Privacy.

1. Controller

4REACT – Jan Niklas Wilhelm
Jan Niklas Wilhelm
Wetzlarer Str. 24, 14197 Berlin, Germany
Email: impressum@4react.com

2. Hosting and server logs

This website is delivered through Cloudflare and OpenAI Sites. Necessary connection data may be processed, including IP address, time, requested URL, browser and device information and security events. Processing ensures secure and stable delivery under Art. 6(1)(f) GDPR. Logs are retained only as long as required for operations, error analysis and defence against attacks.

Processing may take place in third countries, particularly the United States. Where required, transfers rely on an adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses.

3. Contact form

When you contact us, we process your name, email address, enquiry, message, time and a non-readable hash of the IP address. This allows us to answer, prevent misuse and prepare a possible contract under Art. 6(1)(b) and (f) GDPR.

Enquiries are deleted when completed unless statutory retention duties or legal claims apply. Commercial or tax-relevant correspondence may be retained for six or ten years.

4. Cloudflare Turnstile

Cloudflare Turnstile may protect forms against automated misuse. Technical signals such as IP address, browser and device information are processed by Cloudflare based on our security interest under Art. 6(1)(f) GDPR. Device storage, if required, is limited to what is strictly necessary under Section 25(2) TDDDG.

5. Consent management

Your choices for analytics, marketing and external media are stored locally in your browser so they can be respected on later visits. This is based on Section 25(2)(2) TDDDG and Art. 6(1)(c) and (f) GDPR. You can change your choice at any time using “Cookie settings”.

6. Google Analytics

Google Analytics is loaded only after your explicit consent. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Usage, device, processed IP and event data may be handled under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Transfers to Google LLC in the United States are possible. Consent is voluntary and may be withdrawn at any time.

7. Meta Pixel

With consent, the Meta Pixel by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, may measure campaigns and process page views, interactions, device, browser and online identifiers. Meta may link data to your account. Processing is based on Section 25(1) TDDDG and Art. 6(1)(a) GDPR, and may involve Meta Platforms, Inc. in the United States.

8. Spotify, Apple Music and Amazon Music

External players from these services load only with consent. Loading may transfer IP address, device, usage and account data and may set cookies or similar identifiers. Providers may include Spotify AB, Apple Distribution International Limited, Amazon Europe Core S.à r.l. and affiliates. Processing is based on Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

9. Recipients and processors

We use technical service providers for hosting, security, storage and website operations. They receive data only as necessary and are contractually bound under Art. 28 GDPR where required.

10. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent for the future at any time and lodge a complaint with a supervisory authority, particularly the Berlin Commissioner for Data Protection and Freedom of Information.

11. Security and updates

We use appropriate technical and organisational security measures. This policy will be updated when services or legal requirements change. The current version is available on this page.