ROOTFORCE / LEGAL INFORMATION
Privacy policy
Clear information about your data, the services involved and your rights under the GDPR.
Last updated:
On this page
At a glance
- No analytics or advertising trackers on this website.
- Fonts and visual assets are served from this website.
- The form opens your email app; you choose when to send.
Who is responsible?
The controller for personal data processed in connection with rootforce.dev is:
Boris Onofreirootforce.devSt.-Ulrich-Straße 3379189 Bad KrozingenGermany[email protected]+49 160 95314627Scope & legal bases
Personal data means information relating to an identified or identifiable person. This notice covers visits to rootforce.dev and enquiries about design, development, advertising and consulting services.
Technical access data is processed to deliver and protect the website, based on our legitimate interests under Article 6(1)(f) GDPR. Enquiries relating to a contract or steps before a contract are processed under Article 6(1)(b). Other enquiries are handled under Article 6(1)(f). Where a legal retention obligation applies, the basis is Article 6(1)(c).
Contacting us is voluntary. Without the information needed to understand and reply to an enquiry, we may be unable to handle it. We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
Hosting & access logs
The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Delivering the website involves processing the IP address, requested resource, time of access, browser and operating-system information, referrer where transmitted, and technical status or error information.
These data are used for reliable delivery, fault diagnosis and protection against attacks. The legal basis is Article 6(1)(f) GDPR. Technical logs are retained only while required for these purposes; data relevant to a specific security incident may be retained until it is resolved.
Cloudflare delivery & security
Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, provides content delivery and security services. Requests pass through its infrastructure, which can process IP addresses, request and device information, access times and security events.
The purpose is to keep the website available, deliver it efficiently and prevent abuse. The legal basis is Article 6(1)(f) GDPR. Information about international processing is provided below.
Contact form, email & telephone
The form asks for a project name and a description of your idea. Entries are processed in your browser. The website does not submit them to a form backend, EmailJS or a CAPTCHA service.
When you select “Send request”, the entries are passed to your chosen email app through a mailto link with the recipient prefilled. You send the message from that app. Your email provider’s processing also applies.
If you contact us by email or telephone, we process the contact details, message contents and communication metadata needed to handle your enquiry and any follow-up. The legal bases are Article 6(1)(b) GDPR for contractual enquiries and Article 6(1)(f) for other correspondence.
Email service: Gmail
Our contact mailbox uses Gmail. For EEA users, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Email correspondence and its metadata are processed through this service; processing outside the EEA is possible. Google’s privacy information explains its handling of these data.
Fonts & visual effects
Fonts, images and other visual assets are served from the same website. Visiting the site does not load fonts from Google Fonts or send font requests to Google.
The decorative cursor effect processes pointer positions temporarily in browser memory. These positions are not transmitted to our server, stored as interaction histories or used to build profiles.
Cookies & browser storage
The website itself does not set analytics, advertising or language-preference cookies and does not use localStorage to remember the selected language. The language is part of the page address.
Cloudflare may use cookies or similar identifiers for the security functions that are enabled, for example to verify a successful security challenge. Where these are strictly necessary to provide the requested service, access to the device is based on § 25(2)(2) TDDDG; personal-data processing is based on Article 6(1)(f) GDPR. The applicable identifiers and lifetimes depend on the security function, as described in Cloudflare’s documentation.
Recipients & international transfers
Data are disclosed only where needed to provide the website, handle correspondence, fulfil legal duties or establish, exercise or defend legal claims. Recipients can include the hosting, security and email providers named above. Processing on our behalf is subject to Article 28 GDPR where applicable.
Cloudflare and Google may process data outside the EEA. Their published transfer information describes safeguards, including adequacy decisions for certified recipients under the EU–US Data Privacy Framework and standard contractual clauses where applicable. Details and the relevant safeguards are available through the provider links.
Retention & connection security
Enquiry data are kept until the matter is resolved and no further processing is necessary. A longer period can apply where correspondence forms part of business or tax records, or is needed for legal claims. Data kept solely for such purposes are not used for unrelated purposes. They are deleted once the applicable retention reason no longer applies.
Technical log retention is governed by the operational and security purposes described above. Any service-specific cookie lifetimes are described in the linked provider information.
An HTTPS connection encrypts data in transit between your browser and the website. Email is processed separately by the email services involved and is not automatically end-to-end encrypted.
Your data protection rights
Subject to the legal conditions, you can exercise the following rights by contacting the controller listed above:
- Access to your personal data (Article 15 GDPR).
- Rectification of inaccurate data (Article 16).
- Erasure and restriction of processing (Articles 17 and 18).
- Data portability where applicable (Article 20).
- Withdrawal of consent at any time, if processing relies on consent, without affecting earlier lawful processing (Article 7(3)).
Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21. We will then stop that processing unless there are overriding compelling legitimate grounds or it is needed for legal claims. You may object to processing for direct marketing at any time.
Complaints & supervisory authority
Under Article 77 GDPR, you can complain to a supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. The authority for Baden-Württemberg can be reached at:
State Commissioner for Data Protection and Freedom of Information Baden-WürttembergHeilbronner Straße 3570191 StuttgartGermanyChanges to this notice
This notice is updated when the website, the services used or the applicable legal requirements change. The date at the top identifies this version.