Privacy Policy

Last updated: June 2026 · Legal bases: GDPR, DDG, TDDDG

1. Data controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Sirochita Lemke
Sole proprietorship „miraTEQ“ (Webdesign & Digital Marketing)
Breitensteinstr. 50
85567 Grafing bei München
Germany

Phone: +49 8092 2550428
Email: [email protected]

Registered business location: Chiang Mai, Thailand; the German address above also serves as the address for the service of documents.

Representative in the EU (Art. 27 GDPR): Nicole Binsteiner, Breitensteinstr. 50, 85567 Grafing bei München, Germany · email: [email protected]

No data protection officer has been appointed, as the conditions under Art. 37 GDPR are not met.

2. Principles of data processing

We take the protection of your personal data very seriously. Personal data is any information relating to an identified or identifiable natural person (e.g. name, email address, IP address).

We only process personal data to the extent necessary to provide a functional website and our content and services, or where another legal basis exists. Data is only passed on to third parties where expressly described in this privacy policy.

3. Hosting and Content Delivery Network (CDN)

This website is hosted by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

The servers are located exclusively in Germany. Hetzner processes technical connection data (server log files) on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).
Further information: Hetzner Privacy Policy

This website is additionally delivered via the Content Delivery Network (CDN) of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare acts as a reverse proxy between the visitor and the server. Technical connection data (incl. IP address) is processed via Cloudflare servers in order to deliver the website quickly, securely and reliably.

For data transfers to the USA, Cloudflare relies on the European Commission's standard contractual clauses (SCCs) and the EU-U.S. Data Privacy Framework (Art. 46(2)(c) GDPR). A data processing agreement is automatically included under Cloudflare's self-serve terms.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in fast, secure and reliable delivery of the website).
Further information: Cloudflare Privacy Policy

4. Server log files

Each time this website is accessed, our hosting provider automatically collects information transmitted by your browser (server log files):

  • IP address of the requesting device
  • Browser type and version
  • Operating system used
  • Referrer URL (previously visited page)
  • Hostname of the accessing device
  • Date and time of the server request
  • Volume of data transferred

This data is technically necessary to deliver the website. It is not merged with other data sources and does not allow direct identification of individuals.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating, securing and debugging the website).
Retention period: max. 7 days, then automatically deleted.

5. Contact form

When you contact us via the contact form on this website, the following data is collected:

  • Name
  • Email address
  • Industry (mandatory field)
  • Message text
  • Timestamp of the request

The form is processed by a self-operated PHP script on our Hetzner server and forwarded to us by email. The entire process runs exclusively on servers of Hetzner Online GmbH in Germany. No form data is permanently stored on the server. Third parties have no access to the submitted data.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at your request).
Retention period: Your request is stored in our email inbox until processing is complete, and deleted after 6 months at the latest if no contractual relationship is established.

6. Contact by email or phone

When you contact us by email or phone, the data you transmit (e.g. name, email address, phone number, message content) is stored by us in order to process your request and to respond to any follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Retention period: Until the request is fully processed, and after 6 months at the latest if no contractual relationship is established. Statutory retention periods apply if a contract is concluded.

7. Contact via WhatsApp

This website offers you the option of contacting us via WhatsApp. WhatsApp is a service of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland (for users in the European Economic Area).

When you contact us via WhatsApp, the following data is processed:

  • Your phone number
  • Content of your message
  • Metadata (timestamp, device information)

WhatsApp also transfers data to its parent company Meta Platforms, Inc., USA. This transfer is based on standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR).

Note: WhatsApp is not the only way to contact us. You can also reach us by email or phone at any time.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).
Retention period: Until the request is fully processed.
Further information: WhatsApp Privacy Policy

8. Fonts

This website uses exclusively locally hosted fonts (WOFF2 format). No external font services such as Google Fonts are integrated. No data is therefore transferred to external servers.

9. Cookies and local storage

This website sets only one technically necessary cookie:

  • geo_ok (set by Cloudflare): stores for 24 hours that a geo-redirect has already taken place, in order to prevent redirect loops. Contains no personal data (value: "1").

No optional, marketing or tracking cookies are set, and no data is stored in local browser storage (localStorage or sessionStorage) for marketing or analytics purposes. The spam protection of the contact form (Cloudflare Turnstile, see section 14) may set technically necessary, short-lived entries used solely for bot defence.

As only technically necessary services, or services exempt from the consent requirement under § 25(2)(2) TDDDG, are used, a cookie consent banner is not required.

10. Analytics and tracking

This website uses Cloudflare Web Analytics, a privacy-friendly web analytics service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare Web Analytics collects only aggregated, anonymised usage statistics (e.g. pages visited, device category, visitor country). No cookies are set, no IP addresses are stored, no personal user profiles are created, and no cross-device tracking takes place. Identification of individual persons is not possible.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving and optimising our website).
Further information: Cloudflare Privacy Policy

11. Your rights as a data subject

You have the following rights with regard to personal data concerning you:

  • Right of access (Art. 15 GDPR): You may request information about whether and what personal data we process about you.
  • Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or the completion of incomplete data.
  • Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided no statutory retention obligation applies.
  • Right to restriction of processing (Art. 18 GDPR): You may request that the processing of your data be restricted.
  • Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, machine-readable format.
  • Right to object (Art. 21 GDPR): You may object to the processing of your personal data where processing is based on legitimate interests.
  • Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise your rights, please contact us by email: [email protected]

We will respond to your request within one month of receipt (Art. 12(3) GDPR). For complex or multiple requests, this period may be extended by up to two further months. Responses are free of charge.

12. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority about our processing of your personal data (Art. 77 GDPR).

The supervisory authority competent for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Germany
Phone: +49 981 180093-0
www.lda.bayern.de

Alternatively, you may contact the data protection authority in your country of residence.

13. Updates to this privacy policy

This privacy policy is currently valid and was last updated in June 2026. Further development of our website or changes in legal or regulatory requirements may necessitate updates. The current version is always available at mirateq.de/en/privacy/.

14. Bot and spam protection (Cloudflare Turnstile)

To protect our contact form against automated requests (spam, bots), we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile is loaded exclusively on the page containing the contact form.

Based on technical characteristics of your browser (e.g. browser information, interaction patterns), Turnstile checks whether the request originates from a human. No cookies are set for advertising or tracking purposes, and no personal user profiles are created. Technical connection data (incl. IP address) is transmitted to Cloudflare and may be processed in the USA; the transfer is based on the EU standard contractual clauses and the EU-U.S. Data Privacy Framework (Art. 46(2)(c) GDPR).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing spam and abuse) and § 25(2)(2) TDDDG (strictly necessary to provide the service you have expressly requested – submission of the contact form). Separate consent is therefore not required.
Further information: Cloudflare Privacy Policy

← Back to homepage