Privacy policy

1. Controller

The controller responsible for data processing on this website is:
SandBay
Owner: Robin Henniges
Quartiersweg 8
10829 Berlin
Germany
Email: contact@sandbay.de

2. The essentials

• We use no cookies, no analytics or tracking tools and no social media plugins. Nothing is stored on your device when you submit a form either.
• Fonts are served from our own server. Visiting the website does not open a connection to Google Fonts.
• We only process personal data when you contact us through a form or by email, and as technically required to run the website.

3. Hosting

This website is served by Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit the website, the host processes technically necessary data in server log files: IP address, date and time of access, the page requested, the amount of data transferred, the referrer URL, and browser and operating system.

This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is providing the website securely and reliably. We have concluded a data processing agreement with Google. We do not analyse the log data ourselves.

A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework. The European Commission's standard contractual clauses also apply.

4. Contact and request forms

When you write to us through a form on this website, we process the details you enter: first and last name, email address and, depending on the form, phone number, company, position, a link to your profile (for example LinkedIn or a website), your professional experience, preferred types of employment, technologies and focus areas, the roles or services you are looking for and your message. We also store the time of the request and the language of the page.

We use these details only to handle your request and, for freelancer and expert profiles, to suggest suitable projects or positions. The legal basis is your consent (Art. 6(1)(a) GDPR) and, where your request concerns a contract, Art. 6(1)(b) GDPR. You can withdraw your consent at any time with effect for the future; an email to contact@sandbay.de is enough.

We only pass your freelancer or expert profile on to a company if we have agreed this with you beforehand in the individual case, for example for a specific project or position. The legal basis is then your consent (Art. 6(1)(a) GDPR). The company then processes the data under its own responsibility. There are no recipients other than those named here and in section 3.

The data is stored in Cloud Firestore, a service of Google Ireland Limited, with servers located in Frankfurt am Main, Germany. When you submit a form, your browser sends the details directly to this service. The data processing agreement and the information on third-country transfers in section 3 apply.

We delete requests that do not lead to an engagement no later than six months after our last contact. If an engagement follows, the statutory retention periods apply to the related business records. We delete freelancer and expert profiles no later than two years after our last contact with you. You can request deletion at any time.

5. Contact by email

When you email us, we process your email address and the content of your message in order to reply. The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

6. Your rights

You have the following rights regarding your personal data at any time:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)
• Lodging a complaint with a data protection supervisory authority (Art. 77 GDPR)

7. Obligation to provide data

Providing your data is voluntary. However, we cannot handle your request without the required details, meaning every field not marked as optional. No automated decision-making or profiling takes place.