Privacy Policy | Shann Singh

Overview

This policy describes which personal data is processed when you visit shannsingh.com, for what purpose, and what rights you have. In short:

The website is hosted by Netlify. This creates technically necessary server log files.
Fonts and images are stored on the site’s own server. No Google Fonts are loaded from Google servers.
Google Analytics 4 is only loaded if you explicitly consent.
The TikTok Pixel is only loaded if you explicitly consent to the “Marketing” category.
There is no contact form and no newsletter. You can get in touch by email, phone or WhatsApp.

Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Shann Singh, Worms, Germany

Email: contact@shannsingh.com
Phone: +49 1517 0083727

Hosting and server log files

This website is hosted by Netlify, Inc., San Francisco, USA, and delivered through its content delivery network. When you open a page, Netlify automatically processes data that your browser transmits. This includes:

IP address
date and time of access
requested page or file
referrer URL (the page visited before)
browser type, browser version and operating system
HTTP status code and amount of data transferred

Purpose and legal basis of hosting

This data is needed to deliver the website, keep it stable and secure, and detect misuse. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is the secure and reliable provision of the website. The data is not combined with other data sources.

Netlify processes the data on my behalf under a data processing agreement pursuant to Art. 28 GDPR. Data may be transferred to the USA in this context. Netlify is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision pursuant to Art. 45 GDPR.

Fonts and images

The fonts of this website (Fraunces and Figtree) and the icons of the apps shown are stored locally on this website’s server. When pages load, no connection is made to Google Fonts, Google Play or any other third party.

Storing your consent choice

On your first visit, a notice asks whether you agree to web analysis. Your choice is stored in your browser’s local storage (localStorage) under the key “ss_consent_v1” with the value “granted” or “denied”. The entry remains until you change it or clear the site data in your browser.

This entry is not transmitted to me or to third parties. It is strictly necessary so that your choice is respected and the notice does not appear again on every page view. The legal basis for accessing your device is § 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), and for the processing Art. 6(1)(f) GDPR.

Web analysis with Google Analytics 4

If you consent, this website uses Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without your consent, the Google script is not loaded and no analytics cookies are set.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future. Use the “Cookie settings” button in the footer of every page or right here and choose “Essential only”. Google Analytics is then disabled and existing “_ga” cookies of this website are deleted. The lawfulness of processing carried out before the withdrawal remains unaffected.

You can change your statistics and marketing choice here at any time:

Data collected by Google Analytics

After you consent, your browser loads the script from www.googletagmanager.com. Google Analytics then records how the website is used, for example:

pages viewed, page titles and time of the visit
clicks on contact options such as WhatsApp, phone or email
information about device, browser, screen size and language
approximate location (country or region) and the page visited before

Cookies, IP addresses and retention

Google Analytics sets the cookies “_ga” and “_ga_<ID>” to distinguish returning visits. These cookies expire after up to 2 years. Google Analytics 4 does not store IP addresses. For visits from the EU, the IP address is only used in shortened form to determine the approximate location and is then discarded.

Advertising features are disabled in the integration (ad_storage, ad_user_data and ad_personalization are set to “denied”). I only use the data to understand which content is helpful. The event data stored in Google Analytics is deleted automatically after 14 months.

Data processing and transfer to the USA

Google processes the data as a processor on the basis of the “Google Ads Data Processing Terms”.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. You can find more information at https://policies.google.com/privacy (opens in new tab)

Marketing with the TikTok Pixel

If you consent to the “Marketing” category, this website uses the TikTok Pixel. The provider for users in the EEA is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Without your consent, the TikTok script is not loaded and no TikTok cookies are set.

The purpose is to measure whether ads on TikTok lead to visits and contact requests. Page views and clicks on WhatsApp, phone, email and key buttons are recorded, each with URL, time, IP address, browser information and a TikTok click ID if you arrive via a TikTok ad.

In addition, this website’s server sends the same events to TikTok via the TikTok Events API so that they arrive reliably and are not counted twice. This also only happens with your consent.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Joint processing with TikTok is governed by an agreement under Art. 26 GDPR (TikTok Business Joint Controller Addendum). Data may be transferred to third countries such as Singapore or the USA; TikTok relies on EU Standard Contractual Clauses for this. Cookies such as “_ttp” expire after up to 13 months.

You can withdraw your consent at any time via “Cookie settings” in the footer. The pixel is then disabled and TikTok cookies of this website are deleted. More information: https://www.tiktok.com/legal/privacy-policy-eea (opens in new tab)

Contact by email, phone or WhatsApp

This website has no contact form and offers no newsletter. If you contact me by email, phone or WhatsApp, I process the information you provide (for example name, email address, phone number and the content of your message) to handle your request.

The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR. My legitimate interest is answering your request. I delete the data once the request has been dealt with and no statutory retention obligations apply, for example under commercial and tax law in the case of an order.

The WhatsApp links on this website open wa.me or the WhatsApp app. A connection to WhatsApp is only established when you click such a link. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

If you message me via WhatsApp, WhatsApp processes, among other things, your phone number and communication metadata under its own responsibility. Data may be transferred to Meta Platforms, Inc. in the USA. You can find information at https://www.whatsapp.com/legal/privacy-policy-eea (opens in new tab)

If you prefer not to use WhatsApp, you can also reach me by email or phone.

Links to external services

This website links to Google Play (Google Ireland Limited), LinkedIn (LinkedIn Ireland Unlimited Company), GitHub (GitHub, Inc., USA) and to websites of client projects. These services are not embedded in the pages. Data is only transferred when you click a link and open the external site. From then on, the privacy policy of the respective provider applies.

Your rights

You have the following rights with regard to your personal data:

access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
objection to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)
withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

Exercising your rights

An informal message to contact@shannsingh.com is enough to exercise your rights. If your data is rectified, erased or restricted, I will inform the recipients to whom your data has been disclosed, where possible (Art. 19 GDPR).

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR. The authority responsible for me is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate), Hintere Bleiche 34, 55116 Mainz, Germany, https://www.datenschutz.rlp.de (opens in new tab)

SSL/TLS encryption

This website is delivered exclusively over an SSL/TLS-encrypted connection. You can recognise this by “https://” in your browser’s address bar. This means that transmitted data cannot easily be read by third parties.

No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Changes to this policy

I update this privacy policy when the website or the legal situation changes. The version published here applies.