Privacy policy

1. Controller and scope

Email: support@dajukema.com

This notice covers the website at dajukema.de and dajukema.com, including its German and English pages. Private Heart has a separate app privacy policy.

2. Website access and Netlify hosting

Static pages are delivered through Netlify and its content delivery network. The provider and contracting party for processing on behalf of Dajukema is Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA.

Access involves technically necessary data, particularly IP address, request time, requested URL or resource, HTTP method, response status and transfer size, plus browser and referrer information where supplied. Purposes are delivery, technical security, stability and troubleshooting. The legal basis is Art. 6(1)(f) GDPR and the legitimate interest in a secure, reliably accessible website.

Processing on behalf of Dajukema and provider purposes

Processing of website and form contents on behalf of Dajukema is governed by the Netlify DPA of 9 June 2026, which forms part of its Self-Serve terms. Netlify uses subprocessors; their roles and locations are documented in its Trust Center. Form processing is described separately in section 5.

This differs from activities for which Netlify is itself responsible, such as administering its own customer contracts or meeting its own legal duties. These are covered by Netlify's privacy notice, which is distinct from the DPA for processing on behalf of customers.

International processing and retention

Netlify and its subprocessors may process data outside the European Economic Area, particularly in the USA. The DPA provides for the EU-US Data Privacy Framework for covered transfers, with EU standard contractual clauses where that framework does not apply. EU-only storage is not promised. Information about safeguards can be requested using the contact above. See also Netlify's GDPR information.

Technical data is processed for as long as needed for delivery, operation, security checks and investigation of specific errors or abuse; legal duties may require longer retention. Internal logs and backups follow the provider's procedures. Dajukema cannot control their deletion through website code. The 90-day rule below for Dajukema's contact records is not a guaranteed deletion period for Netlify logs or backups.

3. Cookies, browser storage and external content

The website code sets no cookies and uses no Local Storage, Session Storage or IndexedDB. It contains no analytics or marketing trackers, embedded videos, maps or social-media services, or external font or script services. Fonts come from your device; files are delivered through the website's hosting.

The local script controls navigation and subtle display effects. Form entries are transmitted only when you submit the contact form. Language preferences are not stored. Your browser may cache files for the page display you request.

The website initiates no additional consent-requiring access for analytics or advertising, so no cookie-consent banner is displayed. The relevant rule is § 25 TDDDG. External information pages are accessed only when you open their links; the destination provider's notice then applies.

4. Domains and email through IONOS

IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, provides domains and email, not this website's hosting. Domain lookup involves DNS requests and the necessary technical connection data, as well as resolvers selected by your device or network. Its purpose is domain availability, based on Art. 6(1)(f) GDPR.

The business mailbox for support@dajukema.com is operated through IONOS. Sending and receiving email involves sender and recipient addresses, messages and technical transmission data. Where IONOS acts as a processor, its processing agreement applies. For new contracts since 19 July 2022, this agreement is part of its terms; see the IONOS processing-agreement information. IONOS describes its own processing activities in its privacy notice.

5. Contact form and email

You can use the contact form or write to support@dajukema.com. Name, email address and message are required in the form; the subject is optional. Contact is not legally required. Without the required details, the enquiry cannot be handled and answered through the form.

Netlify Forms processes entries and technically necessary metadata, particularly IP address and HTTP-request data, and makes submissions available in the Netlify project for handling. Accessing the website and voluntarily submitting an enquiry are separate processing activities. Email may also include attachments you send. The form itself has no file-upload feature.

Email notifications for new form submissions are also intended to go to the business mailbox support@dajukema.com at IONOS. Where this notification is enabled, Netlify also emails the enquiry to this mailbox; the submission remains stored at Netlify. Replies are sent through the business mailbox. The notification is not an automatic reply to you.

The purpose is to handle and answer contact and support enquiries. Art. 6(1)(b) GDPR applies to pre-contractual or contractual requests; Art. 6(1)(f) applies to general enquiries and general support based on the interest in answering them. No additional blanket privacy consent is required.

A hidden form field (honeypot) and Netlify's server-side spam checks protect against abuse. According to Netlify's documentation, these checks use Akismet by Automattic, Inc., USA. Form contents and technical metadata may be processed for this purpose, based on Art. 6(1)(f) GDPR and the legitimate interest in a usable, protected contact channel. No CAPTCHA or external form script is loaded in the browser. The processor and transfer arrangements in section 2 also cover Netlify Forms and its subprocessors.

6. Retention and deletion

General contact and support enquiries are retained for no more than 90 days after handling is completed, unless another legal reason requires longer retention. Unnecessary entries and Dajukema's email copies are deleted during regular checks. Spam is reviewed and deleted at least monthly; permanent retention of spam is not intended.

Statutory retention duties, for example under § 147 of the German Fiscal Code, and specific legal claims take precedence. Not every support enquiry is automatically classified as business correspondence requiring retention. Legally required retention is based on Art. 6(1)(c) GDPR; retention for legal claims is based on Art. 6(1)(f).

Dajukema deletes accessible submissions, messages and copies it creates. Deleting a Netlify submission does not delete an existing email copy. Provider-internal security logs, backups and deletion cycles follow Netlify's or IONOS's procedures. No separate fixed backup-deletion periods are promised for them.

7. Security and sensitive information

HTTPS is intended for website and form transport. Email does not provide guaranteed end-to-end encryption. Please do not send medical records or sensitive health data. A problem description and, where useful, anonymised screenshots are usually sufficient for technical questions; screenshots can be sent by email if needed.

Unsolicited sensitive information is not unnecessarily copied, shared or permanently stored and is deleted when not needed. If further processing of special categories of data should exceptionally become necessary, a separate assessment, including Art. 9 GDPR and a suitable secure procedure, takes place first. No general health-data consent is collected as a precaution.

No solely automated decisions with legal or similarly significant effects under Art. 22 GDPR are made. Technical spam filtering serves only to prevent abuse.

Your rights

Where the statutory conditions are met, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Consent can be withdrawn with effect for the future (Art. 7(3)); earlier processing remains lawful. Contact support@dajukema.com to exercise these rights.

Right to object under Art. 21 GDPR

Where processing is based on Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Dajukema will then stop processing the data concerned unless compelling legitimate grounds override your interests, rights and freedoms, or the processing is necessary for establishing, exercising or defending legal claims.

You may complain to a supervisory authority, particularly in the EU member state of your habitual residence, place of work or the alleged infringement (Art. 77 GDPR). For Dajukema's location, you can contact the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate: Postfach 30 40, 55020 Mainz, Germany. Official contact information.

Changes

This notice is updated when services or purposes change. Required information is provided before further processing for other purposes.

Last updated: 7 November 2026