Augudo Blog

Datenschutzerklärung

Preamble

With the following privacy policy, we would like to inform you which types of your personal data (hereinafter also referred to as “data”) we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as our “online offering”).

The terms used are not gender-specific.

Last updated: 22 September 2026

Table of Contents

Controller

Augusto Faggion Lira Dos SantosEschenstr. 1347495 RheinbergGermany
Email
[email protected]

View Legal Notice

Overview of Processing Activities

The following overview summarizes the types of data processed and the purposes of their processing.

Types of Data Processed

  • Contact data.
  • Content data.
  • Usage data.
  • Meta, communication, and procedural data.
  • Log data.

Categories of Data Subjects

  • Communication partners.
  • Users.

Purposes of Processing

  • Communication.
  • Security measures.
  • Organizational and administrative procedures.
  • Feedback.
  • Provision of our online offering and user experience.
  • IT infrastructure.

Relevant Legal Bases

Relevant legal bases under the GDPR: Below you will find an overview of the legal bases of the GDPR on which we base our processing of personal data.

  • Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR) — Processing is necessary for the performance of a contract or to carry out pre-contractual measures taken at the request of the data subject.
  • Legitimate interests (Art. 6(1)(f) GDPR) — Processing is necessary to protect the legitimate interests of the controller.

National data protection regulations in Germany: In addition to the GDPR, national data protection regulations apply in Germany, in particular the Federal Data Protection Act (BDSG). Insofar as technically necessary cookies or comparable technologies are used, the provisions of the German Telecommunications and Digital Services Data Protection Act (TDDDG) also apply.

Security Measures

We take appropriate technical and organizational measures in accordance with legal requirements to ensure a level of protection appropriate to the risk. These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data.

TLS/SSL encryption (HTTPS): All data transmissions between your browser and our server are secured by TLS/SSL encryption, indicated by the HTTPS prefix in the URL.

Cookies and Technically Necessary Technologies

We ourselves do not use cookies for analytics, marketing, or tracking purposes on our online offering. No user profiles are created.

Our content delivery and security provider, Cloudflare, Inc., may set technically necessary cookies as part of its security and bot-detection functions (e.g., to distinguish automated access from human visitors). These cookies are required to operate our online offering and to protect it against abuse, and fall under the exemption in Section 25(2) of the German TDDDG; consent is not required for their use. Further information can be found in Cloudflare's privacy policy (see the “Provision of the Online Offering and Web Hosting” section).

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) in the security and stability of our online offering.

Transfer of Personal Data

In the course of our processing of personal data, it may be transferred to service providers, in particular the hosting and infrastructure providers named in the “Provision of the Online Offering and Web Hosting” section. In such cases, we comply with legal requirements and, where necessary, enter into data processing agreements pursuant to Art. 28 GDPR to protect your data.

International Data Transfers

Some of the service providers we use are based in the USA or process data there. Where this is the case, we rely on the following transfer mechanisms, depending on the provider:

  • DigitalOcean, LLC — certified under the EU-U.S. Data Privacy Framework (DPF). Our hosting is nevertheless physically located in Frankfurt am Main, Germany, meaning the processing of content data itself takes place within the EU.
  • Cloudflare, Inc. — certified under the EU-U.S. Data Privacy Framework (DPF).
  • Cloudinary Inc. — transfers, where necessary, are based on the EU Standard Contractual Clauses (SCCs) pursuant to Implementing Decision (EU) 2021/914.
  • Supabase Pte. Ltd. — The database is hosted in the EU region of Ireland (eu-west-1); the underlying data therefore remains within the EU. The contracting entity for processing is Supabase Pte. Ltd., based in Singapore; access for support or maintenance purposes may nonetheless constitute a data transfer, for which we rely on the EU Standard Contractual Clauses (SCCs) pursuant to Implementing Decision (EU) 2021/914.
  • Plus Five Five, Inc. (Resend) — certified under the EU-U.S. Data Privacy Framework (DPF); additionally, where necessary, we rely on the EU Standard Contractual Clauses (SCCs) pursuant to Implementing Decision (EU) 2021/914.

Further information on the Data Privacy Framework is available at dataprivacyframework.gov.

General Information on Data Storage and Deletion

We delete personal data as soon as the underlying consent is withdrawn or no further legal basis for processing exists. Statutory retention obligations remain unaffected.

As we do not currently issue invoices or process bookkeeping records through our online offering, no statutory retention periods under the German Fiscal Code (Abgabenordnung, AO) or Commercial Code (Handelsgesetzbuch, HGB) currently apply in connection with this website. Specific retention periods for individual processing activities can be found in the respective sections of this privacy policy.

Rights of Data Subjects

Under the GDPR, you are entitled to the following rights:

  • Right of access — You may request information about your stored data.
  • Right to rectification — You may request that inaccurate data be corrected.
  • Right to erasure — You may request the deletion of your data.
  • Right to restriction of processing — You may request that processing be restricted.
  • Right to object — You may object to the processing of your data.
  • Right to data portability — You may receive your data in a machine-readable format.
  • Right to lodge a complaint — You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement. The authority responsible for us is the North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (LDI NRW).

Provision of the Online Offering and Web Hosting

We process users' IP addresses in order to provide our online services. Server log files are stored for a maximum of 30 days and deleted thereafter.

Service Providers Used

  • DigitalOcean LLC, 101 6th Ave, New York, NY 10013, USA. Server location: Frankfurt am Main, Germany. Privacy Policy
  • Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Used as a CDN, DNS provider, and for DDoS/bot protection. Privacy Policy
  • Cloudinary Inc., 6201 America Center Dr., Suite 220, San Jose, CA 95002, USA. Used for storing and delivering images. Privacy Policy
  • Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Used as a database service (PostgreSQL). Privacy Policy

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).

Blogs and Publication Media

We operate a blog. Readers' data is processed only to the extent necessary to display the blog. There are no comment functions or user accounts.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).

Contact and Inquiry Management

When you contact us via our contact form or by email, we process the submitted data (name, email address, topic, message) solely to respond to your inquiry.

Providing your data via the contact form is voluntary. However, without this information we cannot process your inquiry or respond to you.

To send the notification email when the form is submitted, we use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend Privacy Policy

Data processed
Name, email address, topic, message content.
Storage period
Deleted once the matter has been conclusively resolved, unless statutory retention obligations apply.
Legal basis
Art. 6(1)(b) and (f) GDPR.

Google Search Console

We use Google Search Console to analyze the visibility of our online offering in Google Search. This tool does not process any personal data of our website visitors via our site; no script or tracking code is embedded on our website. Indexing of our publicly accessible pages by the Google crawler occurs independently of the use of Search Console.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Privacy Policy

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) in optimizing our visibility in search engines.

Amendment and Update

We will amend this privacy policy whenever changes to our data processing activities make this necessary. We recommend visiting this page periodically.

Definitions

  • Personal data: Any information relating to an identified or identifiable natural person.
  • Processing: Any operation performed on personal data, such as collection, storage, transmission, or deletion.
  • Controller: The natural or legal person who determines the purposes and means of the processing.
  • Log data: Automatically generated server logs containing IP address, timestamp, and content accessed.