Privacy.

1. Controller

4REACT - Jan Niklas Wilhelm
Jan Niklas Wilhelm
Wetzlarer Str. 24, 14197 Berlin, Germany
Email: impressum@4react.com

2. Hosting and server logs

To operate and protect this website, we use specialized infrastructure providers for hosting, content delivery, storage and security. When the website is accessed, technically necessary connection and security data may be processed, including IP address, time, requested URL, browser and device information. Processing is based on our legitimate interest in secure, reliable and efficient website delivery under Art. 6(1)(f) GDPR. Operational logs are retained only for as long as they are needed for service operation, error analysis and defense against attacks.

Where a service provider processes data outside the European Economic Area, we use the applicable legal transfer mechanism, such as an adequacy decision or EU Standard Contractual Clauses, where required.

3. Contact form

When you contact us, we process your name, email address, company, optional telephone number, inquiry, message, time and a non-readable hash of the IP address. This allows us to answer, prevent misuse and prepare a possible contract under Art. 6(1)(b) and (f) GDPR.

Inquiries are deleted when completed unless statutory retention duties or legal claims apply. Commercial or tax-relevant correspondence may be retained for six or ten years.

4. Cloudflare Turnstile

Cloudflare Turnstile may protect forms against automated misuse. Technical signals such as IP address, browser and device information are processed by Cloudflare based on our security interest under Art. 6(1)(f) GDPR. Device storage, if required, is limited to what is strictly necessary under Section 25(2) TDDDG.

5. Consent management

Your choices for analytics, marketing and external media are stored locally in your browser so they can be respected on later visits. This is based on Section 25(2)(2) TDDDG and Art. 6(1)(c) and (f) GDPR. You can change your choice at any time using “Cookie settings”.

6. Google Analytics

Google Analytics is loaded only after your explicit consent. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Usage, device, processed IP and event data may be handled under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Transfers to Google LLC in the United States are possible. Consent is voluntary and may be withdrawn at any time.

7. Meta Pixel

With consent, the Meta Pixel by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, may measure campaigns and process page views, interactions, device, browser and online identifiers. Meta may link data to your account. Processing is based on Section 25(1) TDDDG and Art. 6(1)(a) GDPR, and may involve Meta Platforms, Inc. in the United States.

8. Spotify, Apple Music and Amazon Music

External players from these services load only with consent. Loading may transfer IP address, device, usage and account data and may set cookies or similar identifiers. Providers may include Spotify AB, Apple Distribution International Limited, Amazon Europe Core S.à r.l. and affiliates. Processing is based on Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

9. Recipients and processors

Technical service providers receive personal data only to the extent necessary for hosting, security, storage, communications and website operations. Where they act as processors, they are contractually bound under Art. 28 GDPR. Further information about recipients is available on request where permitted by law.

10. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent for the future at any time and lodge a complaint with a supervisory authority, particularly the Berlin Commissioner for Data Protection and Freedom of Information.

11. Security and updates

We use appropriate technical and organizational security measures. This policy will be updated when services or legal requirements change. The current version is available on this page.