Privacy Policy

1. Controller

Ivailo Ivanov – Gesellschaftskommunikation
Ivailo Ivanov
Leonhardtstraße 6
14057 Berlin
Germany
Email: info@iivanov.de

2. General information on data processing

This website processes personal data only as necessary to operate the website securely, respond to contact enquiries and provide external content expressly selected by you. No analytics or tracking services are used by the website operator.

3. Hosting and server log files

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you access the website, the hosting provider processes connection and usage data required for technical operation, including your IP address, access time, requested resource, referrer and browser/system information. This processing ensures secure and stable website operation and protects against misuse. The legal basis is Article 6(1)(f) GDPR. STRATO states that it retains IP addresses for a maximum of seven days to detect and prevent attacks.

4. Contact by form and email

If you contact me using the contact form or by email, the information you provide is processed to respond to your enquiry. Depending on its subject, processing is based on Article 6(1)(b) GDPR for pre-contractual or contractual communication, or Article 6(1)(f) GDPR for the legitimate interest in responding to other enquiries.
The contact form does not permanently store messages in the WordPress database. Your information is sent by email to info@iivanov.de. Data is deleted once the enquiry has been fully dealt with and no statutory retention requirements or legitimate reasons for further retention apply.

5. Email delivery

A STRATO mailbox at info@iivanov.de is used to send and receive emails. Transmission involves processing the sender, recipient, metadata and message content necessary for communication. The connection to the mail server is encrypted.

6. External videos / YouTube

The website may refer to external videos, including YouTube videos. External content is not loaded automatically when you first visit a page. Either an external link is provided or a video is loaded only after an explicit user action.
Activating an external video may transfer data to the third-party provider. Activation is voluntary. No requests should be made to YouTube/Google before activation. Where consent is required, processing is based on Article 6(1)(a) GDPR and section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

7. Cookies and similar technologies

The website does not use its own marketing or analytics cookies. Storage or access strictly necessary for website functionality may occur. Non-essential third-party content is not loaded without a prior user action. Whether a separate consent banner is required will be checked against the final production environment before launch.

8. Recipients and processing on behalf of the controller

STRATO may process personal data on behalf of the controller when providing hosting and email services. Data is disclosed to other recipients only when necessary to handle an enquiry, required by law or expressly authorised by your consent.

9. Retention

Personal data is processed only for as long as necessary for its purpose. For contact enquiries, retention depends on handling the enquiry and any subsequent business communication. Statutory retention periods remain unaffected.

10. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

11. Right to complain

You have the right to complain to a data protection supervisory authority. For the controller based in Berlin, the competent authority includes the Berlin Commissioner for Data Protection and Freedom of Information:
Alt-Moabit 59–61
10555 Berlin
Email: mailbox@datenschutz-berlin.de

12. Security

The website is intended to be provided exclusively over encrypted HTTPS connections. Technical and organisational measures are used to protect personal data against loss, manipulation and unauthorised access.

13. Version

September 2026