Privacy policy

This policy explains what personal data is processed when you visit codeglow.eu or write to us, why, for how long, and what you can do about it. It is written to be read, not to be scrolled past.

Who is responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is Codeglow, the operator of codeglow.eu. The fastest way to reach us about anything in this policy is by email:

Controller

Codeglow, operator of codeglow.eu

Email

hello@codeglow.eu

The short version

• This site sets no tracking cookies and runs no advertising or social-media scripts.
• Anonymous page counts are recorded only if you allow them in the privacy bar. You can change your choice at any time under “Privacy choices” in the footer.
• If you write to us, we use what you send only to answer you.

Visiting the site

The site is a set of static pages delivered through a content delivery network. When your browser requests a page, the network technically processes your IP address, the date and time, the page requested, the referring page and your browser’s user agent. This is necessary to deliver the page and to keep the service secure and available.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating a secure website. Storage: connection logs are kept by the hosting provider for a short period for security purposes and then deleted or anonymised. We do not keep server logs of our own.

Your privacy choice

Your answer in the privacy bar is stored in your browser’s local storage under the key cg-consent. It contains only your choice and a timestamp, stays on your device and is not sent to us. Legal basis: Art. 6(1)(c) and (f) GDPR, remembering and being able to demonstrate your choice.

Analytics, only with your permission

If you choose “Allow”, page views are counted in an aggregated, anonymous way: which pages are opened and roughly how often. The count is made by the privacy-preserving analytics of our hosting provider. No cookies are set, no profiles are built, no data is shared with advertising networks, and individual visitors are not identified. If you choose “Decline”, or make no choice, nothing is counted. Legal basis: Art. 6(1)(a) GDPR, your consent, which you can withdraw at any time with effect for the future.

Contact form and email

When you use the contact form or write to us by email, we process your name, your email address and the content of your message, plus anything else you choose to tell us. We use this data solely to answer your enquiry and, if it leads to a project, to prepare and perform the contract.

The form on this site hands your message to your own email application; it is sent from your mailbox to ours and passes through no third-party form service. The form includes a hidden field that must stay empty. It exists only to filter automated spam and is not stored.

Legal basis: Art. 6(1)(b) GDPR for enquiries aimed at a contract; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering messages. Storage: enquiries that do not lead to a project are deleted once the conversation has ended and no statutory retention period applies; business correspondence is kept for the retention periods required by commercial and tax law.

Who processes data for us

We keep the number of providers small. Each acts on our instructions under a data processing agreement (Art. 28 GDPR):

• Hosting and content delivery: Cloudflare (Cloudflare, Inc., San Francisco, USA, and its European subsidiaries), which serves the pages and, only with your permission, produces the aggregated page counts described above.
• Email: the mail provider that hosts our mailbox, which stores the messages you send us.

Where a provider processes data outside the European Economic Area, this happens on the basis of an adequacy decision of the European Commission or its standard contractual clauses, with additional safeguards where required.

Your rights

Under the GDPR you have the right to:

• obtain access to the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16) and have data erased (Art. 17);
• restrict processing (Art. 18) and receive your data in a portable format (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw a consent you have given at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).

To exercise any of these rights, write to hello@codeglow.eu. We answer within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.

Security

The site is served exclusively over an encrypted connection (TLS). Access to enquiries is limited to the people who need it to answer you.

Changes to this policy

We update this policy when the site or the law changes. The version published on this page is always the current one.