Privacy Policy
1. Controller
EdgeVend UG (limited liability company under German law)
Lilienstraße 1, 20095 Hamburg, Germany
Represented by the Managing Director: Marcus Paul
E-mail: info@edge-vend.com
German versions are available at /privacy.html and /imprint.html.
2. Hosting / Provision of the Website
This website is a static site served via GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When accessing the site, technical data (e.g., IP address, date/time, URL, referrer, user agent) may be processed in server logs to ensure secure operation.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure technical provision). Data may be transferred to the USA; GitHub relies on appropriate safeguards (e.g., Standard Contractual Clauses).
3. Cookies & Consent Management
We use an opt-in consent banner based on CookieConsent (Osano, delivered via jsDelivr CDN). Non-essential services (e.g., Google Analytics) are only loaded after you give consent.
| Tool | Purpose | Data | Retention | Legal basis |
|---|---|---|---|---|
| CookieConsent (Osano) | Store & evaluate consent status | Consent status, timestamp, technical meta data | Until revocation / deletion by you | Art. 6(1)(c) GDPR in conjunction with local ePrivacy law; Art. 6(1)(a) GDPR |
4. Web Analytics with Google Analytics 4
After your consent (via the banner), we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for audience measurement.
- Data types: page views, interactions/events, pseudonymous user IDs, device data (browser, OS), approximate location data (region/country); IP anonymization is enabled.
- Legal basis: Art. 6(1)(a) GDPR (consent).
- Transfers: Data may be transferred to third countries (in particular the USA); Google relies on appropriate safeguards (e.g., Standard Contractual Clauses).
- Retention: Event data up to 14 months (property setting).
- Opt-out: You can withdraw consent anytime via the cookie settings (button above) or use the Google Analytics Opt-out Browser Add-on.
5. Contact
When contacting us by e-mail, we process your data to handle the request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual inquiries) or Art. 6(1)(f) GDPR (legitimate interest in proper communication). Data is deleted once your request has been fully processed and no statutory retention obligations apply.
6. External Content & Links
We may link to external content (e.g., LinkedIn). When clicking external links you leave our website. The respective providers are responsible for processing on the destination pages.
7. Recipients & Processors
- GitHub, Inc. – Hosting (GitHub Pages)
- Osano CookieConsent – Consent banner (via jsDelivr CDN)
- Google Ireland Limited / Google LLC – Web analytics (GA4)
Where required, we conclude data processing agreements pursuant to Art. 28 GDPR with service providers processing personal data on our behalf.
8. Legal Bases, Purposes, Retention
We process personal data under the GDPR – in particular based on consent (Art. 6(1)(a)), contract/pre-contract (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f)). Personal data is deleted when the purpose no longer applies and no statutory retention obligations prevent deletion.
9. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
- Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
To exercise your rights, please e-mail info@edge-vend.com.
10. Right to Lodge a Complaint
You may lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR). For Hamburg, see the Hamburg Commissioner for Data Protection and Freedom of Information.
11. Data Security
We take appropriate technical and organisational measures to protect your data against loss, destruction, unauthorised access, alteration or disclosure. Please note that internet data transmission may have security gaps.
12. Third-Country Transfers
When using GitHub Pages, jsDelivr (CDN) and Google services, data may be transferred to third countries (in particular the USA). Such transfers are based on appropriate safeguards (e.g., EU Standard Contractual Clauses) or as permitted under Art. 46 et seq. GDPR.
13. No Automated Decision-Making
No solely automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.
Last updated: