PRIVACY POLICY
1. Controller Benjamin Ballicas Bundesstraße 31 20146 Hamburg, Germany Email: hello@benjaminballicas.com
2. Overview This Privacy Policy explains what personal data is collected in connection with this website, for what purpose, and how it is handled. It applies to this website, the contact form, the newsletter, and all services offered here.
3. Hosting (Framer) This website is hosted by Framer B.V., Overtoom 197, 1054 HT Amsterdam, Netherlands. When the website is visited, server log data is automatically collected, including the IP address, browser type, operating system, referring URL, and access time. This processing is carried out on the basis of legitimate interests (Art. 6(1)(f) GDPR) to ensure the technical operation and security of the website. Log files are stored for a maximum of 30 days and then deleted.
4. Contact Form (Tally) This website uses Tally (Tally So BV, Koningin Astridlaan 167, 9000 Ghent, Belgium) to operate the contact form. When a form is submitted, the data entered — such as name and email address — is transmitted to and stored on Tally’s servers. Tally processes this data as a data processor; a corresponding Data Processing Agreement (DPA) is in place. Further information can be found in Tally’s Privacy Policy at tally.so/privacy. Tally is a Belgian company, meaning the data remains within the European Union and no international data transfer concerns arise. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries) or, where explicit consent has been given, Art. 6(1)(a) GDPR. Data is retained only for as long as necessary to respond to the relevant enquiry and is not shared with third parties beyond what is required to operate the service.
5. Web Analytics (Google Analytics) Google Analytics is used on this website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyse how visitors use this website. The information generated (including a pseudonymous user ID and usage data) is transmitted to and stored on Google’s servers.
IP anonymisation is enabled, meaning the IP address is truncated within EU member states prior to transmission. This data may be transferred by Google to the United States on the basis of the EU–US Data Privacy Framework and Standard Contractual Clauses.
Legal basis: Consent (Art. 6(1)(a) GDPR). Consent may be withdrawn at any time by adjusting browser settings or using the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
Google’s privacy policy: https://policies.google.com/privacy
6. Newsletter (Substack) The newsletter is operated via Substack, Inc., 548 Market Street PMB 72296, San Francisco, CA 94104, USA. Subscribing to the newsletter via the link on this website results in a redirect to Substack’s platform. There, the email address and any additional information provided at sign-up are processed by Substack under its own privacy policy: https://substack.com/privacy This website only links to Substack; no email address is directly collected or stored here. Legal basis for the referral link: legitimate interest in communicating with the audience (Art. 6(1)(f) GDPR).
7. Social Media (Instagram) This website contains a link to an Instagram profile, operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Clicking this link leads to Instagram’s platform. No influence is exercised over how Instagram processes data there.
Further information can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/
Legal basis for the link: legitimate interest in public communication (Art. 6(1)(f) GDPR).
8. Social Media (LinkedIn) This website contains a link to a LinkedIn profile, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland. Clicking this link leads to LinkedIn’s platform. No influence is exercised over how LinkedIn processes data there. Joint responsibility with LinkedIn Ireland exists for the collection (but not the further processing) of data from visitors who interact with this LinkedIn profile, specifically for the creation of Page Insights (statistics).
Further information can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
Legal basis: legitimate interest in public communication (Art. 6(1)(f) GDPR).
9. Cookies This website uses cookies — small text files stored on the end device. The following are used: – Technically necessary cookies: required for the website to function correctly (no consent required). – Analytics cookies (Google Analytics): set only with prior consent.
Consent can be managed or withdrawn at any time via browser settings.
10. Data Transfers to Third Countries Some of the services used (Google Analytics, Substack) may transfer personal data to the United States. These transfers are carried out on the basis of the EU–US Data Privacy Framework (adequacy decision of 10 July 2023) and/or Standard Contractual Clauses approved by the European Commission.
11. Retention Periods Personal data is retained only for as long as necessary for the purposes described above, or as required by law. Contact form data is deleted once the relevant enquiry has been resolved. Server log files are deleted after 30 days. Data subject to statutory retention obligations (e.g. tax and commercial law: 6–10 years) is retained for the legally required period.
12. Your Rights Under the GDPR, data subjects have the following rights regarding their personal data: – Right of access (Art. 15 GDPR) – Right to rectification (Art. 16 GDPR) – Right to erasure (Art. 17 GDPR) – Right to restriction of processing (Art. 18 GDPR) – Right to data portability (Art. 20 GDPR) – Right to object (Art. 21 GDPR) – Right to withdraw consent at any time (Art. 7(3) GDPR)
These rights may be exercised by contacting: hello@benjaminballicas.com A complaint may also be lodged with a supervisory authority. The competent authority is: Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.
13. Updates to this Policy This Privacy Policy may be updated from time to time to reflect changes in data processing practices or legal requirements. Checking this page periodically is recommended. The date at the top of this document indicates when it was last updated.
1. Controller Benjamin Ballicas Bundesstraße 31 20146 Hamburg, Germany Email: hello@benjaminballicas.com
2. Overview This Privacy Policy explains what personal data is collected in connection with this website, for what purpose, and how it is handled. It applies to this website, the contact form, the newsletter, and all services offered here.
3. Hosting (Framer) This website is hosted by Framer B.V., Overtoom 197, 1054 HT Amsterdam, Netherlands. When the website is visited, server log data is automatically collected, including the IP address, browser type, operating system, referring URL, and access time. This processing is carried out on the basis of legitimate interests (Art. 6(1)(f) GDPR) to ensure the technical operation and security of the website. Log files are stored for a maximum of 30 days and then deleted.
4. Contact Form (Tally) This website uses Tally (Tally So BV, Koningin Astridlaan 167, 9000 Ghent, Belgium) to operate the contact form. When a form is submitted, the data entered — such as name and email address — is transmitted to and stored on Tally’s servers. Tally processes this data as a data processor; a corresponding Data Processing Agreement (DPA) is in place. Further information can be found in Tally’s Privacy Policy at tally.so/privacy. Tally is a Belgian company, meaning the data remains within the European Union and no international data transfer concerns arise. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries) or, where explicit consent has been given, Art. 6(1)(a) GDPR. Data is retained only for as long as necessary to respond to the relevant enquiry and is not shared with third parties beyond what is required to operate the service.
5. Web Analytics (Google Analytics) Google Analytics is used on this website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyse how visitors use this website. The information generated (including a pseudonymous user ID and usage data) is transmitted to and stored on Google’s servers.
IP anonymisation is enabled, meaning the IP address is truncated within EU member states prior to transmission. This data may be transferred by Google to the United States on the basis of the EU–US Data Privacy Framework and Standard Contractual Clauses.
Legal basis: Consent (Art. 6(1)(a) GDPR). Consent may be withdrawn at any time by adjusting browser settings or using the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
Google’s privacy policy: https://policies.google.com/privacy
6. Newsletter (Substack) The newsletter is operated via Substack, Inc., 548 Market Street PMB 72296, San Francisco, CA 94104, USA. Subscribing to the newsletter via the link on this website results in a redirect to Substack’s platform. There, the email address and any additional information provided at sign-up are processed by Substack under its own privacy policy: https://substack.com/privacy This website only links to Substack; no email address is directly collected or stored here. Legal basis for the referral link: legitimate interest in communicating with the audience (Art. 6(1)(f) GDPR).
7. Social Media (Instagram) This website contains a link to an Instagram profile, operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Clicking this link leads to Instagram’s platform. No influence is exercised over how Instagram processes data there.
Further information can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/
Legal basis for the link: legitimate interest in public communication (Art. 6(1)(f) GDPR).
8. Social Media (LinkedIn) This website contains a link to a LinkedIn profile, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland. Clicking this link leads to LinkedIn’s platform. No influence is exercised over how LinkedIn processes data there. Joint responsibility with LinkedIn Ireland exists for the collection (but not the further processing) of data from visitors who interact with this LinkedIn profile, specifically for the creation of Page Insights (statistics).
Further information can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
Legal basis: legitimate interest in public communication (Art. 6(1)(f) GDPR).
9. Cookies This website uses cookies — small text files stored on the end device. The following are used: – Technically necessary cookies: required for the website to function correctly (no consent required). – Analytics cookies (Google Analytics): set only with prior consent.
Consent can be managed or withdrawn at any time via browser settings.
10. Data Transfers to Third Countries Some of the services used (Google Analytics, Substack) may transfer personal data to the United States. These transfers are carried out on the basis of the EU–US Data Privacy Framework (adequacy decision of 10 July 2023) and/or Standard Contractual Clauses approved by the European Commission.
11. Retention Periods Personal data is retained only for as long as necessary for the purposes described above, or as required by law. Contact form data is deleted once the relevant enquiry has been resolved. Server log files are deleted after 30 days. Data subject to statutory retention obligations (e.g. tax and commercial law: 6–10 years) is retained for the legally required period.
12. Your Rights Under the GDPR, data subjects have the following rights regarding their personal data: – Right of access (Art. 15 GDPR) – Right to rectification (Art. 16 GDPR) – Right to erasure (Art. 17 GDPR) – Right to restriction of processing (Art. 18 GDPR) – Right to data portability (Art. 20 GDPR) – Right to object (Art. 21 GDPR) – Right to withdraw consent at any time (Art. 7(3) GDPR)
These rights may be exercised by contacting: hello@benjaminballicas.com A complaint may also be lodged with a supervisory authority. The competent authority is: Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.
13. Updates to this Policy This Privacy Policy may be updated from time to time to reflect changes in data processing practices or legal requirements. Checking this page periodically is recommended. The date at the top of this document indicates when it was last updated.