Privacy policy
This privacy policy explains which personal data is processed when you visit this website and when you get in touch. In short: this website uses no cookies, no tracking and no analytics services, and it does not load fonts or scripts from third-party servers.
1. Controller
Mark Guennewig
easy-wp · Web development
Thongpan Village, 114/2 Moo 2
Soi 2, Taweratpakde Road
Mae Nam, Ko Samui, Surat Thani 84330
Thailand
Email: hello@easy-wp.net
2. Hosting
This website and the mailbox hello@easy-wp.net are hosted by Hostatom (29th Floor, Offices at Central World, 999/9 Rama 1 Road, Bangkok 10330, Thailand). The servers are located in a data centre in Thailand. Hostatom processes the data solely to provide the website and the mailbox technically. The legal basis is my legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). For more information, see the Hostatom privacy policy.
3. Server log files
When you access the website, the server automatically stores information transmitted by your browser:
- IP address
- date and time of access
- page or file requested
- referrer URL (the page visited before)
- browser and operating system used
This data is used for technical operation, error analysis and defence against attacks. It is not combined with other data and is deleted after 90 days. The legal basis is Art. 6(1)(f) GDPR.
4. SSL/TLS encryption
The transmission of this website and of all form entries is encrypted. You can recognise this by the padlock icon and “https://” in your browser’s address bar.
5. Protection against attacks
To protect the website against attacks and misuse, I use the security plugin Wordfence, provided by Defiant, Inc., Seattle, USA. Wordfence checks requests to the website and in doing so processes in particular your IP address, the time, the requested address and the browser identifier. This data is stored on the website’s server.
In the case of suspicious requests, such as repeated failed login attempts, IP addresses may be transferred to Defiant servers in the USA to compare them with known sources of attacks. Defiant is certified under the EU-U.S. Data Privacy Framework. The legal basis is my legitimate interest in a secure website under Art. 6(1)(f) GDPR. For more information, see the Wordfence privacy policy.
6. Contact form
If you use the contact form, I process the details you enter: name, email address and your choice of project type, and optionally company, current website, budget, timeline and your message. Required fields are marked.
The details are sent to me by email and used solely to handle your enquiry and any follow-up questions. They are not additionally stored in the website database. The legal basis is Art. 6(1)(b) GDPR, as your enquiry relates to a possible project, and otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
To protect against spam, the form contains a field that is invisible to humans and checks how quickly it was submitted. No third-party services are used for this and no additional data is stored.
7. Contact by email
If you send me an email, I process your email address and the content of your message to handle your request. Emails are received and stored on Hostatom’s servers in Thailand. The legal basis is Art. 6(1)(b) or (f) GDPR.
8. Contact via WhatsApp
This website contains links to WhatsApp. No connection to WhatsApp is established when the website loads. Only when you click a WhatsApp link does WhatsApp or the WhatsApp website open, and WhatsApp’s privacy terms then apply.
The provider is WhatsApp Ireland Limited in Dublin, Ireland. Data may also be transferred to the parent company Meta Platforms Inc. in the USA. Meta is certified under the EU-U.S. Data Privacy Framework. Using WhatsApp is voluntary. Alternatively, you can reach me at any time by email or via the contact form. The legal basis for handling your message is Art. 6(1)(b) or (f) GDPR.
9. Local storage in the browser
This website does not use cookies. If you switch between light and dark mode using the toggle in the header, your choice is stored in your browser’s local storage (localStorage) so that it is kept on your next page view. Only the selected mode and an expiry time are stored. This information is not transferred to me or to third parties and is automatically discarded after twelve hours at the latest.
If you change the language using the language switcher, your browser’s session storage (sessionStorage) briefly notes which language you are switching from and to, so the transition can be shown. The entry is deleted as soon as the new page loads and is not transferred.
Both are strictly necessary for the functions you have expressly requested (Section 25(2) No. 2 TDDDG, German Telecommunications Digital Services Data Protection Act). You can clear the local storage at any time in your browser settings.
10. Fonts and scripts
Fonts and scripts are loaded directly from this server. There is no connection to Google Fonts, content delivery networks or other external services.
11. Backups
To protect against data loss, I regularly create backup copies of the website. The backups are stored on the server at Hostatom in Thailand. They contain no data from the contact form, as this is not stored on the website. The legal basis is Art. 6(1)(f) GDPR.
12. Processing outside the EU
This website is hosted in Thailand, and I work from Thailand. Your data is therefore processed in Thailand when you visit the website and whenever you get in touch.
There is no adequacy decision of the European Commission for Thailand. The level of data protection may therefore differ from that in the EU. Thailand has the Personal Data Protection Act (PDPA), which is based on the GDPR in essential respects.
When you contact me, the transfer takes place because it is necessary to handle your enquiry or to carry out pre-contractual measures (Art. 49(1)(b) GDPR).
13. Retention period
I only store personal data for as long as is necessary for the respective purpose. Enquiries that do not lead to a project are deleted no later than twelve months after the communication has ended. If a project is agreed, the statutory retention periods apply.
14. Your rights
You have the right at any time to:
- access to your stored data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
Right to object: Where processing is based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
An email to hello@easy-wp.net is all it takes for any request. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence or place of work (Art. 77 GDPR).
15. No automated decision-making
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.