Privacy Policy

1. Scope and controller

This privacy policy applies to this company website. The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Asad Khalid, sole proprietor trading as The Artisan Protocol
Carl-Fried-Gauß Str. 6
28357 Bremen, Germany
Email: info@theartisanprotocol.de

A data protection officer has not been appointed.

2. Website hosting and server logs

This website is hosted using infrastructure supplied by Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. Contabo may process personal data on our behalf to provide and secure the hosting service.

When the website is accessed, the server may record the visitor’s IP address, date and time of access, requested resource, HTTP status code, transferred data volume, referrer URL, browser type and version, and operating system. These data are required to deliver the website, maintain technical security, investigate misuse, and diagnose faults.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable, and efficient operation of the website. Unless a security incident requires longer preservation, server logs are deleted or anonymised no later than 14 days after collection. We use an EU/EEA server location for this website.

3. Contact by email

If you contact us, we process the information you provide, including your name, contact details, message, and related correspondence, to respond to your enquiry and manage any resulting business relationship.

For enquiries connected with a contract or steps requested before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other business communication, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is answering legitimate enquiries and maintaining business correspondence.

Email is provided through Google services. Delivery and storage may therefore involve Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and affiliated Google entities. Google may process data outside the EU/EEA. According to Google, transfers are supported where applicable by adequacy decisions, the EU–US Data Privacy Framework, or standard contractual clauses. Further information is available in Google’s Privacy Policy and its data-transfer information.

Correspondence is deleted when it is no longer required for the enquiry or business relationship, unless statutory retention obligations or the establishment, exercise, or defence of legal claims require longer storage.

4. Cookies and consent preferences

This website uses one strictly necessary first-party cookie named artisan_cookie_consent. It stores whether you accepted or denied optional cookies so that the consent panel does not reappear on every visit. The cookie contains only the value “accepted” or “denied”, is available across this website, and expires after six months.

This preference cookie is necessary to provide the consent choice you requested and to respect it. It is used on the basis of Section 25(2) TDDDG and Article 6(1)(f) GDPR; our legitimate interest is reliable consent management.

No analytics, advertising, profiling, or other optional cookies are currently set, regardless of your choice. Accepting optional cookies therefore does not activate tracking. If an optional service is introduced later, this notice will be updated and a new, specific consent will be requested before it is activated. You can review or change your choice at any time through “Cookie settings” in the footer.

5. Recipients and processors

Personal data are disclosed only where necessary to operate the website, communicate with you, comply with law, or establish, exercise, or defend legal claims. Relevant recipients may include Contabo as hosting provider, Google as email provider, telecommunications providers, professional advisers, and competent public authorities. We do not sell personal data.

6. International data transfers

The website itself is operated from an EU/EEA server location. Email services may involve processing in countries outside the EU/EEA. Where Chapter V GDPR requires safeguards, the relevant provider relies on an adequacy decision, the EU–US Data Privacy Framework for certified recipients, standard contractual clauses, or another lawful transfer mechanism.

7. Security

We use appropriate technical and organisational measures proportionate to the risk, including encrypted HTTPS transmission, access controls, software updates, backups, and restricted administrative access. Internet transmission cannot nevertheless be guaranteed to be completely secure.

8. Your rights

Subject to the statutory conditions, you have rights of access under Article 15 GDPR, rectification under Article 16, erasure under Article 17, restriction under Article 18, data portability under Article 20, and objection under Article 21. Where processing is based on consent, you may withdraw that consent at any time with future effect.

Right to object: Where we process data on the basis of Article 6(1)(f) GDPR, you may object for reasons arising from your particular situation. We will stop processing unless compelling legitimate grounds override your interests, rights, and freedoms, or processing is required for legal claims.

To exercise a right, contact info@theartisanprotocol.de.

9. Complaints, required information, and automated decisions

You may lodge a complaint with a supervisory authority. The authority responsible for private organisations established in Bremen is the Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Georgstraße 122–124, 27570 Bremerhaven, Germany, email: office@datenschutz.bremen.de.

You are not legally required to provide personal data when browsing this website. If you contact us, the information needed to respond is required in practice; without it, we may be unable to handle the enquiry. We do not use automated decision-making or profiling.