Privacy Policy

1) Introduction and Contact Details of the Data Controller

1.1 We appreciate your visit to our website and thank you for your interest. Below, we inform you about the processing of personal data when using our website. Personal data refers to any data with which you can be personally identified.

1.2 The controller responsible for data processing on this website is:

Haro GbR

Friedhofstr. 21

71577 Großerlach

Deutschland

+49 176 30400873

hello@haro.team

1.3 A Data Protection Officer has not been appointed, as there is no legal obligation.

For data protection inquiries, please use the email address provided above.

2) Hosting & Provision of the Website

This website is provided as part of a cloud-based SaaS service via the Battery-Pages platform. The provider of the cloud services is:

Haro GbR Daniel Hauck & Kathrin Roth, Friedhofstr. 21, 71577 Großerlach, Germany.

As part of the use of our platform, data collected by this website is stored and processed on the servers of Haro GbR Daniel Hauck & Kathrin Roth. This includes website content, form submissions, and technical access logs.

Processing occurs in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in the secure and stable provision of our service, as well as according to Art. 6 (1) lit. b GDPR for the fulfillment of the contract with the customer.

We have concluded a Data Processing Agreement pursuant to Art. 28 GDPR with Haro GbR to ensure the protection of processed personal data.

3) Data Collection When Visiting the Website

3.1 If you use our website for informational purposes only (without registration or otherwise providing information), we only collect the data transmitted by your browser (so-called 'server log files'). This includes:

Web pages visited
Date and time of access
Amount of data sent
Source/referrer from which you accessed the page
Browser and operating system used
IP address (possibly anonymized)

The processing is carried out pursuant to Art. 6 (1) lit. f GDPR based on our legitimate interest in improving website stability and functionality. Data is neither passed on nor used for other purposes. The retention period is 30 days, after which the data is automatically deleted.

3.2 Our website uses SSL/TLS encryption for the protection of your data. You can recognize an encrypted connection by the character string 'https://' and the lock symbol in your browser line. This ensures that data you submit is protected against unauthorized access.

4) Contact

If you contact us via the contact form or email, the details you provide are stored for processing your inquiry and potential follow-up questions.

Data categories: Name, email address, phone number (if provided), message text
Legal basis: Art. 6 (1) lit. b GDPR (contract performance or pre-contractual inquiries), Art. 6 (1) lit. f GDPR (legitimate interest in communication)
Retention: Contact requests are deleted after processing, at the latest after 6 months, unless statutory retention obligations apply.

5) Cookies

5.1 Our website exclusively uses technically necessary cookies, which are essential for the website's operation and security. These cookies do not store personal data and thus require no consent.

Technically necessary cookies:

Session cookies: Temporary cookies automatically deleted upon browser closure.
Security cookies: To protect against unauthorized access.

Since no optional or tracking cookies are used, no cookie banner is required.

6) Embedded Content & External Services

6.1 Vimeo (privacy-friendly embedding)

This website may embed videos from Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. We use a privacy-friendly embedding method ('Do Not Track' mode; dnt=1), ensuring Vimeo does not set tracking cookies.

When loading a video, however, a connection to Vimeo's servers is established. Technically necessary data, such as your IP address and browser information, might be transmitted. Vimeo may use technically necessary cookies or storage mechanisms to secure the service and deliver videos. More details are available in Vimeo's Privacy Policy.

Processing occurs pursuant to Art. 6 (1) lit. f GDPR based on our legitimate interest in attractive multimedia content.

Using Vimeo may include transmitting personal data to the USA. Vimeo participates in the EU-US Data Privacy Framework, ensuring an adequate level of data protection (EU Commission adequacy decision of July 10, 2023). For more information, see EU-US Data Privacy Framework.

6.2 Product links & external redirects

Our website may contain links to external third-party websites. By clicking on such a link, you will leave our website. The responsibility for the content and data protection on the linked websites lies solely with the respective provider. Please refer to their applicable privacy policies. We do not transmit any personal data to these external providers.

7) Duration of Personal Data Storage

Personal data is stored only as long as necessary for the respective purposes or as required by statutory retention periods. After the purpose ceases or statutory deadlines expire, data is deleted.

8) Rights of Data Subjects

8.1 You have the right to:

Request information about your stored data (Art. 15 GDPR)
Request rectification of inaccurate data (Art. 16 GDPR)
Request deletion of your data (Art. 17 GDPR)
Request restriction of processing of your data (Art. 18 GDPR)
Receive your data in a commonly used format (Art. 20 GDPR)
Object to processing of your data if processing is based on legitimate interests (Art. 21 GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise these rights, please contact the email address of the responsible party indicated above.

8.2 If we process your data based on legitimate interests (Art. 6 (1) lit. f GDPR), you have the right to object to this processing at any time for reasons arising from your particular situation. We will then no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

To exercise your right to object, please contact the email address of the responsible party indicated above.

Version March 2025