Data Privacy

Last updated: August 4, 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Digitalbaze, Inc.
c/o Blue Media Marketing, Inc.
5755 Oberlin Dr
San Diego, CA 92121
USA

Email: datenschutz@digitalbaze.com
Website: https://alexandrajonas.de

Authorized representative: Markus Berg

2. Representative in the European Union

Representative pursuant to Art. 27 of the General Data Protection Regulation:

Digitalbaze, Inc.
c/o Blue Media Marketing, Inc.
5755 Oberlin Dr
San Diego, CA 92121
USA

The representative serves as a point of contact for data subjects and European data protection supervisory authorities regarding questions concerning the processing of personal data by Digitalbaze, Inc.

3. General Information on Data Processing

We process personal data only to the extent necessary to provide and securely operate this website, respond to inquiries, or comply with legal obligations.

Personal data means any information relating to an identified or identifiable individual. This includes, for example, a name, email address, IP address, and the content of a message.

Processing is carried out in particular on the basis of Art. 6(1)(b), (c), and (f) GDPR. Where consent is obtained in individual cases, processing is carried out on the basis of Art. 6(1)(a) GDPR.

4. Server Log Files

When this website is accessed, the web server automatically collects technical access data. This may include, in particular:

  • IP address of the accessing device
  • date and time of access
  • page or file accessed
  • amount of data transferred
  • HTTP status code
  • previously visited page, if transmitted by the browser
  • browser type and browser version
  • operating system used
  • name of the Internet service provider

The processing of this data is necessary to technically provide the website, ensure its stability and security, detect errors, and prevent attacks or unauthorized access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted operation of the website.

Server log files are generally deleted after 90 days. They may be stored for a longer period if this is necessary to investigate a security incident, prevent an attack, or preserve evidence.

5. WordPress and Elementor

This website uses the WordPress content management system and the Elementor website builder.

WordPress and Elementor are operated on the hosting provider’s server. The software is used to create, display, and manage the website.

Under the current configuration, the use of WordPress and Elementor alone does not generate analytics, advertising, or tracking data about visitors to this website. No user accounts, public comments, or membership areas are provided.

Administrators can log in to the non-public administration area of WordPress. Technically necessary cookies are set during this process. These cookies generally only affect individuals authorized to administer the website.

If additional WordPress plugins, external content, analytics tools, or other services are used in the future, this Privacy Policy will be updated accordingly.

6. Cookies and Similar Technologies

This website does not use cookies for advertising, analytics, or tracking purposes.

Where technically necessary cookies or comparable storage technologies are used, they serve exclusively to securely and properly provide a function of the website that has been expressly requested.

The storage of technically necessary information or access to information already stored is carried out on the basis of Section 25(2) No. 2 TDDDG. Subsequent processing of personal data is carried out on the basis of Art. 6(1)(f) GDPR.

Our legitimate interest is the secure and functional operation of the website.

7. Contact Form

A contact form is provided on this website. If you use the contact form, we process the information you enter into the form fields. This may include, in particular:

  • first name, last name
  • email address
  • content of the message
  • date and time of submission
  • technical connection data, in particular the IP address, where collected by the form or server

Required fields are marked accordingly in the contact form. Providing an email address is necessary so that we can respond to your inquiry.

The data is processed for the purpose of handling and responding to your inquiry.

If your inquiry relates to entering into or performing a contract, Art. 6(1)(b) GDPR is the legal basis. For general inquiries, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the appropriate handling of incoming inquiries and communication with visitors, authors, business partners, and other interested parties.

The data submitted through the contact form is forwarded to our business email address.

The form messages are additionally stored in the WordPress administration area.

or:

The form messages are not permanently stored in the WordPress administration area.

8. Retention Period for Contact Inquiries

Data from contact forms and email inquiries is deleted once the respective inquiry has been fully processed and no further storage is required.

Data may be stored for a longer period if:

  • the inquiry results in a contractual relationship,
  • statutory retention obligations apply,
  • the data is required for the establishment, exercise, or defense of legal claims,
  • further storage is required for other legal reasons.

The data will be deleted after the applicable retention or limitation periods have expired.

9. Recipients of Personal Data

Personal data is only disclosed where permitted by law or where necessary to provide the website and process inquiries.

Possible recipients include, in particular:

* the hosting provider,
* the email provider,
* technical service providers for maintenance and IT security,
* authorities, courts, or other public bodies where there is a legal obligation,
* lawyers, tax advisors, or other professional advisors subject to confidentiality obligations, where necessary.

Service providers receive only the data they require to perform their respective tasks. Where necessary, they are bound by data processing agreements and appropriate confidentiality obligations.

10. Processing of Data in the United States

Digitalbaze, Inc. is based in the United States of America. Personal data may be processed by Digitalbaze, Inc. or authorized employees in the United States or accessed from there.

For data protection purposes, the United States is a third country outside the European Union and the European Economic Area.

The transfer of personal data is carried out on the basis of the following appropriate safeguard pursuant to Art. 46 GDPR.

11. Encrypted Transmission

This website uses SSL or TLS encryption. This protects data transmitted between your browser and our server against unauthorized access by third parties.

You can identify an encrypted connection, in particular, by the fact that the website address begins with „https://“.

12. Obligation to Provide Data

You are generally not required to provide us with personal data.

However, without a valid email address, we may not be able to respond to an inquiry submitted through the contact form or by email.

Where data is required for entering into or performing a contract, failure to provide such data may result in the relevant contract not being entered into or performed.

13. No Automated Decision-Making

We do not use solely automated decision-making processes, including profiling, within the meaning of Art. 22 GDPR.

14. Rights of Data Subjects

Where the statutory requirements are met, you have the following rights:

  • access to the personal data we process pursuant to Art. 15 GDPR
  • rectification of inaccurate or incomplete data pursuant to Art. 16 GDPR
  • erasure of personal data pursuant to Art. 17 GDPR
  • restriction of processing pursuant to Art. 18 GDPR
  • data portability pursuant to Art. 20 GDPR
  • objection to certain processing pursuant to Art. 21 GDPR
  • withdrawal of consent previously given pursuant to Art. 7(3) GDPR
  • lodging a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

To exercise your rights, you may contact us using the address provided above.

15. Right to Object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

Following an objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. Further processing is also permitted where it is necessary for the establishment, exercise, or defense of legal claims.

16. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

In particular, you may contact a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

An overview of European data protection supervisory authorities is available at: https://www.edpb.europa.eu/about-edpb/our-members_en

17. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, and other unlawful processing.

The security measures are regularly reviewed and adjusted where necessary in accordance with the state of the art, the scope of processing, and the existing risks.

18. Changes to this Privacy Policy

We may amend this Privacy Policy if the website, the services used, the data processing activities, or the legal requirements change.

The version published on this website at the relevant time applies.

© Alexandra L. Jonas | Digitalbaze.com | Imprint | Data Privacy