Privacy Policy for danielpindral.com

1. Who we are

The data controller is:
Daniel Pindral
Bremer Str. 199
21073 Hamburg
Germany

Contact for data protection matters:
E-mail:  contact@danielpindral.com
Website:  https://danielpindral.com

The competent supervisory authority for data protection is located in: Hamburg, Germany.
If in doubt about the competent authority, the data subject may lodge a complaint with the supervisory authority in the place of their habitual residence, place of work, or place of the alleged infringement (Article 77 GDPR).

2. What data we collect and for what purpose

2.1 Comments on the website

When you leave a comment on the website, we collect:

• data from the form (name, email, comment content),
• IP address,
• browser information (user agent).

Purpose: prevention of spam and abuse, comment moderation.
Legal basis: Article 6(1)(f) GDPR (secure and proper functioning of the website, legitimate interest of the controller).
Retention period: comments and their metadata are stored indefinitely to automatically moderate future posts.

2.2 Gravatar

Your email may be anonymized (hashed) and sent to the Gravatar service to display your avatar.
Gravatar privacy policy:  https://automattic.com/privacy/.

If you do not want your email to be sent to Gravatar, you may choose not to leave a comment or use a different email address.

2.3 Newsletter and ReprogramPKD™ guides

When you sign up to receive our free nutritional guides (about potassium, sodium, phosphorus, and other nutrients), we process your email address for the following purposes:

• sending the requested PDF materials,
• sending further free educational content,
• providing information related to the ReprogramPKD™ project (e.g., new materials, updates, educational events).

Legal basis: Article 6(1)(a) GDPR (consent).
You may withdraw your consent at any time using the unsubscribe link in the footer of each email or by contacting us via email. Withdrawal of consent does not affect the lawfulness of processing before its withdrawal.

Double opt-in: after signing up, we send a confirmation email with an activation link. You are added to the newsletter only after confirmation.

Retention period:
Newsletter sign-up data and educational materials are stored:

• until you unsubscribe from the newsletter (withdraw consent), or
• until the ReprogramPKD™ project ends.

After withdrawal of consent, data is deleted or anonymized unless applicable law requires longer retention.

2.4 Cookies

We use cookies and similar technologies. Cookies are small text files stored on the visitor’s device.

Cookie categories used on the website:

1. Essential (technical) cookies

• Example: cookies to remember data when commenting, user session, security.
• Purpose: provide basic website functionality, enable use of forms and comments.
• Legal basis: Article 6(1)(b) GDPR (performance of actions at the request of the user before entering into a contract) or Article 6(1)(f) GDPR (secure operation of the website).
• Retention period: until the session ends or for the technically necessary time.

1. Analytical cookies

• We do not use external analytical tools such as Google Analytics, Matomo, or similar.
• We do not track user traffic using analytical tools outside the website system.
• If we implement analytics in the future, corresponding information will be added to this policy, and the tool will be activated only after consent is given in the cookie banner.

1. Marketing and tracking cookies

• We do not use advertising, tracking pixels, or remarketing (e.g., Meta Pixel, Google Ads).
• If we implement such tools in the future, corresponding information will be added to this policy, and tools will be activated only after consent is given in the cookie banner.

Consent management:
We display a cookie banner that allows you to give consent for analytical and marketing cookies. You can change cookie settings at any time in your browser or in the cookie settings on the website (if a consent management tool is used).

Blocking analytical and marketing cookies does not affect basic website functionality, as we do not use them in the current configuration.

2.5 Embedded content (including YouTube)

The website may contain embedded materials from other sites, such as YouTube videos. These sites may collect data about your activity, including IP address and device information.

• YouTube is embedded in privacy-enhanced mode, which limits data collection until the video is played.
• Nevertheless, once the video is played, YouTube may process user data.
• YouTube privacy policy:  https://policies.google.com/privacy.

Legal basis for embedded content: Article 6(1)(f) GDPR (legitimate interest of the controller in providing educational content), and in case standard mode is used – Article 6(1)(a) GDPR (consent).

3. Recipients of data (where your data goes)

Your personal data is not intentionally transferred to third parties, except as specified in this policy.

3.1 Email service provider – MailerLite

For the purpose of sending the newsletter and guides, your data (email address and possibly name) is transferred to our email service provider:

MailerLite
Entity: MailerLite AB
Address: Norrtäljevägen 92, 192 63 Sollentuna, Sweden
Website:  https://www.mailerlite.com
Privacy policy:  https://www.mailerlite.com/privacy

We have a data processing agreement (Article 28 GDPR) with this entity, which guarantees appropriate data security.

MailerLite acts as a processor on behalf of the controller. Data is processed only according to our instructions and for the purpose of delivering the newsletter.

MailerLite may store data on servers outside the EEA (e.g., in the USA). In such cases, the transfer is based on appropriate safeguards, including Standard Contractual Clauses (SCC) of the European Commission, and in accordance with MailerLite’s privacy policy.

3.2 Other recipients

Data may be transferred to:

• public authorities, based on legal provisions,
• hosting and technical service providers, if necessary for the website operation and with a data processing agreement in place.

In each case, we ensure that the recipient is obligated to protect the data and process it only according to our instructions.

4. How long we keep data

• Comments and their metadata: indefinitely, for automatic moderation of future posts.
• Newsletter data and guides: until you unsubscribe from the newsletter (withdraw consent) or until the ReprogramPKD™ project ends.
• Analytical and marketing cookies: we do not use external analytical or marketing tools, so we do not store data based on such cookies.
• Essential technical data: only for the time necessary to perform the function (e.g., until the session ends).

After the retention period expires, data is deleted or anonymized unless applicable law requires longer retention (e.g., tax or civil law requirements).

5. Your rights

With regard to processing of your personal data, you have the right to:

• access your data and receive a copy,
• rectify (correct) your data,
• erasure of data (“right to be forgotten”),
• restrict processing,
• object to processing,
• withdraw consent at any time (without affecting the lawfulness of processing before its withdrawal),
• lodge a complaint with a supervisory authority for data protection.

In Germany, the competent authority is usually the Beauftragter für Datenschutz und Informationsfreiheit des Landes Hamburg.
If you live, work, or believe the infringement occurred in Poland, you may lodge a complaint with the Polish authority – the President of the Office for Personal Data Protection (PUODO).

Contact for exercising your rights:
E-mail:  contact@danielpindral.com

6. Data security

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, alteration, or disclosure, including:

• encryption of connections (HTTPS),
• limited access to data only for authorized persons,
• data processing agreements with service providers processing data (including MailerLite).

7. Changes to this privacy policy

We reserve the right to update this privacy policy. The latest version is always available at:
https://danielpindral.com/privacy-policy
(if the path changes, adjust the link).

In case of significant changes, we will inform newsletter subscribers.

8. Contact

Any questions regarding this privacy policy and data protection can be sent to:
E-mail:  contact@danielpindral.com
Address: Bremer Str. 199, 21073 Hamburg, Germany.