Legal PRIVACY POLICY
Draft — to be completed and legally reviewed before publication.
This is a translation for convenience. Only the German version is legally binding.
1 Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Sofia Laghi · Laghi Baudesign
[Street and house number]
[Postcode] Dresden
Email: sofia.laghi@gmail.com
Phone: 0176 30144848
2 The essentials first
This is a static website. It sets no cookies, uses no analytics or tracking tools and has no contact form. No third-party content is embedded — no maps, videos or social media plugins. The fonts are served by this website’s own server; no connection is made to Google Fonts or any other third-party provider.
3 Hosting and server log files
This website is hosted by [hosting provider, address]. Each time a page is requested, your browser transmits data for technical reasons, which the server stores in so-called log files — usually:
- IP address of the requesting device
- date and time of access
- page or file requested and amount of data transferred
- status code (e.g. whether the page was found)
- previously visited page (referrer), if transmitted
- browser type and version, operating system
This processing serves to deliver the website and to ensure its security and stability, for example to detect and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the secure and error-free operation of the website. The log files are deleted after [retention period, e.g. 14 days] unless they are needed for longer to investigate a security incident. [A data processing agreement pursuant to Art. 28 GDPR — please conclude or confirm] is in place with the hosting provider.
4 Contact by email or phone
The email and phone links on this website merely open your own email program or phone app; no data is transmitted via the website itself. If you write to me or call me, I process the information you provide (such as your name, contact details and the content of your enquiry) in order to deal with your request.
The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Your data is deleted as soon as your enquiry has been dealt with, provided no statutory retention obligations apply. Emails are received and stored via [email provider].
5 Browser storage
On your first visit to the homepage, the website places a technical flag in your browser’s session storage (sessionStorage) so that the opening animation appears only once per session. The entry contains no personal data, is not transmitted to the server and is deleted automatically when the browser tab is closed.
6 Links to other websites
This website links to external pages, for example those of festivals, podcasts or architecture practices. You only leave this website when you click on such a link; the respective provider is responsible for the processing of your data there.
7 Your rights
Within the scope of the statutory provisions, you have the right at any time to
- obtain access to your stored data (Art. 15 GDPR),
- have inaccurate data rectified (Art. 16 GDPR),
- have your data erased (Art. 17 GDPR),
- have processing restricted (Art. 18 GDPR),
- data portability (Art. 20 GDPR) and
- object to processing (Art. 21 GDPR).
Right to object: Where processing is based on Art. 6(1)(f) GDPR, you may object to it at any time on grounds relating to your particular situation. An informal message to sofia.laghi@gmail.com is sufficient.
8 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Data Protection and Transparency Commissioner), datenschutz.sachsen.de.
Last updated: [month year]
In short
- No cookies
- No tracking, no analytics tools
- No contact form — only email and phone links
- Fonts served locally, no connection to Google Fonts
- No embedded third-party content
- Server log files at the hosting provider
Personal data is only processed insofar as this is necessary to operate the website — or when you write to me or call me.