Privacy Policy
1. Privacy at a glance
We keep data collection to the minimum needed to run this website. FeatherSticks uses no cookies, no analytics or tracking tools and no advertising. Fonts are hosted on our own server, so no connection to Google Fonts is made. YouTube videos are only loaded after you actively click on them.
2. Controller
The controller responsible for data processing on this website is:
[PLACEHOLDER: Full name]
[PLACEHOLDER: Street and house number]
[PLACEHOLDER: Postcode and city, country]
Email: [PLACEHOLDER: email address]
3. Hosting and server log files
This website is hosted by [PLACEHOLDER: hosting provider, address]. When you visit the site, the server automatically stores information in log files that your browser transmits: IP address, date and time of the request, requested page, referrer URL, browser type and version, and operating system.
This data is required to deliver the website securely and to detect and defend against attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). Log files are deleted after [PLACEHOLDER: e.g. 7–14] days at the latest, unless further retention is needed to investigate a specific security incident. We have concluded a data processing agreement with our hosting provider in accordance with Art. 28 GDPR.
4. Cookies and local storage
We do not set any cookies. Our interactive tools (such as the Kit Builder) process your selections only to generate the result and do not create user profiles. Your selections are sent as part of the page address and may therefore appear in the server log files described above.
The Kit Builder stores which items you have ticked off in your browser's local storage, so your checklist is still there when you come back. This data stays on your device, is never transmitted to us and can be deleted at any time via your browser settings. The storage is strictly necessary to provide the checklist function you requested (§ 25 (2) no. 2 TDDDG).
5. YouTube videos (two-click solution)
Some pages contain videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By default, only a preview image stored on our server is shown and no connection to YouTube is established. Only when you click on the video is it loaded from youtube-nocookie.com (extended privacy mode). At that point, your IP address and technical data are transmitted to Google, and Google may set cookies or similar technologies and transfer data to the USA.
The legal basis is your consent by clicking, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future by reloading the page. Google LLC is certified under the EU–US Data Privacy Framework. Further information: policies.google.com/privacy.
6. Contact by email
If you contact us by email, we process your email address and the content of your message to answer your enquiry. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR if your enquiry relates to a contract. We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.
7. Your rights
You have the right to:
- access your personal data (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interests (Art. 21 GDPR),
- withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence or place of work.
8. SSL/TLS encryption
This website uses TLS encryption for security reasons. You can recognise an encrypted connection by https:// in your browser's address bar.
9. Changes
We may update this privacy policy when our website or legal requirements change. The current version always applies. Status: [PLACEHOLDER: month and year].