EN DE

Privacy Policy

Data protection information pursuant to Regulation (EU) 2016/679 (GDPR)

1. Controller

The controller responsible for the processing of personal data on this website is:

Graham Miranda UG (haftungsbeschränkt)
Hasselfelder Str. 23
38889 Blankenburg (Harz)
Germany

Phone: +49 156-7839-7267
Email: graham@grahammiranda.com

2. Data Protection Officer

Due to the size of our company and the nature of our data processing, we are not required to appoint a formal data protection officer (DPO) under Article 37 GDPR. However, you may contact us at any time regarding data protection matters using the contact details above.

3. Data We Collect

3.1 Automatically collected data
When you visit our website, we automatically collect the following technical data:

  • IP address of your device
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages visited on our website
  • Date and time of access

This data is processed solely for the purpose of ensuring the technical operation, security, and improvement of our website (Article 6(1)(f) GDPR – legitimate interests).

3.2 Data you voluntarily provide
When you contact us via email, contact form, or phone, we collect:

  • Name and contact information
  • Content of your message or inquiry
  • Any other information you voluntarily provide

This data is processed solely for the purpose of responding to your inquiry (Article 6(1)(b) GDPR – contractual/pre-contractual measures, or Article 6(1)(f) GDPR – legitimate interests).

4. Purpose and Legal Basis of Processing

We process your personal data for the following purposes:

  • To provide and maintain our website: Legal basis – Article 6(1)(f) GDPR (legitimate interests)
  • To respond to your inquiries: Legal basis – Article 6(1)(b) or (f) GDPR
  • To comply with legal obligations: Legal basis – Article 6(1)(c) GDPR
  • To improve our services: Legal basis – Article 6(1)(f) GDPR (legitimate interests)

5. Cookies

Our website may use cookies to enhance user experience. Cookies are small text files stored on your device. We use only essential/technical cookies that are necessary for the operation of the website. No marketing or tracking cookies are used without your consent.

You can configure your browser to reject cookies. However, some features of the website may not function properly without cookies.

6. External Links

Our website may contain links to external third-party websites (e.g., social media platforms, service providers). We have no influence over the data processing practices of these third parties. We encourage you to review the privacy policies of any third-party services you visit.

7. Data Recipients

We do not share your personal data with third parties unless:

  • You have given explicit consent
  • It is necessary for the performance of a contract with you
  • We are legally required to do so
  • It is necessary to protect our legitimate interests (e.g., hosting providers, IT service providers who process data on our behalf under data processing agreements – Article 28 GDPR)

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Technical access logs are typically retained for a maximum of 30 days. Correspondence data is retained for as long as necessary to respond to your inquiry and thereafter for documentation purposes in accordance with legal requirements.

9. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access (Article 15 GDPR): You may request confirmation as to whether personal data concerning you is being processed and receive a copy of such data.
  • Right to rectification (Article 16 GDPR): You may request the correction of inaccurate personal data.
  • Right to erasure (Article 17 GDPR): You may request the deletion of your personal data, subject to certain conditions.
  • Right to restriction of processing (Article 18 GDPR): You may request the restriction of processing in certain circumstances.
  • Right to data portability (Article 20 GDPR): You may receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Article 21 GDPR): You may object to the processing of your personal data based on Article 6(1)(f) GDPR.
  • Right to lodge a complaint (Article 77 GDPR): You have the right to file a complaint with a supervisory authority (e.g., the data protection authority of your country or the German Federal State).

To exercise any of these rights, please contact us using the contact details provided in Section 1.

10. Supervisory Authority

If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the responsible supervisory authority:

Landesbeauftragte für den Datenschutz Sachsen-Anhalt
Leiterstraße 9
39104 Magdeburg
Germany
https://www.datenschutz.sachsen-anhalt.de

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal requirements. Any updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically.

Last Updated: March 2026