI translate for me. Thanks, ChatGPT — I really couldn’t be bothered with all that legal stuff. 😉
What happens when?
When you’re surfing around a website like this, you leave traces – whether you want to or not.
And here I have to explain explicitly what I do with those traces.
Best thing: just take your shoes off at the door and don’t touch anything. 😉
1. My landlord on the internet
So,
a) this website lives at IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
When you visit floo.eu, some technically necessary data is generated there. This includes, for example, the time of access, your browser and browser version, operating system, type of device, the page you came from and your IP address in anonymised form.
My very friendly landlord needs all that, among other things, to make sure my little home here stays safe, works properly and is always accessible to you. Nice of him – although I do pay him for it.
IONOS says that this web-hosting data is stored for eight weeks. The legal basis is my legitimate interest in running a safe and functioning website under Art. 6(1)(f) GDPR.
And then
b) my landlord also has a caretaker called WebAnalytics.
IONOS WebAnalytics technically counts and analyses what’s going on around the website. According to IONOS, it doesn’t use cookies. The transmitted IP address is anonymised straight away. The data is used for statistical analysis and for technically improving my website. Well, if the guy has nothing better to do.
2. My mailroom
If you send me a “letter” through the contact form, I’ll obviously read what you’ve written to me. Otherwise that would be a bit silly.
For that to work, your name, your email address and whatever you write to me have to be technically processed so that your message can actually arrive in my inbox as an email.
If it’s about an engagement, a booking or some other possible collaboration, the processing is necessary for taking steps before entering into a contract under Art. 6(1)(b) GDPR.
If you’re simply writing to me – maybe even a love letter – the processing is based on my legitimate interest in receiving your message and being able to answer it, Art. 6(1)(f) GDPR.
Amazing what people can regulate by law …
I keep your message for as long as I need it for our exchange. If it turns into a business matter and legal retention periods apply, I may have to keep it for longer.
And if you say: “Hey Floo, please delete EVERYTHING I’ve ever written to you!” – okay, I’ll do that as far as no legal retention duty says otherwise. Would be a shame, though!
3. Sound, pictures, Audio.com and YouTube
Photos and texts live in my “home at my landlord’s”, meaning on my own server. The song list is read from my publicly shared collection at Audio.com, a service operated by MuseCY SM Ltd., Cyprus.
The list itself can be displayed without opening an Audio.com player. Only when you actually start a song does your browser request the audio file from Audio.com or its delivery infrastructure. From that point, the provider’s privacy rules apply as well.
YouTube videos, on the other hand, I try to leave in their own home at first – over in YouTube Land.
Only when you ring the bell – meaning: click on the video – does the YouTube player load and a connection to YouTube get established.
For that, I use the so-called Privacy-Enhanced Mode via youtube-nocookie.com wherever technically possible. That doesn’t make YouTube completely data-free, of course. Once you’ve rung their bell, the privacy rules of YouTube and Google apply as well. Fair enough – it’s their house.
4. Your data, your rights
Since they’re your traces, you’ve obviously got rights too.
You can ask me, in particular, what personal data I process about you. You can have incorrect data corrected and – “where the legal requirements are met” (blimey, that sounds serious!) – you can ask for your data to be deleted or for its processing to be restricted.
And if I’m processing your data under Art. 6(1)(f) GDPR, you also have the right to object under the legal conditions. These rights arise in particular from Articles 15 to 18 and 21 GDPR.
Blah blah, rhubarb.
If you think I’m doing something silly with your data from a data-protection point of view, you can complain to a data-protection supervisory authority. For Mecklenburg-Western Pomerania, that’s in particular the State Commissioner for Data Protection and Freedom of Information Mecklenburg-Western Pomerania in Schwerin.
If he’s nice, we’ll all go and have a coffee together.
Anything else? Nope. Now I really can’t think of anything else.