What happens to your data here?

The pages set no cookies, run no analytics and load nothing from other sites. Cloudflare, which serves the pages, processes your visit, including your IP address. If you email me, I receive what you write.

Who is responsible for your data, and how do you reach them?

The controller of the personal data described here is Maximilian Berentzen ("I", "me"). For anything about your data, write to contact@motorscy.com.

What does the site collect when you read it?

Nothing itself. Cloudflare, which serves the pages, processes your visit.

  • No cookie is set, and the site keeps nothing in your browser's storage.
  • There are no analytics, no tracking pixels and no content embedded from other sites.
  • The fonts come from this site itself, not from a font service.
  • The road-tax calculator runs in your browser and sends nothing anywhere.

What happens when you email me?

I receive your email address and what you write. I keep it twelve months after our last message, then delete it.

  • Email to contact@motorscy.com is forwarded by Cloudflare Email Routing to my mailbox at Proton.
  • Cloudflare says its forwarding stores and reads no message content.
  • It does record each message's sender, recipient, subject and message ID, and what it did with the message.
  • What you send is never sold, rented or passed on.

Who handles it for me, and in which countries?

Two providers. Cloudflare serves the site and forwards email; Proton holds my mailbox. Cloudflare processes data in the United States, outside the EU, and names its safeguard for that.

Cloudflare's safeguards are in its data processing addendum.

Cloudflare (hosting and email forwarding)

  • Cloudflare hosts and serves the site, and forwards email sent to contact@motorscy.com to my mailbox.
  • Serving a page means processing your visit, including your IP address.
  • It acts as my processor for the logs it shows me and for what passes through its network. It is a controller for what it keeps for its own purposes.
  • Where the data goes: it stores data mainly in the United States and the EEA. For transfers to the United States it relies on its EU–US Data Privacy Framework certification. On it was listed as "Active". Should that lapse or be invalidated, it relies on standard contractual clauses. Its data processing addendum is part of its standard self-serve terms.

Proton (mailbox)

  • My mailbox is with Proton: what you send to contact@motorscy.com arrives there.
  • Proton is run by Proton AG, of Geneva, Switzerland, under Swiss law. Proton Mail stores data in encrypted form, on servers only in Switzerland, Germany or Norway.
  • Where the data goes: the European Commission recognises Switzerland as giving adequate protection, so data goes there as it would within the EU. Germany is an EU member state.

On what basis do I use it, and for how long?

Why I may use it

  • An email to contact@motorscy.com: my legitimate interest in answering you (GDPR Art. 6(1)(f)).
  • Cloudflare's processing of your visit: my legitimate interest in serving the site to you (Art. 6(1)(f)).

How long it's kept

  • Your emails: twelve months after the last message in the exchange, then deleted from my mailbox.
  • Cloudflare's record of each forwarded email: about 31 days, by its documentation.
  • Cloudflare's processing of your visit: as its own policy sets. That policy gives the criteria it uses, not a fixed period.

What can you ask me to do?

Write to contact@motorscy.com with any of these. This includes data Cloudflare holds about your visit: Cloudflare directs such requests to the site.

  • Access: ask whether I hold data about you, and have access to it.
  • Rectification: have data about you corrected if it's wrong.
  • Erasure: have it deleted, on the grounds the GDPR sets out.
  • Restriction: have its use limited, for instance while you contest whether it's accurate.
  • Objection: object, on grounds of your own situation, to my using it on the basis of my legitimate interest.
  • Portability doesn't apply here: it doesn't cover processing based on legitimate interest.

Where can you complain?

In Cyprus, to the Office of the Commissioner for Personal Data Protection. You may write to me first, but you don't have to.

Office of the Commissioner for Personal Data Protection
Kypranoros 15, 1061 Nicosia
P.O. Box 23378, 1682
commissioner@dataprotection.gov.cy
gov.cy/dataprotection/en · How to lodge a complaint

You can also complain to the authority in the EU country where you live, work, or think the breach took place.

Is there anything else you should know?

  • Writing to me is voluntary. Without an email address I can't reply to you.
  • Last changed: .

Sources

Sources on this page (17)

Public authorities and EU law

  1. Regulation (EU) 2016/679 (General Data Protection Regulation), EUR-Lex · checked
  2. Office of the Commissioner for Personal Data Protection, home page · checked
  3. Office of the Commissioner for Personal Data Protection, Who we are · checked
  4. Office of the Commissioner for Personal Data Protection, Contact Us · checked
  5. Office of the Commissioner for Personal Data Protection, Lodge a complaint · checked
  6. European Commission, Adequacy decisions · checked
  7. European Union, EU countries · checked
  8. U.S. Department of Commerce, Data Privacy Framework List · checked

Service providers' own documentation

  1. Cloudflare, Privacy Policy · checked
  2. Cloudflare, Self-Serve Subscription Agreement · checked
  3. Cloudflare, Cloudflare and the GDPR (Trust Hub) · checked
  4. Cloudflare, Data Processing Addendum · checked
  5. Cloudflare, Email Routing · checked
  6. Cloudflare, Email Service: Metrics and analytics · checked
  7. Cloudflare, Email Service: Activity log · checked
  8. Proton, Privacy Policy · checked
  9. Proton, Proton Mail privacy policy · checked