Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Alexander Lutsyuk – Arnika Plau
Dr. Alban Str. 24
19395 Plau am See
Germany

Phone: +49 179 3949637
Email: info@arnika-web.com

No data protection officer has been appointed, as there is no statutory obligation to do so.

2. General information on data processing

(1) We process personal data only to the extent necessary to provide this website and our services, or where a legal basis exists. Legal bases include in particular:

  • Art. 6 (1)(a) GDPR – consent
  • Art. 6 (1)(b) GDPR – performance of a contract or pre-contractual measures
  • Art. 6 (1)(c) GDPR – legal obligation (e.g. tax retention duties)
  • Art. 6 (1)(f) GDPR – legitimate interest (e.g. secure and stable operation of the website)

(2) Personal data are not transferred to third countries outside the EU/EEA.

(3) Personal data are deleted as soon as the purpose of storage ceases to apply and no statutory retention obligations prevent deletion.

3. Hosting and server log files

(1) This website is hosted by: Contabo GmbH, Welfenstraße 22, 81541 Munich, Germany. A data-processing agreement under Art. 28 GDPR has been concluded with the hosting provider. The servers are located in Germany / the European Union.

(2) When this website is accessed, the hosting provider automatically collects and stores information in so-called server log files:

  • IP address of the requesting device
  • date and time of access
  • page or file accessed
  • referrer URL (previously visited page)
  • browser type and version used
  • operating system used

(3) Processing is based on Art. 6 (1)(f) GDPR. Our legitimate interest is the technically error-free, secure and stable operation of the website and defence against attacks. Log data are deleted or anonymised after 14 days, unless a security-related evaluation (e.g. in case of an attack) requires longer retention.

4. Contact (email and contact form)

(1) When you contact us by email or via a contact form, we process the data you provide (name, email address, phone number if any, and the content of your message) solely to handle your enquiry.

(2) The legal basis is Art. 6 (1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures; otherwise Art. 6 (1)(f) GDPR (legitimate interest in answering enquiries).

(3) Data are deleted once the enquiry has been finally handled and no statutory retention obligations (e.g. for business correspondence under § 257 HGB / § 147 AO) apply.

5. Web analytics with Matomo (cookieless)

(1) This website uses the open-source software Matomo for statistical analysis of visitor access. Matomo is operated on our own server in Germany (self-hosting). The data collected are not shared with third parties.

(2) Matomo is configured without cookies on this website: no cookies are set on your device.

(3) Your IP address is anonymised before storage (masking of the last two octets, e.g. 192.168.x.x). It is not possible for us to identify you personally. There is no cross-site tracking and no fingerprinting.

(4) The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest is anonymised statistical analysis of usage to optimise our offering. Anonymising the IP address and not using cookies protects your confidentiality interests.

(5) If your browser supports and has enabled “Do Not Track”, your visits are not recorded by Matomo.

6. Blog comments

(1) If you leave comments on this website, we process, in addition to your comment, the data you provide (name or pseudonym, email address), the time of creation and your IP address.

(2) The IP address is stored for our protection in case third parties’ rights are infringed by your comment (e.g. unlawful content). Legal basis: Art. 6 (1)(f) GDPR.

(3) Your email address is not published. Comments remain stored until the commented content is deleted or statutory deletion duties apply.

(4) If you consent when commenting to storage of your name and email address in a cookie (opt-in), this is solely for convenience so you need not re-enter your details for a further comment. Legal basis: Art. 6 (1)(a) GDPR; you may delete this cookie at any time via your browser settings.

7. Recipients of data and processors

Personal data are disclosed only to the following categories of recipients where necessary for operating the website and performing contracts:

  • hosting provider (processing under Art. 28 GDPR)
  • email service provider (processing under Art. 28 GDPR)
  • tax advisors where applicable (due to legal obligations)

Further disclosure occurs only if we are legally obliged or you have consented.

8. Your rights as a data subject

You have the following rights regarding your personal data:

  • access (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing based on Art. 6 (1)(f) GDPR (Art. 21 GDPR)
  • withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, an informal notice to the contact details above is sufficient.

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data-protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The competent authority is:

The State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Vorpommern
Werderstraße 74a
19055 Schwerin
Website: www.datenschutz-mv.de

10. SSL/TLS encryption

This website uses SSL/TLS encryption for security and to protect transmission of confidential content. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

11. Data security

We take technical and organisational security measures under Art. 32 GDPR to protect your data against manipulation, loss, destruction and unauthorised access. Our security measures are continuously improved in line with technological developments.

12. Currency of this privacy policy

This privacy policy is currently valid and dated August 2026. Further development of our website or changes in legal requirements may require an update.

Last updated: August 2026