Legal

Privacy Policy

Last updated: March 2026

This privacy policy explains what personal data is collected when you visit this website, for what purpose, and what rights you have. Your data is treated confidentially and processed exclusively in accordance with legal data protection regulations (GDPR, BDSG).

1. Controller

The controller responsible for data processing on this website is:

Daniel De Abreu Rodriguez
Schule Loheland 2
36093 Künzell, Germany
Email: danieldeabreu1985@gmail.com
Phone: +49 151 700 200 29

2. General information on data processing

I take the protection of your personal data seriously and treat your personal data confidentially and in accordance with legal data protection regulations (GDPR, BDSG) and this privacy policy.

Note on third-country transfers: This website uses tools from companies based in third countries that may not provide an adequate level of data protection (in particular the USA). For the USA, no data protection level comparable to the EU is generally guaranteed. Data transfer is only permitted if the recipient holds a certification under the EU-US Data Privacy Framework (DPF) or has appropriate additional safeguards in place (e.g. EU Standard Contractual Clauses, SCCs). Detailed information on third-party providers and transfer mechanisms can be found in the relevant sections of this privacy policy.

3. Hosting (Netlify)

This website is hosted by Netlify, a service of Netlify, Inc. (2325 3rd Street, Suite 296, San Francisco, CA 94107, USA). When visiting the website, information is automatically stored in server log files:

IP address
Date and time of access
Page/file accessed
Browser type and operating system
Referrer URL

Provider: Netlify, Inc., San Francisco, USA
SSL/TLS: Data transmission is encrypted (https://) – indicated by the padlock symbol in your browser.
Privacy Policy: netlify.com/privacy
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in technical provision of the website)

4. Google Fonts

This website uses Google Fonts. When loading the page, fonts are loaded from Google servers, whereby your IP address may be transmitted.

Provider: Google Ireland Limited
Privacy Policy: policies.google.com/privacy
Legal basis: Art. 6 para. 1 lit. f GDPR

5. Calendly (Appointment booking)

For appointment booking, I use Calendly. When you click on the booking button, you will be redirected to Calendly. There, the data you enter (name, email, possibly message) will be processed by Calendly.

Provider: Calendly LLC, Atlanta, USA
Privacy Policy: calendly.com/privacy
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

6. Contact form (Web3Forms)

For the contact form on this website, I use Web3Forms. When you fill out the contact form, your entered data (name, email address, phone number, message) will be processed via Web3Forms and sent to me by email.

Provider: Web3Forms
Privacy Policy: web3forms.com/privacy
Legal basis: Art. 6 para. 1 lit. a GDPR (consent through active use of the contact form)

7. Contact via email or phone

When you contact me by email or phone, your transmitted data (name, email address, message content, phone number) will be stored for the purpose of processing your inquiry.

I will not share this data without your consent. Legal basis is Art. 6 para. 1 lit. b GDPR.

8. Use of AI tools (Anthropic Claude)

To support administrative tasks (e.g. drafting emails, text creation, internal research), I use AI-powered tools provided by Anthropic. Only general, non-personal content is processed. Client data (names, personal details) is not entered into these systems.

Provider: Anthropic Ireland, Limited (EU) / Anthropic, PBC, San Francisco, USA
Privacy Policy: anthropic.com/privacy
Data Processing Agreement: In place (Data Processing Addendum)
Third-country transfer: USA, secured via EU Standard Contractual Clauses (SCCs)
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient business operations)

9. WhatsApp (contact option)

This website offers a WhatsApp button. When you click it, the WhatsApp app or WhatsApp Web opens with a pre-filled message. Communication then takes place directly via WhatsApp.

In this process, data (including your phone number, device data) is processed by WhatsApp Ireland Limited. WhatsApp is a service of Meta.

Provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy Policy: whatsapp.com/legal/privacy-policy
Legal basis: Art. 6 para. 1 lit. a GDPR (consent through active use of the button)

10. Your rights

You have the following rights regarding your personal data:

Information – you can ask at any time what data I have about you
Rectification – incorrect data can be corrected
Erasure – you can request the deletion of your data
Restriction – you can request restriction of processing
Objection – you can object to the processing
Data portability – you can receive your data in a machine-readable format

To exercise these rights, simply contact me: danieldeabreu1985@gmail.com

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The responsible authority for Hesse is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany
datenschutz.hessen.de