Privacy policy

Controller

Adrian Sangeorgean, BurJuman Business Tower, Sheikh Khalifa Bin Zayed Street, Al Mankhool, Dubai, United Arab Emirates. Email: djdeepunit@gmail.com

What we collect

Through the form, required: name, email address, phone, event venue, preferred date, event type, what you need (DJ/sound/lights), budget and number of guests. Optional: up to two alternative dates and your message.

Technically and automatically: the form used and the time of sending, both included in the enquiry email; your IP address, used only to protect the form and not included in the enquiry email; and the address of the page the request was sent from, including any advertising parameters in it (for example gclid or utm). Your browser transmits this address with the request; nothing is stored in your browser.

To protect the form, the server keeps a short-lived counter per IP address (rate limiting: a shortened hash of the IP address, for IPv6 of its /64 network, with the times of the requests in the last hour). Requests from names or email addresses on a spam block list are normally not delivered; name, email address and IP address are then recorded in a protected log so that repeated spam can be recognised. If this log cannot be written, the request is delivered after all, marked as suspected spam in the subject line. If sending the email fails, the key details of the request (name, email address, phone, date, event type and venue) are kept in a protected log so that the request is not lost.

Server log files

When you open this website, the hosting provider automatically records access data in log files: IP address, date and time, the requested page, the referring page, the browser identifier and the amount of data transferred. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR). The log files are deleted after 30 days at the latest.

Audience measurement without cookies

To know how many people visit this site, each page view sends an anonymous notice to the site's own server: the page viewed, its language, the device type (mobile, tablet or desktop), the referring site if there is one (for example google.com) and any campaign parameter. No cookie is set and nothing is stored in your browser; your IP address and browser identifier are not kept. This data is used only for visitor statistics, is not passed on to anyone and is deleted after 13 months (Art. 6(1)(f) GDPR).

Purposes

We process your data for three purposes:

• to answer your enquiry and, where applicable, to prepare the booking (form details, email address), including a protected copy of the request if sending the email fails;
• to protect the form against misuse (IP address, rate limiting, spam block list);
• to see through which channel, for example an advertisement, the enquiry reached us (page address with advertising parameters).

Your data is not used to advertise to you and is not passed on for advertising purposes.

Legal basis

Answering the enquiry: Art. 6(1)(b) GDPR (pre-contractual steps at your request). Protection against misuse and the channel evaluation: Art. 6(1)(f) GDPR (legitimate interest in a form that works without abuse and in knowing which channels enquiries come from). The controller is established in Germany, so the GDPR applies.

Recipients

The hosting provider of this website (Hetzner Online GmbH, Germany) and the provider of the mailbox that receives enquiries (Google, Gmail), each only to the extent technically necessary. Google may also process data outside the EU, for example in the USA (EU-U.S. Data Privacy Framework). To make sure no enquiry gets lost, for example in the spam folder, a monitoring program run by the controller on a server rented from Hetzner Online GmbH (Germany) reads the enquiries in this mailbox, checks the sent messages for a reply, keeps the sender's email address and the subject line (which contains the name) for no more than 30 days, and sends reminders to another mailbox of the controller, also hosted by Hetzner. After each submission, the form also sends this server a reference number that contains no personal data. No further disclosure.

Retention

Enquiries are kept for the duration of the correspondence and afterwards in line with statutory retention periods. Rate-limiting entries older than one hour are no longer used; a counter file that has not been written to for an hour is deleted with the next enquiry sent through the form. Entries in the spam block log and in the log of failed sending that are older than 30 days are deleted with the next enquiry sent through the form; in addition, a log that reaches 256 KB replaces its previous copy. In addition, a daily server job deletes counter files older than two hours and logs that have not been written to for 30 days. You may request deletion at any time.

Cookies and browser storage

This site sets no cookies and stores nothing in your browser.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. A message to djdeepunit@gmail.com is enough.

You may also lodge a complaint with a supervisory authority. For this controller that is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (datenschutz.hessen.de); you may also contact the authority where you live.

Security

Transmission is TLS-encrypted. Access to enquiries and logs is restricted.

Changes

This policy may be updated if the service or the applicable rules change.