This Privacy Policy outlines how Jonas Alexander Grodhues ("I," "me," or "my") collects, uses, discloses, and protects personal information through the website www.jonasalexandergrodhues.com (the "Website"). This policy is designed to comply with applicable privacy laws in the European Union (EU), Switzerland, the United Kingdom (UK), the United States (USA), Canada, Australia, and New Zealand, including but not limited to the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), and the Privacy Act 1988 (Australia).

1. Data Controller and Contact Information

I, Jonas Alexander Grodhues, am the data controller responsible for your personal information. You can contact me at:

Name: Jonas Alexander Grodhues
Email: info@jonasalexandergrodhues.com
Phone: +49 176 65 185514
Address: Fechingerstraße 43a, 66271 Bliesransbach, Germany

2. Personal Information I Collect

I may collect the following types of personal information when you interact with the Website:

Information You Provide: Name, email address, phone number, or other details when you contact me via forms, email, or phone.
Automatically Collected Information: IP address, browser type, device information, operating system, and browsing behavior (e.g., pages visited, time spent) collected via cookies or similar technologies.
Third-Party Information: Information from analytics providers (e.g., Google Analytics) or social media platforms if you interact with my Website through those services.

3. How I Use Your Personal Information

Your personal information is used for the following purposes:

To respond to your inquiries or provide services you request.
To improve the Website's functionality and user experience.
To analyze Website usage through analytics tools.
To comply with legal obligations (e.g., tax or reporting requirements).
To send marketing communications, where you have provided consent (where required by law).

4. Legal Basis for Processing (EU, UK, Switzerland)

Under GDPR, UK GDPR, and Swiss data protection laws, I process personal information based on the following legal grounds:

Privacy Policy for JonasAlexanderGrodhues.com

Effective Date: May 1, 2025

Consent: Where you have explicitly consented (e.g., for marketing emails).
Contract: To fulfill a contract or take steps at your request before entering a contract.
Legitimate Interests: For purposes such as improving the Website or preventing fraud, provided your rights do not override these interests.
Legal Obligation: To comply with applicable laws.

5. Sharing Your Personal Information

I may share your personal information with:

Service Providers: Third-party providers (e.g., hosting services, analytics providers) that process data on my behalf under strict data protection agreements.
Legal Authorities: When required by law or to protect my legal rights.
Business Transfers: In the event of a sale, merger, or acquisition of my business, your data may be transferred as part of the transaction.

I do not sell your personal information to third parties.

6. International Data Transfers

Your personal information may be transferred to and processed in countries outside your jurisdiction, including the USA, which may have different data protection laws. I ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) for transfers from the EU, UK, or Switzerland, to protect your data.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information I hold about you.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data, subject to legal exceptions.
Restriction: Limit how I process your data in certain circumstances.
Portability: Receive your data in a structured, machine-readable format.
Object: Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent: Withdraw consent at any time where processing is based on consent.
Do Not Sell (USA): Under CCPA, opt out of the sale of your personal information (note: I do not sell data).

To exercise these rights, contact me at info@jonasalexandergrodhues.com. I will respond within the timeframes required by law (e.g., 30 days under GDPR/CCPA).

8. Cookies and Tracking Technologies

The Website uses cookies and similar technologies to enhance user experience and analyze usage. You can manage cookie preferences through your browser settings or a consent management tool (if provided). For more details, see my Cookie Policy.

9. Data Security

I implement appropriate technical and organizational measures to protect your personal information, such as encryption, access controls, and secure hosting. However, no system is completely secure, and I cannot guarantee absolute security.

10. Data Retention

I retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. For example:

Contact form data is kept for 12 months unless required for ongoing communication.
Analytics data is retained for up to 26 months (Google Analytics default).

After this period, data is securely deleted or anonymized.

11. Children's Privacy

The Website is not intended for individuals under 16 (or the applicable age in your jurisdiction). I do not knowingly collect personal information from children. If I become aware of such data, I will delete it immediately.

12. Third-Party Links

The Website may contain links to third-party websites. I am not responsible for the privacy practices of these websites. Review their privacy policies before providing personal information.

13. Complaints

If you have concerns about how I handle your personal information, please contact me at info@jonasalexandergrodhues.com. You may also lodge a complaint with a supervisory authority in your jurisdiction, such as:

EU: Your local data protection authority (e.g., CNIL in France, ICO in the UK).
Switzerland: Federal Data Protection and Information Commissioner (FDPIC).
Canada: Office of the Privacy Commissioner of Canada.
Australia: Office of the Australian Information Commissioner (OAIC).
New Zealand: Office of the Privacy Commissioner.

14. Changes to This Privacy Policy

I may update this Privacy Policy to reflect changes in law or my practices. Updates will be posted on this page with a revised effective date. If required by law, I will notify you of significant changes.

15. Jurisdiction-Specific Information

California (CCPA)

Under the CCPA, California residents have the right to know what personal information is collected, used, or disclosed, and to opt out of sales (I do not sell data). You may request this information twice per year free of charge.

Canada (PIPEDA)

I adhere to PIPEDA's principles of accountability, consent, and safeguarding personal information. You may request access to or correction of your data.

Australia and New Zealand

I comply with the Australian Privacy Principles (APPs) and New Zealand's Privacy Act 2020, ensuring transparency and secure handling of personal information.

For any questions about this Privacy Policy, contact me at info@jonasalexandergrodhues.com.