Privacy policy

This is a translation for your convenience. Only the German version is legally binding.

Controller

Dual Citizen, Deniz Demirsoy
Rothmundstr. 5, 80337 Munich, Germany
Email: hello@dualcitizen.de, Phone: +49 (89) 535002

In short

This website sets no cookies, uses no analytics or tracking tools and loads no content from third parties (fonts, scripts, videos, maps). Personal data arises when you visit the pages and, if you use it, through the contact form. If you send us an email, we process it in our mailbox to answer your request.

Hosting and visiting the website

The website is delivered via Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data, in particular your IP address, date and time, the page requested and information about your browser, in order to deliver the page and protect it against attacks. We do not analyse this data ourselves and keep no logs of our own.

The legal basis is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor (Art. 28 GDPR). Where data is transferred to the USA, this is based on Cloudflare's certification under the EU-US Data Privacy Framework (Art. 45 GDPR).

Contact form

If you use the contact form, we process your name, email address and message in order to answer your enquiry. Cloudflare (see above) receives the details and sends them to our mailbox as an email using its email service. The website itself does not store them. Cloudflare acts as our processor for this as well (Art. 28 GDPR).

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete your enquiry once it has been dealt with, unless statutory retention obligations apply.

Your rights

You have the right to

• access the data we hold about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

An informal message to the address above is sufficient. You may also lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.